{"report_id":"c6b1d769-0ca1-4c87-958c-c725900614b8","version":6,"status":"done","tags":[],"date":"2026-02-02T12:11:44Z","url":{"schema":"http","addr":"check-wallet.org","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"title":"AMLBot - The full-fledged crypto compliance solution","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"check-wallet.org","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T12:11:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-02T12:11:19Z","timestamp":1770034279,"ip_dst":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38278,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)","source":"{\"timestamp\":\"2026-02-02T12:11:19.682785+0000\",\"flow_id\":1102889961868933,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":38278,\"dest_ip\":\"172.67.75.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2061044,\"rev\":1,\"signature\":\"ET INFO Observed External IP Lookup Domain Domain (api .country .is in TLS SNI)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_03_25\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2025_03_25\"]}},\"tls\":{\"sni\":\"api.country.is\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":916,\"bytes_toclient\":3517,\"start\":\"2026-02-02T12:11:19.675461+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"api.check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"api.check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"check-wallet.org","ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-02T11:20:38.251884Z","last_seen":"2026-02-02T11:20:38.251884Z","alert_count":88,"request_count":44,"received_data":5346522,"sent_data":19821,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Creatium","description":"Creatium is a website builder developed in Russia that provides a user-friendly drag-and-drop interface and a variety of customisation options for creating websites without coding knowledge.","website":"https://creatium.io","common_platform_enumeration":"","icon":"Creatium.svg","categories":["Page builders"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":8,"received_data":149798,"sent_data":4414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.creatium.app","ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-05-05","domain_rank":0,"first_seen":"2022-06-12T21:56:36Z","last_seen":"2026-02-02T11:20:38.872487Z","alert_count":0,"request_count":5,"received_data":173118,"sent_data":2603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.check-wallet.org","ip":{"addr":"172.67.157.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-02T11:20:38.254631Z","last_seen":"2026-02-02T11:20:38.254631Z","alert_count":2,"request_count":1,"received_data":790,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":1,"received_data":76725,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.country.is","ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2026-01-31T20:45:01.208105Z","alert_count":0,"request_count":1,"received_data":643,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/nodes.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc45b3256d151219bbf65c029302a6d","sha1":"02dd1debb629b95672ed50e1d8fdc59d8a3ebcec","sha256":"77b2bf53781ea091303539988badedf0531333c82d47b206e6253a28d7d6c968","sha512":"992d2ddc464056367a46edf31982fe4217aa3fbbfdd0a7c11209ccf223941c3b8921fe07efe8eddc16d13fccebb237fbd8fbee8e2dd1b4f510d59461ec4766c8","ssdeep":"768:Se6nI82YF2vNbevtCJj0QShvnZqxdaA4/Y//sFBREW6KCSYz+q//M7j/3BRqIlzs:S1I82YF2vNbevtEShBq07j/3/Z582YB","tlshash":"8213a5d8b084385208ef3077517fa90db17a79bd9c475640e467a2b44f7ca9a2327fac","size":44656,"data":"","first_seen":"2023-03-13T09:26:45Z","last_seen":"2026-03-28T05:37:22.537686Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/bundle.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b90563facc19fb208871fde24fcfb84f","sha1":"519f0088e232a48777ee5e035376919ba45190cf","sha256":"57a58277c60eddb3c190b2138eda6112f2afc04552420c3f406e8f0035ead892","sha512":"d1b67130498855c8aeae8c09a7114a0f09588c9ab94e24a76863738b7ee10d5e6c37449d7d8753408eb6e93e664978e97af80cb158237838d1fe4897f787aac1","ssdeep":"49152:O6ZZtdTCRtqQAHgT+btevp3omecZS4GgJ+qo:TDbteFecE4GgE","tlshash":"53d5198473a5f062879624e0043b500eb23eba2da84d516cf758e8f77db99c5963bf34","size":2840076,"data":"","first_seen":"2025-07-07T04:38:39.199202Z","last_seen":"2026-06-10T12:57:40.34842Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors-async.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f8676cc480325057850820976f4b6c9","sha1":"6e2338f5ad326372c62f2172ab45b331b1c7b39f","sha256":"56436e75a0400e82967d0e69bb2fea0aabd21384ac62cd14c85feb912022f50e","sha512":"4bc90cac320b28836e9ab7bac50553615a8679dc9a3bc631d5123f49fd1c1dc943acecacc0c54daa5cf37b0fc94a1549d9661eb3773ad6edf135364c2bb0ab2c","ssdeep":"3072:VL7O7Rw318Xskt6EORvevbj8WbIB5dXry6AspHG:VL7O7Rw31Zkt6EORvobj8WbIB5dXry6E","tlshash":"cbb33a9b765070b642b718a0925f420ee136a526f40284f2b56cd8d45ef4fcd21ebfeb","size":116323,"data":"","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-05-30T20:59:10.69127Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/sweetalert2.min.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17ddf58e6e56eeca45c495746c5413a8","sha1":"ee3c42c4ce47676cb10202f282ba52e182365282","sha256":"0492ab87176483c27d8ed76b1971d10801087591ffaa9fefea873ea67e2b1791","sha512":"07cec35d93df83d9b1cba6232f6ead05257d7f4844b4d64f35d25997e6409001e489dc62fb3151eb36402e45c205988358f2654f95d117530a4d5f4916397709","ssdeep":"768:ULMb35Dw1DB9v0tWPupOTc60PiXm/b9yNghGwRjn1AUhqKTVZTev+nTCCYmEyy5m:UwG1f0MP8bBWKP5noyvjUA+lgj","tlshash":"6b233d621600b0331afb05eab4b5c246fa350568b80ac960b46c8dd52abfd4356f3f7f","size":46646,"data":"","first_seen":"2024-09-28T07:47:56.236053Z","last_seen":"2026-06-10T12:57:40.322641Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2df089f833e4c6ab81dd072f71de8157","sha1":"45fb05124549d8020b73365eee31d2c2b5df7996","sha256":"65fa573215c36c03451efcb811414fc48b859de1d1b48c422b334d6fae0ad520","sha512":"10960de9ce3d2645069d976540b551f1fe7c5adcb7f97c8a3abe553b6a171b974758c9a640240daebe29965eb538aaf43fdf21a448d748e6ba1fe0445eb124d6","ssdeep":"","tlshash":"2541bc24e8b18da30996313a5f6fa701722083530d99bc6c7b1c464d5f6d61f42667f9","size":2184,"data":"","first_seen":"2026-02-02T11:20:43.694489Z","last_seen":"2026-02-03T08:44:08.492849Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27ecf4a32f43ad5b603f23af2a9e01e1","sha1":"454d7800b9996003318f653683d33334f1042ec9","sha256":"c627d1c7f7c27d96807c228fe68eed06c8f7a44a517d6ea5ae2eff3459bbb655","sha512":"4d0242e64aa3fa53a503d5f090d8be571d0ecd5d9092c6e74261ccd31dbe367d6c26719e80d90016ddf7db9de4b239f28ed9f21b13e6a81af3509fbb378e0d67","ssdeep":"96:mbqxxveQohLl5C083m8rO8gmNwONXOYc/xm8sXxrS87XQrh8aXQrhNWXQrAxmqnp:pohLl5n828q8TNPN+YL838K8nNfq/m8H","tlshash":"5cc10be478d752234263a9af4f6fd60db5bb45230026b4437e6d85a0ff50ab287b0bd0","size":6056,"data":"","first_seen":"2026-02-02T11:20:43.696309Z","last_seen":"2026-02-03T08:44:08.494049Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5da87a9d96a6ffe11ec0591bd4e69def","sha1":"1b9ac9d0e221fe3d1f0ede240b0e144a92f3f3c1","sha256":"0b7405d9e79af765409b7e0b501fe7c1e7e26af4bd12a0a18957fd5ffef709c1","sha512":"d1c90ef09568212faa0596091728c4fa83906414d7433df42ec434b2230834133db590e35ce14c61b8c0df3994cf7dc71ce3a7c3a937994010697d0ffefd4ae7","ssdeep":"","tlshash":"73d0222c02e0000202c2b0e830ae3e2e3c228003388008003a0eb3802f0b220008200f","size":281,"data":"","first_seen":"2026-02-02T11:20:43.699006Z","last_seen":"2026-02-03T08:44:08.495084Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2979e7001f93a9ecfb67eabbefaf4acc","sha1":"af3048eea1c574fda75843751ecf3bf44961a1e1","sha256":"024d4e69056ed25565a44c797c54a13194c30934129108a0d6cd516497d333bb","sha512":"3e78d81d0af5717d45eea9d4477a34d5a8a02a28bb7abfea2bcc7dec4564466892d6af01eb5aa4a1436c75361bb8b1e436ca5a07595ae3d82be872881aa01148","ssdeep":"192:JSDrQL7qZzGsGKbGPGiMu3EbBEaHxGUfn0WPGDJ8k:JuM7qYLKKeiH3c+aHcbbd5","tlshash":"35f164c9ba957030935b42b7472f4306e73625ae641840fcb8b8dce9acb5855933bb34","size":8065,"data":"","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-06-15T06:48:51.763885Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/web3-loader.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6c178a94133435bd34a5c6ab66258a1","sha1":"7968e637ed344aa6d622c7b416056cbbfbd7cebd","sha256":"ddaeb955056d2b6a7f68f0f428e58cff79c0cda698bc63fc562854da16f9aa41","sha512":"24ec2e979f3412d47e425f1fd32d9d806dc685a6170c54e0cb2b8ff69e41d74d685ec239aac59c548347b74db1a31302878e5f9e78d31e56115f2a2676d0a19b","ssdeep":"192:+sD3nOiECwjMbK0k9tkg1T0s6RNjiPD8jkNYOGqCfKdhhrzgbiGWNJ2pySODBQfO:hwkatPNR6gFvGB1kj0AuqBGyMkpgo5","tlshash":"96b253aa24f73131496ba45a9a1b91143439e0833d4edc743b9c83949fd59bc9ef3f88","size":24364,"data":"","first_seen":"2026-02-02T11:20:43.68474Z","last_seen":"2026-02-03T08:44:08.481955Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/cfg.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80d0f8324de3429e013d2f8f5483288","sha1":"06a9a8a21a364120783cedbec80e3194cb96c4d1","sha256":"8ddbe6fbddacc6f30cc1366a145a695a828b15d2a1a1b4afc52d36d24ace0600","sha512":"b43b5d467379e2a978454fd5626958cbb430e86f50a4be93e254b52cf54f3badfd0c3f1389e68c5dc745915b58fb1dd3910b23af05241629bb6a2b900f5122a4","ssdeep":"","tlshash":"a611864e14224bb303aec2c6d78aed11cc7743e03007d0d19cc86406b7e69da84f980f","size":1079,"data":"","first_seen":"2026-02-02T11:20:43.6604Z","last_seen":"2026-02-02T12:11:51.702297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ed6ac36645698e878c6c4200acd6598","sha1":"12e6add6844d4e51328563287041b1ed8bd67fc6","sha256":"e82b87d8b364e1f7f92fdad8ff56503143dafbed1d545080be0c1fee3ff8f4d6","sha512":"a4ff50da7aeca7232ae112b4e8bc3c9014a6ede8d0d919c224d2418f079b0f6c8abce88c13073afae44d96696dfe2b73f74207ee70b9437950d21dc221d2a4f7","ssdeep":"","tlshash":"1bc0222c80c0000200c2b8a830ae2e0f3830800330c008083a0ea3c00f8b2208c8200f","size":161,"data":"","first_seen":"2026-02-02T11:20:43.701287Z","last_seen":"2026-02-03T08:44:08.497282Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors-sync.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"155201625e812355c7863e5b218e5316","sha1":"bd8be1f3ef64685772c3b817e130248e52316279","sha256":"386d7d820a0a656f04876b33c8bd0d57d53dd331c77f73eaad75b22434b046c7","sha512":"72bc66675558f2a0033760f7a7edd5fcfb539ae288ad994f31acf959bc15948f2eb29d1c587729e390fad92faf157145e2b87f32626b3689f844c2a6d251e7a3","ssdeep":"1536:9ISX92GU4YFLMDGgbxsbBt2sCpq4c3e58gXw+yEwlkPdBtHKWNtG4aWB8izIKZLq:9Q3e5XdJHKWzTtLOETQ47GKNAy6","tlshash":"6fc319cd71c6b06257a7217600bf510ff23a1999bc4d8900f264e4e9bcb5a4e827bf6d","size":118773,"data":"","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-06-15T06:48:51.77039Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/default.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15118e000515cfbf15572fb8d51e2b7","sha1":"02e078944840dd5c6bbd57f257556cd89554407b","sha256":"0f55db1bef850ec8d17e75b9e7309994f6fc711194033f3950a6c9d280ea91aa","sha512":"14f518267905f160ca9cdac0f46006aad759f11297513c1ea50559f12efba417ee734c883e9d5296dd798c6a31d6208ac4f9eccce4c3467a3eade02a61c93a1e","ssdeep":"1536:DBZfripWASin8rac0vEYZQ9Sy4aQK9KHwU1w1UHYOz:FZfrHhOcOZQ9SytQLwU1Lz","tlshash":"abb32ac8b2a6356311a77033607fac057232647d9d161250e726dbee6eb8d85233bf2d","size":110178,"data":"","first_seen":"2023-10-19T10:37:49Z","last_seen":"2026-03-28T05:37:22.535969Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"check-wallet.org/app/4.2/delivery-builder?action=adaptive-sections\u0026key=5d8ef80407fbb11bc30d6cd1caf97c25","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /app/4.2/delivery-builder?action=adaptive-sections\u0026key=5d8ef80407fbb11bc30d6cd1caf97c25 HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAMAqW5fccnqMadh3duSiPvr8SqVpGcc678x6fyGoZml2LUaoRgBnpQMTfAOob4fwen04v39nom8FYO2wWc8RyA64q6tjQmppX%2F18jQZ\"}]}\r\ncf-ray: 9c7997283965568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-18T08:45:58.092861Z","times_seen":45429,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzAcuEIXEaFWBWXA4NoGd_Oo.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/k3k702ZOKiLJc3WVjuplzAcuEIXEaFWBWXA4NoGd_Oo.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 18:44:40 GMT\r\nexpires: Thu, 28 Jan 2027 18:44:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 408399\r\nlast-modified: Mon, 27 Apr 2015 23:46:23 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19196, version 1.1","md5":"8226663c0f9503f304dc7734e80585d8","sha1":"3c452fbdf61ec89f9e881e49a98c89804bf4c8a5","sha256":"cd01185f335d20e75286a45c3c44d4f9af567fff4c78dbf6ec414a60f3c602f8","sha512":"b66496d85541d2bb1b40b1bce114575a0eb97d3d3dcfe17cd83f88d5b877b26caa52d98376226f574ceb771d63dd5da1f9ce8b5f0f49324b88e4fc80d1b79dbf","ssdeep":"384:VqUxtGLTpt0WHC6Igcs5R9r+/OFrnOe8eOQ7z30kfZSeons6YrJ8+cGeWMgkF0:de9K4T6/0TOveTP0dfsbzcG7Pu0","tlshash":"2582d0af3f80bbeae3d4d3759757880c6304045d5c0b665a2e121ee0bd93d5b097232a","first_seen":"2023-05-21T15:10:38Z","last_seen":"2026-06-08T11:21:17.671858Z","times_seen":207,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":82,"dns":1,"connect":24,"send":0,"wait":8,"receive":3,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/app/sv?tech=1375151.1419473.240032\u0026url=%2F\u0026referer=","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /app/sv?tech=1375151.1419473.240032\u0026url=%2F\u0026referer= HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Up45XCtWhqX%2B%2FaZr%2BanK%2FvZNduxIpq4ab8OVDdyaed2UQc5Va4EL2dKAKb0wcGfv%2B14794GGxZkfIvhbwENmusKdLmBO7c2cN7quC4Pw\"}]}\r\ncf-ray: 9c799722d922568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-18T08:45:58.092861Z","times_seen":45429,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/cfg.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /dist/cfg.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 27 Jan 2026 20:43:20 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69792368-437\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dd9FIQpSDtJdcfwdeLazIa5B5vksJvqf9Er7sexZKKOo1W%2BrU2BSBaezrMFbAq11Vh40Kp8Gs6JIfLdKZgMo%2BTsoKPcnvh8V2%2Fv6W1w\"}]}\r\ncf-ray: 9c799722d924568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1079,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f80d0f8324de3429e013d2f8f5483288","sha1":"06a9a8a21a364120783cedbec80e3194cb96c4d1","sha256":"8ddbe6fbddacc6f30cc1366a145a695a828b15d2a1a1b4afc52d36d24ace0600","sha512":"b43b5d467379e2a978454fd5626958cbb430e86f50a4be93e254b52cf54f3badfd0c3f1389e68c5dc745915b58fb1dd3910b23af05241629bb6a2b900f5122a4","ssdeep":"","tlshash":"a611864e14224bb303aec2c6d78aed11cc7743e03007d0d19cc86406b7e69da84f980f","first_seen":"2026-02-02T11:20:43.6604Z","last_seen":"2026-02-02T12:11:51.702297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.creatium.app/fonts/ttnorms/343165_D_0.woff2","fqdn":"static.creatium.app","domain":"static.creatium.app","tld":""},"ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"creatium.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 08:25:57 GMT","end":"Sat, 28 Mar 2026 08:25:56 GMT"},"fingerprint":{"sha1":"EB:4F:26:FE:88:1F:BF:10:4E:6B:9A:CF:1A:64:23:3F:52:77:76:4C","sha256":"66:0F:1D:E2:14:95:36:02:F4:51:E9:27:1A:11:1D:C5:42:9E:42:DC:CB:EE:EF:8E:0F:6E:A5:DF:EB:B9:66:C1"}}},"request":{"raw":"GET /fonts/ttnorms/343165_D_0.woff2 HTTP/1.1\r\nHost: static.creatium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 12:11:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 36727\r\nLast-Modified: Sun, 17 Apr 2022 08:40:47 GMT\r\nConnection: keep-alive\r\nETag: \"625bd28f-8f77\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36727,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 36727, version 1.0","md5":"44c81f342bd57a95a1f787376719b6d8","sha1":"24c0bd76dc33c2f06bac5aa764d2d6c31185d283","sha256":"008154743af1b195c7d4b73c67101bc656d45219930c5206e3eb26499af222c4","sha512":"ebe3193bb5fc78eecf785ceca115df61c244be9ceed2636f897380b36dcc3b67a917c080996a5193812a52da97ac71ac3c0692e7c1df0d7052ee5ef698d0eef5","ssdeep":"768:tWGoGR4QbRyafNrJnr6qLLvITWQ8TBYvOoAJDT23SGZvPm/:iGwal5eqLLATBkByjAJDT23SGZni","tlshash":"f8f2e1094a845bb6d9348c38de1d2ac3f750b7e6c3514e0734b62afb436e6141aeadc9","first_seen":"2023-04-16T13:45:03Z","last_seen":"2026-06-09T22:00:46.495248Z","times_seen":76,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/sid_panda.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/sid_panda.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4960\r\nlast-modified: Wed, 26 Nov 2025 12:49:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f750-1360\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STai1xbPment%2FsXwLfshX9%2Bkgz461GTDL1DJeDT%2BpF7zRJBnK3Is0RncN3KkHf%2B%2BUm7TTSvNHbyuA%2Bbds4ar3Npc7k0nLSp4QFgKdgjm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972d39aa568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-06-02T09:19:28.522241Z","times_seen":515,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/huobi_white_ef112ac0.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/huobi_white_ef112ac0.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:12 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f748-be8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7H6mkJz52nFK%2BBTlqMS65hKKlz9WdNwGdUVmyZANfmMuLs5QeZpa6j7CuOfLqeLMhHgrLO521KPcYTm%2FkoNPXNzP%2BBBs2ndgYdOwPnh\"}]}\r\ncf-ray: 9c7997294975568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3048,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65924fc0d138c205eaadba4f53d04a61","sha1":"b0d1f59feba8f4c981f4d1845351c7ea664ec3b1","sha256":"054f78aea65883bc1f1b67f1508030a4f8522581918cfedc80a541db00058fa1","sha512":"6160b0ad4757125920803bc20b91f6480629603a0c879882b46d5a63fb9d9cc45cebb49d805bbcdb8d4d5e6fabbe51aa4531937a1325871a1a57c16e7688f745","ssdeep":"","tlshash":"575194c993cc93f8e805b3f40124947a263725f17a63c16883dc2ea5fd4615fc98cac8","first_seen":"2025-06-28T19:36:09.234114Z","last_seen":"2026-06-10T18:41:40.213984Z","times_seen":90,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/okx_white_32ece2b9.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/okx_white_32ece2b9.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:12 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f748-e2b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mS0DV9gECwjoGP65z1LpXSMlvpaPbtYdBYLJCDi8lwmBON5vwEqoivaguV%2F3W3W0zs%2Fq2ASupGaW7PQ4qADjx8AeagLu%2BLpi4cpM4fxd\"}]}\r\ncf-ray: 9c7997294974568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0c53aa999c88a232bf00d8d50dd8548","sha1":"07bf1f375a55a841b03a5f131efc62e2f9a8da7a","sha256":"e9b72ee47d139385ae90d6a8b4a1e0baccd2ea7697f75736b4fbf911cd3314d9","sha512":"da17d076133f4844a097c298e99a7a79d0c9983384b38778e09086362615fbc92e501107138ba5606f43ba82fc0c47d4b7eb7e92549de92911dd99ea9d70d7f0","ssdeep":"","tlshash":"1d71648597dcd1909343aff4c3247475aeb328e8db214a50c790ddbaf82549ecc89dc1","first_seen":"2025-06-28T19:36:09.240132Z","last_seen":"2026-06-10T18:41:40.317269Z","times_seen":92,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/binance_white_aed1452d.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/binance_white_aed1452d.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:10 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f746-1096\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLULmT6d2rtkCZbY8Z9MR5tuzbNFzzUPijrc3WRjifUQCFKY5m0hnQO9D4HZDepuboOha7u3kf8LNPGczcRsKv%2BWGhpVJofvO7kcsybw\"}]}\r\ncf-ray: 9c7997294973568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c476922d1280fbf708b441a94631de0","sha1":"c07b648faaf8fd519f06e28684f75066537a40b0","sha256":"4873562ac2ffd2ddfc86ed3daa0674640414fcc1393aac0637abe443c66a7a0a","sha512":"a7d8e7ee55d2988241f1fa7e8801a8b50e3b8d0bbb75eea3519b05cd35d8054f205720d680b5e4bf27acb39ed135b2d59f66b516bc365c84ed1758f98ffa7b9e","ssdeep":"96:d+hJ940X5BHxFsfY4LcIddQ5IP+xGsft660wd2:dWfX5lLswUk6P+Us0wd2","tlshash":"a291a5da63dca1a0c447e7756707107bbe2b6cf9be2ac790465a5c9ebe1009e4c9dcc0","first_seen":"2025-06-28T19:36:09.204961Z","last_seen":"2026-06-10T18:41:40.262405Z","times_seen":115,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/favicon.png","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\nlast-modified: Tue, 07 Nov 2023 14:56:48 GMT\r\npriority: u=6,i=?0\r\netag: \"654a5030-34a\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvGb7ahqfDrIwr2L9s%2Bk%2BiZDwNZQrzftx4vO8nzDFk4lx8HeusQHBE52BvQdcrgo6TPeW%2FyQUp3W3Zxvg3ew8CxryOcMvSeNN%2BXzF3Eh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972a497d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-06-10T18:41:40.208882Z","times_seen":300,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/2.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/2.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46866\r\nlast-modified: Wed, 26 Nov 2025 12:49:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74c-b712\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMQ%2FL7V6MvRtxk149l0idbDLuaWqnGiU0%2Bwg1FBpO7OAk6JEaTykfmk036S4g3nuwHzNNpSWswYSRAcXNiuPS%2Bw0qyLbJ%2BMsfyDSh8py\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972bb999568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8eb442f93c214a18a3c56bc74a394c81","sha1":"02fdc2270a08f2f88a49cacd4c7b00955920b5f1","sha256":"d9ee35d6e82899068f5786a054d17d468aa5342ed6e15d1d6bb8bd2ba49b74a9","sha512":"51e1e52cab7ec1902468de6193746ea6e0729971cc094c82c39ecb7a66dfbc09ba8fbb7812dabe436183631d0f3a6076722ed95408430fa44bb4ccc18344db2f","ssdeep":"768:HRjm4frnq3r+6m/PDHtYv2Cg87+glxihLjaTDPJSnH/MgVR/ALaXpj:HcursiPHQBgKlxiBrbVR/AmZj","tlshash":"cd23f23b521d91c33c51183b9a85e6193398014b86de9c631ad7fecb130a69d9dbaf28","first_seen":"2026-02-02T11:20:43.689217Z","last_seen":"2026-02-03T08:44:08.474681Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/vasily_vidmanov.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/vasily_vidmanov.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\nlast-modified: Wed, 26 Nov 2025 12:49:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74e-16b4\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFBBsf2O9dasR6uvDP%2Fn3KJKkTJoWPbAL58uJg4dW5adbIAjeBLpcEymVc5JcDGZ2pTJp6DF8dlppOk6wF4ZFOi12rlhSqxvm%2BMTaO8H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972d39a8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddbbf9cab745b9433bea6b2edc96096","sha1":"5d6c1060beabd56827c5441fea4d7cabdd59b70b","sha256":"3a3f8a7f6ccee1feb368a7a7c8d357a29156e35181772292242b6de2a053cf01","sha512":"7635535a1db3b572135119ca99e4beb6517af783ab9df43ee97535273c534e247610d7b7cfd123886fe73c8941deb68e4959daf394c91ffc8c85921f9af92729","ssdeep":"96:8WoZZT+fYdS4oDKOhMRDvHm4s6XepK3f/j+u63ygikCq6d+Lv1A+k2uos:8njOYdFoO7D/mv6RD+7jikCBQL9u3","tlshash":"efc1afd46f92c0bb00d1f848aabd189626bd77e1ee12112625c9690038d13a4625feef","first_seen":"2025-04-08T20:33:55.24233Z","last_seen":"2026-06-02T09:19:28.519205Z","times_seen":434,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/vendors.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:34 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbd2-d9be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2D81McY0akPtjcj6ZW1sk8PeIJ84UMpUYsYxYbp1lxN77aKyUAufzHJsr45QCkW3OTIMxhUawNOb%2F6xllPYDcR5XGPRDunNxxAU54LK\"}]}\r\ncf-ray: 9c799722d91b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55581)","md5":"c3ea32a3cd40e56e63fc08669fb6de7e","sha1":"394496533e044cbef7c757925551493a4327d9f7","sha256":"79c55eed3304eb857af1057c9fc55a2d127d7bd6eec9b88d4da233a8294034ef","sha512":"f51ac665f81790bac3f2aa3ea1a531883c10c90c2df83fbcce72b73541b38392d9a947b55a0d04b3e442d9e9bb381499713350947b81709e3c35b3fd2048d020","ssdeep":"768:IkZlIbIM6oFmIwIuIHwO1CA5kiDb3CyQ5xrQe/0STbsysV:IkZrIHwO1CA5kiDb3CyQ5xrQe/0STa","tlshash":"2d4314af5891229991674f6283dc4e68872dc67714621cde33816c8b8f87f9f33da607","first_seen":"2023-07-13T05:03:34Z","last_seen":"2026-06-15T06:48:51.761355Z","times_seen":55,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.creatium.app/fonts/raleway/900.woff2","fqdn":"static.creatium.app","domain":"static.creatium.app","tld":""},"ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"creatium.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 08:25:57 GMT","end":"Sat, 28 Mar 2026 08:25:56 GMT"},"fingerprint":{"sha1":"EB:4F:26:FE:88:1F:BF:10:4E:6B:9A:CF:1A:64:23:3F:52:77:76:4C","sha256":"66:0F:1D:E2:14:95:36:02:F4:51:E9:27:1A:11:1D:C5:42:9E:42:DC:CB:EE:EF:8E:0F:6E:A5:DF:EB:B9:66:C1"}}},"request":{"raw":"GET /fonts/raleway/900.woff2 HTTP/1.1\r\nHost: static.creatium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 12:11:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 21680\r\nLast-Modified: Sun, 17 Apr 2022 08:40:34 GMT\r\nConnection: keep-alive\r\nETag: \"625bd282-54b0\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21680,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 21680, version 3.0","md5":"76c50ababa307bf7ce238fcda3ee29c7","sha1":"387869e5e8cd73aa29b6b41baa327e7d5a7e9642","sha256":"14f7c71e37341abd38129520d212374cc27ce7a54acc95fe05470b53ccabfcc5","sha512":"c5c53f6f146d6fb33d54725fd621f20419f4e921247b4b5bbd09759e7a3bbc5b7e2b36a25cc42884da65e646aff622832a39a1872d0dc2cd0d7111f1289389bd","ssdeep":"384:uyM8sJo7R6XNTv/8KpAQYF2ZR92huE4JIF27aFW9wFYv7l8y7A5krplGjV:ujhm76NTv/8KpAvsUYBJIQ7a0SFYv58l","tlshash":"b3a2e1a8b05cd325d14f4ca579abd936b2c341decff88115715a3673e22cfa8565d880","first_seen":"2023-07-10T19:09:44Z","last_seen":"2026-05-02T14:15:52.108978Z","times_seen":8,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors-async.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/vendors-async.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:51:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f7e0-118bc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSQggvoXYAEeh94OaNXRQtfQsRudN5IUK2bjqDUDgl1ba1HpdejETVsSBC3O2YMpJwh83AnmM31YXr8KtCgCpEWQ8NCcEylu6OUx%2BqAp\"}]}\r\ncf-ray: 9c7997283960568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50971)","md5":"590d973b843a3f2038464eba375f0ef8","sha1":"aa21ada15cac94fff3fb2a7e2e9c6355c9858d2b","sha256":"945689176bf268b10fd9defe102bb3b4d971f15f41de65e35e5c1aaee7064361","sha512":"a89f00e6d501f58a1261305bb428a07539ddd7f5367efc19ea40d9c6583f85aa9964e54d158d693557001c613c28c56ff945237100c2e765e01e96e4f144e674","ssdeep":"768:rIIpqMtCtNzzGv/r7Z2bumC31sPizPq4/vBUAUHJUkQdR/WMQyYJrX75CsmZQzaU:V6Gv/XmTPUC4/pMHGBdcfd7ssjGdlg","tlshash":"0863a6b5e44811c96732c44bff86b27ca1b6f73ce5910d96f00ead1c5ad27a811c4faa","first_seen":"2023-07-13T05:03:34Z","last_seen":"2026-05-30T20:59:10.679418Z","times_seen":85,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors-async.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/vendors-async.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:51:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f7e0-1c663\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKSa%2FbUsuJvmK6Njx3HCCIlts0uZ5TBOUiV1CqEXG3kJuiXwvl%2FaB1C%2Fxinrm5J%2FaT6%2FO8f%2BTSV7Aa7gFS1pnzjLbBLtNAifKi4oHY%2FU\"}]}\r\ncf-ray: 9c7997283963568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"6f8676cc480325057850820976f4b6c9","sha1":"6e2338f5ad326372c62f2172ab45b331b1c7b39f","sha256":"56436e75a0400e82967d0e69bb2fea0aabd21384ac62cd14c85feb912022f50e","sha512":"4bc90cac320b28836e9ab7bac50553615a8679dc9a3bc631d5123f49fd1c1dc943acecacc0c54daa5cf37b0fc94a1549d9661eb3773ad6edf135364c2bb0ab2c","ssdeep":"3072:VL7O7Rw318Xskt6EORvevbj8WbIB5dXry6AspHG:VL7O7Rw31Zkt6EORvobj8WbIB5dXry6E","tlshash":"cbb33a9b765070b642b718a0925f420ee136a526f40284f2b56cd8d45ef4fcd21ebfeb","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-05-30T20:59:10.69127Z","times_seen":49,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/3_bebcce78.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/3_bebcce78.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f74a-dadf3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvV7%2FLbhnR3bTG8SV4v5%2FJaQoSxPhVIuyOvSlWPjv0K9XIemSdMoNU%2B0%2BYlwpQjObsqwdrQ41id70%2B12dY6EOCG9MdeqwvFzHSAvgxTx\"}]}\r\ncf-ray: 9c79972ba996568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-06-02T09:19:28.521261Z","times_seen":441,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/denys_shestak.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/denys_shestak.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19804\r\nlast-modified: Wed, 26 Nov 2025 12:49:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f752-4d5c\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o78peUQfPPqXhMIi2SArtEMr4IpPuoLkrB8TgrhPQ0k810%2FJww4MYXoZfmtzazTE%2BZbS0OwpfTr0u8oUlkFX5kwoF%2FZmUmTzj%2BPebkmo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ec9c4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-06-02T09:19:28.515604Z","times_seen":435,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/image_2023_10_28_01_16_17.png","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:21.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/image_2023_10_28_01_16_17.png HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4135\r\nlast-modified: Wed, 26 Nov 2025 12:49:24 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f754-1027\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgB%2F9pconyDx%2B%2BSAgV%2BWZ8Lsr1qiQgHPGzrpGCayBjEOAcj4jcYiYVWIngpk2EkxjN25qQO2AreD2fatJlUdhmRZHcI9g8v8hiwDT%2B17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79973069d0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 93, 8-bit/color RGBA, non-interlaced","md5":"2df70c99b844c9aefc244ec024c74fdb","sha1":"851c314c960fcb63c02d76b768c7e51c42bd00e1","sha256":"bd6b42eaa22dfeb282b261ac711279bc37ef4500f8679613b9fd2486084574cf","sha512":"3c2d2d56e125e2b420db653ae1cdf9cb913e050ca0d0f4ef9c3554663ee929517b3007a26f4ac8c0180b3e0d931b9399c79d1bf520adb9a0efecf29d7865b59f","ssdeep":"96:8Enk93+/hJ/w29Nk5urmCMwy4One9YSYZ2hbxQ7IYlpptF:Tkknv9e5jF4VtyVrF","tlshash":"87817e595f53af8bff2d6484486f53805216e2c158b773b28232e2e044a1cdfe2a8ec5","first_seen":"2026-02-02T11:20:43.674633Z","last_seen":"2026-02-03T08:44:08.48365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/3.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/3.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38804\r\nlast-modified: Wed, 26 Nov 2025 12:49:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74c-9794\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5AZ4ond2UhJRrlAy%2FX2LZc%2FKWI7CE92dZ7NRQfGhNytnwtMx%2FG2FzR3PolhkPGffpZEY14KXpaBvCooAaWc9ImXFJUL7os3%2Br91VyCH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972bb99a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"870b68f5cd629357af919d4dd61ea529","sha1":"358389a611f398dc9608a08ffdcceb3f840502da","sha256":"b732a9d66b5c94cc9108a8c31f7541e31a03e3086eaea374e426976512a47a3a","sha512":"0943cee3fafe9b8faeec081c10f341bef5e5c72965624530237e7a7db0fd035ca41fca37dbb72a5fbdc75d0f9f6efaf01d45f7283578457dbd087aa3a884b8ef","ssdeep":"768:2cEmhEVApBtaS2EwssiAQyKa4yPYhCbU1zG9oAWhiv+Zx9:27VAjV2hssRQy1fBg1zGdGf","tlshash":"a603f10ffec3da50df952871307598104e06b0ba875d2bab1af9264e30c2127ddf62e5","first_seen":"2026-02-02T11:20:43.654014Z","last_seen":"2026-02-03T08:44:08.475408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/sweetalert2.min.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /sweetalert2.min.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:51:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f7e0-5d08\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDXMwOeBaPAIVTsVWGfgZDb3LieuQIYUCCpXCVnv2Zv1Fs2GhrZcKUA%2BxLMRAZ9g57MJ%2FvbMnBfZ5vUMeoHopMqbpLa0Fnwt%2Far9Ic38\"}]}\r\ncf-ray: 9c799722c919568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23815)","md5":"ac6d6991f4d2169e9e9bb83706e04fe6","sha1":"e6d79d14083062b47f167695656357332be28e43","sha256":"2886470fa73a364934b60b2770778d370bcd5354d7f18ccfad89f4d65b50c058","sha512":"5b146fd26687f1a37abcd39c80d1658a68ce84aa7e094aaa368ba05dbcf413e0f6e203f98beed6fe071ce6d7a7c559abdbcac7f395c71797977a1a55d9342146","ssdeep":"192:CBh5CiH2Ib/m3oxsBVdX/TyLZDcsPstmFHiJQ3epAd/34JpG:CBD2IrhssFAsPstmQu3Mu/ofG","tlshash":"d7b2f8a1aa88e017f67a822f59c0e60875d9e60bfdf3085df414d1408fd7e5f3a792a4","first_seen":"2024-07-24T13:10:03Z","last_seen":"2026-06-18T10:18:52.232444Z","times_seen":310,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/sweetalert2.min.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /sweetalert2.min.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:51:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f7e0-b636\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wmFqdnDEq6iCNVinKROdLRB0dG5wVyj2%2BtmiHMiJZfTNtGXuZCmi0qGvUJAEhRIdbFQMxzt9G9G9SrTm6A%2FgcG0l1Q3HSeDBqdB4EtI\"}]}\r\ncf-ray: 9c799722c91a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46581)","md5":"17ddf58e6e56eeca45c495746c5413a8","sha1":"ee3c42c4ce47676cb10202f282ba52e182365282","sha256":"0492ab87176483c27d8ed76b1971d10801087591ffaa9fefea873ea67e2b1791","sha512":"07cec35d93df83d9b1cba6232f6ead05257d7f4844b4d64f35d25997e6409001e489dc62fb3151eb36402e45c205988358f2654f95d117530a4d5f4916397709","ssdeep":"768:ULMb35Dw1DB9v0tWPupOTc60PiXm/b9yNghGwRjn1AUhqKTVZTev+nTCCYmEyy5m:UwG1f0MP8bBWKP5noyvjUA+lgj","tlshash":"6b233d621600b0331afb05eab4b5c246fa350568b80ac960b46c8dd52abfd4356f3f7f","first_seen":"2024-09-28T07:47:56.236053Z","last_seen":"2026-06-10T12:57:40.322641Z","times_seen":36,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/hovercss-async.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/hovercss-async.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:51:44 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f7e0-19e00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfsek94OitM6iQYA85c5dlMZOSN1AAwgFHVMN5Hc%2Fnd495vXUVPqwYz4NrvYdXHsVShlQ4QJ%2FTshTjesymchdl8BnXwVY0%2FWn8xPNLwC\"}]}\r\ncf-ray: 9c7997283961568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105984,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65203)","md5":"78d1e183f476f3d5edffefa095e80275","sha1":"9cbfee54eb25a67fdf72dabc2e5d2486c4f914a3","sha256":"697fcdc8c743245d755329c3e2199e34d0278ca820b3f981ca4ca2390face7e9","sha512":"f79066cde7f521592c5f2772ef04335d47e9c3423436a3deea0dd5bbf9a03a61168c892c43887a34c9fb6ecd90c9180f475a36ae9b773cffde936a1aa2d66cba","ssdeep":"1536:mB/B2iJfXfSsRx+yaDUF755Z8Z+CR8qguQNmxUMBrBL:GfXfSss","tlshash":"18a380e6d54222869117ce02c7cc5fa9d73cc663a7621cee731a650f874279e23cba17","first_seen":"2023-07-13T05:03:34Z","last_seen":"2026-05-01T01:33:27.330047Z","times_seen":41,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/vlad_raskosov.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/vlad_raskosov.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9688\r\nlast-modified: Wed, 26 Nov 2025 12:49:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f750-25d8\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDfQae88ij9Sqes1rkk6Di%2Bvwes1khMtspowRLELreYj9E6WMwgv1MULYWfls4awBlS%2BeNhPgxAMi1xr%2BhVR3pXnnexikZbIo0dCEUNg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ec9c3568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-06-02T09:19:28.527749Z","times_seen":435,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/vendors.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbda-1f81\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLDpkspssI3Yo%2BmsQ2imq3lb7vNdBHAwBD03cRLxrvZREQ%2FJPF2IEt%2BeV%2FIpUC%2BkHa4pSL2tnd87F9Gj0MU%2FUHF%2BaeKYG6xTpz%2F74SW%2F\"}]}\r\ncf-ray: 9c799722d91e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8065), with no line terminators","md5":"2979e7001f93a9ecfb67eabbefaf4acc","sha1":"af3048eea1c574fda75843751ecf3bf44961a1e1","sha256":"024d4e69056ed25565a44c797c54a13194c30934129108a0d6cd516497d333bb","sha512":"3e78d81d0af5717d45eea9d4477a34d5a8a02a28bb7abfea2bcc7dec4564466892d6af01eb5aa4a1436c75361bb8b1e436ca5a07595ae3d82be872881aa01148","ssdeep":"192:JSDrQL7qZzGsGKbGPGiMu3EbBEaHxGUfn0WPGDJ8k:JuM7qYLKKeiH3c+aHcbbd5","tlshash":"35f164c9ba957030935b42b7472f4306e73625ae641840fcb8b8dce9acb5855933bb34","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-06-15T06:48:51.763885Z","times_seen":54,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/vendors-sync.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/vendors-sync.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:48 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbe0-1cff5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2F%2FSMl0lQvAR3IwveSFdgGYTmj8udMdh1AemenlbjKZ44672unMNeRaBONKd8AVr3A%2BTeTzgl1xwBaZmOZMGRwMSso5spDVJq6rnlYyf\"}]}\r\ncf-ray: 9c799722d921568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118773,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"155201625e812355c7863e5b218e5316","sha1":"bd8be1f3ef64685772c3b817e130248e52316279","sha256":"386d7d820a0a656f04876b33c8bd0d57d53dd331c77f73eaad75b22434b046c7","sha512":"72bc66675558f2a0033760f7a7edd5fcfb539ae288ad994f31acf959bc15948f2eb29d1c587729e390fad92faf157145e2b87f32626b3689f844c2a6d251e7a3","ssdeep":"1536:9ISX92GU4YFLMDGgbxsbBt2sCpq4c3e58gXw+yEwlkPdBtHKWNtG4aWB8izIKZLq:9Q3e5XdJHKWzTtLOETQ47GKNAy6","tlshash":"6fc319cd71c6b06257a7217600bf510ff23a1999bc4d8900f264e4e9bcb5a4e827bf6d","first_seen":"2023-03-07T21:32:20Z","last_seen":"2026-06-15T06:48:51.77039Z","times_seen":54,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.creatium.app/fonts/ttnorms/343165_2_0.woff2","fqdn":"static.creatium.app","domain":"static.creatium.app","tld":""},"ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"creatium.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 08:25:57 GMT","end":"Sat, 28 Mar 2026 08:25:56 GMT"},"fingerprint":{"sha1":"EB:4F:26:FE:88:1F:BF:10:4E:6B:9A:CF:1A:64:23:3F:52:77:76:4C","sha256":"66:0F:1D:E2:14:95:36:02:F4:51:E9:27:1A:11:1D:C5:42:9E:42:DC:CB:EE:EF:8E:0F:6E:A5:DF:EB:B9:66:C1"}}},"request":{"raw":"GET /fonts/ttnorms/343165_2_0.woff2 HTTP/1.1\r\nHost: static.creatium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 12:11:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 40341\r\nLast-Modified: Sun, 17 Apr 2022 08:40:38 GMT\r\nConnection: keep-alive\r\nETag: \"625bd286-9d95\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40341,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40341, version 1.0","md5":"fc820fc0084be81bbe55a82f45bcf0a4","sha1":"f573a6a01f44b7cadb5ad0d2162d1f6e21333384","sha256":"0a67308db5bb355dce6b966a29ee1754c0efe0ee0555b5337dad9cfeb61f8415","sha512":"b142282e1f30796c3a27fce00962ca786079ba236575fc6dfdd7d55241e854a01dca4274aaa5c0423ae554dcbf6f176bdbbbfeefcfe645571a9f6ea1fe736016","ssdeep":"768:myDUXKl9JE1KbkaGh/MMxeGUHyGWc4jB688FOEThzs:iXKlXE1KbkVh/MYeZHy4oi0Shzs","tlshash":"1a03f196e79fabc49dab1fb1b2b376d903710d4d261c828e27f929f303a9c4914f0142","first_seen":"2025-07-07T04:38:39.215079Z","last_seen":"2026-02-03T08:44:08.470215Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":1,"dns":3,"connect":29,"send":0,"wait":74,"receive":2,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/cover.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/cover.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50502\r\nlast-modified: Wed, 26 Nov 2025 12:49:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f746-c546\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1dHn3RtxEPbQcnmZeZdvwmG1aX5DKwWIkGwiqIY%2BGREDyTKZmPouuCEGMl17rh56vdkqx2CPm%2Fwxn7qa2eBjdlON1%2Fozriqwlb3dPLP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7997294972568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50a6bd1ad6ea0ff610b8e578827d68cf","sha1":"22f3d97024f48cd64cffeed28972fba4d0234ec0","sha256":"73b8c5b1ebe19dbf27a5d7434b7787733d913b8f666ba0351795636a23c2bacc","sha512":"6b69538167a20c723574a7610075919a7322c7e65eaa7646163cd135c3872f1530bb662ada216c0dfc5098774616eaa2f9d82fe8ff4a3c5f57d90fa2709e636e","ssdeep":"1536:+OvFvgKbtd4ix9xP/5DK2zEpp2fJBqf43B:+OvFvPfVK9p2fJBLR","tlshash":"c333023382040144cc5a092731b909b13abcffa7e651a7e6d5d7309f4939baa729f6cd","first_seen":"2026-02-02T11:20:43.68635Z","last_seen":"2026-02-03T08:44:08.456388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/1.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/1.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57002\r\nlast-modified: Wed, 26 Nov 2025 12:49:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74c-deaa\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vz3lSoWA7nhS2%2BRs7TtaYTOwelrdye%2FAxUan27qo7Hvfora4ka0s68jGFQFPIPqQrljGU7Rx6mBBA7JN0bjyx0jvI5mtFBMCh0Efwyft\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ba997568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4bd0df40e76f3510a7ca0e64b06105c","sha1":"c4944b7d98995a6df06696b1082a57fa90256dc5","sha256":"10d48f94f5207807420971c6a9cf71aaf9a7dde129d2ad653850276c347e040d","sha512":"dc1d176d6f720dcfce8364d33d198943030746d8a04043687e530de28d894f2ad4f497a000721edeb569d85de6f62a1ccf8e903cb0ad888d4e2efcc4c505b8a4","ssdeep":"1536:nMdJNjxcfJ3eHJ0fhjNjLmvT3yh5UOFZpFm:MdJZxCReHCfhjg+ZO","tlshash":"f843f19a1cf5851cca9a36f186a82033ff01b6a6f1be1d56e8c0d24f7c63ad548f9507","first_seen":"2026-02-02T11:20:43.678253Z","last_seen":"2026-02-03T08:44:08.477875Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/mykola_demchuk.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/mykola_demchuk.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5402\r\nlast-modified: Wed, 26 Nov 2025 12:49:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f750-151a\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csseYI3zpwDkQRtiV4dOsfgk5NQp9Wixqppw511Dpx5XX%2FBDq7FR83Xja7fwCusvDKm41wQ%2B3GVq%2BIB%2BcEy9qf19f2gEfWjmUS6GdbzC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ec9c1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-06-02T09:19:28.531008Z","times_seen":435,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/web3-loader.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /dist/web3-loader.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:56:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f908-5f2c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QNyPwB28whTibrXdaM0E%2F6R3oI4AectYN3NpkN4NP84P2I%2Fkd3lEmIl4Fa3YnBaN8k3bA%2FCoMnbh2jQOuZqpbHOUIekFAgwWuSTaUA9\"}]}\r\ncf-ray: 9c799722d926568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e6c178a94133435bd34a5c6ab66258a1","sha1":"7968e637ed344aa6d622c7b416056cbbfbd7cebd","sha256":"ddaeb955056d2b6a7f68f0f428e58cff79c0cda698bc63fc562854da16f9aa41","sha512":"24ec2e979f3412d47e425f1fd32d9d806dc685a6170c54e0cb2b8ff69e41d74d685ec239aac59c548347b74db1a31302878e5f9e78d31e56115f2a2676d0a19b","ssdeep":"192:+sD3nOiECwjMbK0k9tkg1T0s6RNjiPD8jkNYOGqCfKdhhrzgbiGWNJ2pySODBQfO:hwkatPNR6gFvGB1kj0AuqBGyMkpgo5","tlshash":"96b253aa24f73131496ba45a9a1b91143439e0833d4edc743b9c83949fd59bc9ef3f88","first_seen":"2026-02-02T11:20:43.68474Z","last_seen":"2026-02-03T08:44:08.481955Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v14/JTURjIg1_i6t8kCHKm45_epG3gnD_vx3rCs.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/montserrat/v14/JTURjIg1_i6t8kCHKm45_epG3gnD_vx3rCs.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:07:35 GMT\r\nexpires: Sat, 30 Jan 2027 13:07:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255824\r\nlast-modified: Tue, 23 Jul 2019 03:46:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12504, version 1.0","md5":"d464ca5f2af53e65a7064d90a46e2e40","sha1":"4eb9e5b9f040c6dea4e4873c6fec70bccca53f92","sha256":"24d5585f2965f7d5080769a4286d580a98d722b18964b999ef6b87ba13c11f2b","sha512":"0dfa626a04f13e0b994bbe652a1b66c64cfd54956efa3b80e6664ee14670db6c3c2deb97c66ce927a4b6f820df7301f7261de118d379af5f953555fb1009609c","ssdeep":"192:wdOsZJHnQ645WIGiLRdJNp/RySXqJFGmfDhWWKwMR/6Qf353rmcchETemDHIlADz:Cw6SbDJNBR5XqLGWAnvgWTHDH5ue+D4","tlshash":"7b42d1d04997f512dc3db96269335453c2d56e10f4fb709230dacea02df889aad9c7e4","first_seen":"2023-05-08T13:28:01Z","last_seen":"2026-05-30T01:06:06.919668Z","times_seen":61,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.check-wallet.org/","fqdn":"api.check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"172.67.157.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-wallet.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 321\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":321,"data":"ver=15112025\u0026raw=001c2f0d3c5637150757510c2a0c2f14075709102c0c120c043d240c2a0c2c502836515028265155280c511d2b31340c29262f0c06085c560657331c2c0f0a0c3708091c3f323f1300262c162c08371307322315070c2c532c082b0a3f322b17293d010d07221d09012650130608060c29262f113f3d2b1f3c3201093d56371f2c0f0a1d2b1f061228212855280f0212280f341d03345858"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxeMqLqKFam%2FRTG%2FKEzftfNncnzme8zbGJOVM9XDXRUoGNEJcr%2BEitnLkMv2nlwp7lm2ZwY5T%2BMO9KFkV7NL7Pd3rI2FPVrjr8CrwoKtqSoIkw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c79972c385cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"47dfb88fa7d427f77644f51d0bcc4d8b","sha1":"b843a9be606493a5510c983d7f2ddd1a728821ed","sha256":"5f3e011ff9b8deddec49634e7cfd2ffbacb43bc9156b44c105c52541221364db","sha512":"7f340d5b2de4115e9a61385da716b860fc118ee313500a2197fbbe85b307891245ff80a60428dd16476401daab1eef2f66e3c6101063cd1dae0d7a3381754fed","ssdeep":"","tlshash":"95c08c22809ee890fa404d0e9dccae212c8280d900e1ed18494cb90748a2bfd3fda8e2","first_seen":"2026-02-02T11:20:43.620127Z","last_seen":"2026-06-10T12:57:40.321558Z","times_seen":28,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":23,"dns":26,"connect":6,"send":0,"wait":349,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"api.check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"api.check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/anna_voevodina.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/anna_voevodina.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8070\r\nlast-modified: Wed, 26 Nov 2025 12:49:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f750-1f86\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0D37u1XCAgYaRC2OjHzfMKfYcnfOb38L%2Fzt1gJVm6NqgM2GqUO7KRjKcOnoHnNDwFFj22fpHlAtEbnWbSUTCDflKqtz3jsP%2Fdyelhihr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ec9c2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-06-02T09:19:28.527228Z","times_seen":434,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/3_002.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:21.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/3_002.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51260\r\nlast-modified: Wed, 26 Nov 2025 12:49:24 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f754-c83c\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eyaUI7kcDwC%2Flf2vKsOtIy2DJ1hM6S9uvd5xnD%2Bhsma124KBNo1DUu61%2F1eqBxSp6LhY5%2B%2Fw1txWXrRADts2xxgH7T10lYkwYTB%2BlPp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79973069ce568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-06-02T09:19:28.523158Z","times_seen":432,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/aml_bot_h.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/aml_bot_h.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17048\r\nlast-modified: Wed, 26 Nov 2025 12:49:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f746-4298\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bfq2771Z1m3mXQDqPi9sho2%2FIhmrCNIvmrGgSI4cwfr9i%2BNmebCenMvXMIg%2FrCzt1o3XkjC3kaXHWQx41WHf87iuhmio%2BAvy5iE8M9hQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7997293971568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5e8366361e3711afa87c3b7e2085b82","sha1":"b9f5ed841dc3f71502b5d1fb075de7075c15ecf0","sha256":"eeed6c9fe015743fef74c685a39174dab02bbab1a9f5bcc5f16fd7356bb9cad6","sha512":"8b7fe11b84a3efb49c0784394723cb52904aa9e8560cdb07a4cef5cfd97ce89445638b767d57d7f78b09a6295a2c7f5d73440e9ad72d2ed1c4be603d8b4ac19c","ssdeep":"384:a9mv8tAx6S70jzSUFgJJM4Awt46g1zBcgWVZpYwitu:Sm0W37OyJVAwpYzHWUu","tlshash":"8972b098809f0664f9d7c6c2b2f02a4ea4fde4627d4ca317cfc936176c890e0611a4ee","first_seen":"2026-02-02T11:20:43.662835Z","last_seen":"2026-02-03T08:44:08.482701Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/nikita_raskosov.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/nikita_raskosov.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11080\r\nlast-modified: Wed, 26 Nov 2025 12:49:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f752-2b48\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lw6NxG%2BG04pchmFmwHMOQUeDOKFvvw7pGbdUhD6Iluh5MDuRW2enjtChJF7h9e3Nxqc5ocjaM12xdrQldVrLoy8APZeS79AZon5SuLlZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972ed9c5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-06-02T09:19:28.51623Z","times_seen":435,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5UbO3LdcAZYWl9Si6vvxL-qU.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5UbO3LdcAZYWl9Si6vvxL-qU.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19400\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 12:37:15 GMT\r\nexpires: Thu, 28 Jan 2027 12:37:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 430444\r\nlast-modified: Mon, 27 Apr 2015 23:45:38 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19400,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19400, version 1.1","md5":"932e598f77030c618d887a5c9be5ef03","sha1":"a80c70382f05635ff0674d73ec2e2dc9115206ca","sha256":"9e8f00bed071bc169467cc91b1d2d8405ce391f070d10e6c97781c20d4d96170","sha512":"b4d37d10149b4b7c356b35314cc7c4f42f1c2bb326cb4349d26c8c17be41a06ca3a5959aeafbabf1e803d01eb39ce073d73ab369a4e080847b5e4347b5d2ff2c","ssdeep":"384:qOuhGXOWD0pzRAjNPfoAxihW00QwRNbAPQtyMIWTQ7vUYF/KBOAe2dD5e45V:qOuhU49WfoLs1RFAPkxHAvUYFO5fz5V","tlshash":"d192cf721fc53e71f44157b396a84708daa63150267a09fac0098f5eb8bfb74fc64268","first_seen":"2023-05-21T15:10:38Z","last_seen":"2026-06-08T11:21:17.682006Z","times_seen":234,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":12,"receive":2,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.creatium.app/fonts/ttnorms/343165_4_0.woff2","fqdn":"static.creatium.app","domain":"static.creatium.app","tld":""},"ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"creatium.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 08:25:57 GMT","end":"Sat, 28 Mar 2026 08:25:56 GMT"},"fingerprint":{"sha1":"EB:4F:26:FE:88:1F:BF:10:4E:6B:9A:CF:1A:64:23:3F:52:77:76:4C","sha256":"66:0F:1D:E2:14:95:36:02:F4:51:E9:27:1A:11:1D:C5:42:9E:42:DC:CB:EE:EF:8E:0F:6E:A5:DF:EB:B9:66:C1"}}},"request":{"raw":"GET /fonts/ttnorms/343165_4_0.woff2 HTTP/1.1\r\nHost: static.creatium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 12:11:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 37177\r\nLast-Modified: Sun, 17 Apr 2022 08:40:40 GMT\r\nConnection: keep-alive\r\nETag: \"625bd288-9139\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37177,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 37177, version 1.0","md5":"9a9434e03fd6d7caf9fd0ef430c97396","sha1":"9f073e8e75c676a385d348399fbb34ca28563b8c","sha256":"7333e3d5836f8271a4a896b3fe1c6562dc0f22f2337c77f0890fa0057708ffd6","sha512":"a3a274bd82914ec916580d659e4f4fba935e3e74e90b74997896674764dd1396b1a01af0a23327649378bf498816e4152dd1104971cb80dc9ba49cd328485bc7","ssdeep":"768:GK+dRBcif69qFbSIOidfpTRqM4Ks0H9DatlXzYpDZ2:j+mifuQbSIOig10dwzYpV2","tlshash":"c7f2f1de2d4b85fae3e5ba66cb91160991431abf5a3282a2d9183c53f55bc73c538880","first_seen":"2023-04-15T04:51:53Z","last_seen":"2026-06-17T23:54:59.695688Z","times_seen":169,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":169,"dns":7,"connect":25,"send":0,"wait":73,"receive":1,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.creatium.app/fonts/ttnorms/343165_F_0.woff2","fqdn":"static.creatium.app","domain":"static.creatium.app","tld":""},"ip":{"addr":"116.203.199.110","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"creatium.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 08:25:57 GMT","end":"Sat, 28 Mar 2026 08:25:56 GMT"},"fingerprint":{"sha1":"EB:4F:26:FE:88:1F:BF:10:4E:6B:9A:CF:1A:64:23:3F:52:77:76:4C","sha256":"66:0F:1D:E2:14:95:36:02:F4:51:E9:27:1A:11:1D:C5:42:9E:42:DC:CB:EE:EF:8E:0F:6E:A5:DF:EB:B9:66:C1"}}},"request":{"raw":"GET /fonts/ttnorms/343165_F_0.woff2 HTTP/1.1\r\nHost: static.creatium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 12:11:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 35788\r\nLast-Modified: Sun, 17 Apr 2022 08:40:49 GMT\r\nConnection: keep-alive\r\nETag: \"625bd291-8bcc\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35788,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35788, version 1.0","md5":"72ee774720e0788d8e31513712adbb55","sha1":"3684bc95c5f2228e094fbd58096ffcfd616fad5e","sha256":"42ac3b50f1ab2117cebbe6de1ee699882f11fc2b152d7441b2621ffc8dd022ce","sha512":"a45406f0e1f5af678ec40033a3b0e431590beb0e3510c433c99be424dc1ce759bda2e296277343b1b548d3e3b13d4441f58b96e1511b3194f4382d9147c8103d","ssdeep":"768:63mcFcqPx63+/Bil8PPNaVrnTkA/TtD69nV99t3NdVz:GTHMkPNaxTkA/Tt2P9zLz","tlshash":"5ff2f1d921b5ed6e67c81d38668637d2c2d08b59c0c521d727ee21308aa74a184acfef","first_seen":"2023-04-15T04:51:53Z","last_seen":"2026-06-17T23:54:59.70142Z","times_seen":179,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":32,"send":0,"wait":74,"receive":2,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/PRmiXeptR36kaC0GEAetxpoxY6pJ8tEQQdWYhQvtl8Q.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/PRmiXeptR36kaC0GEAetxpoxY6pJ8tEQQdWYhQvtl8Q.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 19:14:00 GMT\r\nexpires: Thu, 28 Jan 2027 19:14:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 406639\r\nlast-modified: Mon, 27 Apr 2015 23:46:11 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20472, version 1.1","md5":"e65b7c3077db4163724ae7acafff865d","sha1":"82598c54a0d37b6b9a7810ff10475575e163d318","sha256":"b540d86b68fe76be2931a16de02bc4f3bb37b2301539c658cec42ea931a64bc3","sha512":"8e7bfc3256c1eeaa2859801d350cb16f77947688b228d95de8f1292c220a1b14335b2164aa52d2ef6d00ea8395a079e5ad2957d6ebf699a53b01770db445fb7e","ssdeep":"384:QXDFjxsbGj5v9we2z/o9PFOkYHYN5eMuXtsAtbweq5Ae2dZNUvIk6AL:shjxsbGlVweU/gPFRYHe5eMufdweR5zM","tlshash":"b492e1713dc2293da50a557bd45b4e2cbea0852cc13bbb71531ddc8ff2f462aa06122a","first_seen":"2025-07-07T04:38:39.209813Z","last_seen":"2026-05-18T23:19:19.853278Z","times_seen":108,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/slava_demchuk.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/slava_demchuk.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3130\r\nlast-modified: Wed, 26 Nov 2025 12:49:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74e-c3a\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VB2EUm7L7xQZntZpXc4JSd29WvyEZlqUQ1QPghKFUinY%2BvPvFIpim2YITHekGylWPlbKHxTbhjEytwDrgc9zDo7YX2pMaEXEt4fythE4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972d29a5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d31961f03995004043bc75cb47a352e","sha1":"85fbbbed31ccf33309e03046b9d7f8718c223a18","sha256":"48df89880c736246d7d187d96c6a85b7fa9b5325d23f014c9dce512976546ea6","sha512":"fe6cdb69b9333d3f51c2575612e0643aa4bc8fcaa96c20feccc91c398f75e50da063bde46eefed1ae33c6fec243225a74387b05739ff40f63cd44df6ca29034d","ssdeep":"","tlshash":"84513b0e476800f28e6d81bfa137d9161d483908e906727110afd0210a4fbe67d5bf4c","first_seen":"2025-06-28T19:47:13.73795Z","last_seen":"2026-05-03T17:56:05.352785Z","times_seen":47,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/4.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:21.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/4.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10916\r\nlast-modified: Wed, 26 Nov 2025 12:49:24 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f754-2aa4\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=amfsAZEL8l47aTqRHWxV3ABUR5Nc%2BO0VgCZ0X7lAGi9iBFapod4o9rILrgKSRab0htp3hCfoCLiQVcz94GERJqyVq3iK7ESWuRD1Nuzh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79973069cf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-06-02T09:19:28.519713Z","times_seen":431,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T12:11:18.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Nov 2025 13:18:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAtgFiCu5cYME41xuDq0fu34QS193v4JkgUVTnzIevs0WYOLJYOi9SmH9CryWe%2F2fzt%2FqUYN8k9mUT2NXUYSb9wUguIzbzvPOZYaD1Xr\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7997212abb569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Creatium","description":"Creatium is a website builder developed in Russia that provides a user-friendly drag-and-drop interface and a variety of customisation options for creating websites without coding knowledge.","website":"https://creatium.io","common_platform_enumeration":"","icon":"Creatium.svg","categories":["Page builders"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}],"data":{"size":193593,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9cc3f27d9cdc6ef4995a04fd078ac7fa","sha1":"fe699f5ecdd64dbc97205470e442bf540ac88ef1","sha256":"e711b2809469a67acc76eb002c46bc160c6caab173f2b3c919dc5243becb8a90","sha512":"9d3846aa9a04dc21434fbde6655cd28c7503828e0a2cd9455af1b500cb3e524610d0ea64ec04353d4406f029b8f25981184a814372d0ad1a75d29a63058c0026","ssdeep":"3072:uOsStL3+crL3+XrwpPiDlyMu2hhJgPymzyHd3L3+9L3+nL3+6y21IVQYLJQ2LFQq:uOsStL3+crL3+XrwpPiDlyMu2hhJgPyQ","tlshash":"d914e06666f22113644390a9bb6a5b5b3f90e247c60fca447edc27e49fc6dc2dd2324c","first_seen":"2026-02-02T11:20:43.642231Z","last_seen":"2026-02-03T08:44:08.475888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":30,"dns":11,"connect":1,"send":0,"wait":92,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/dist/bundle.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /dist/bundle.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:53:00 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f82c-2b560c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENLBf3FbCefGE78wGs%2FHh0ZtW3EsketCe6hKLaJY8JER983%2Fva1q7ZNKfWcq7N9F2z5eV1SuecrQtTNZtXowMeS7SLRtx%2BbhzCO2a%2FKF\"}]}\r\ncf-ray: 9c799722d925568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2840076,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"1347be62bcae12f4e99845a0717ef76b","sha1":"276dc9bc6e23ffbf3ad2770a46f383032c45253e","sha256":"b6f6ccb667c1f5cc8a20fa2c62c4eea53260fa0d32965cf5f810e5bce5f1a6c8","sha512":"1a8d0050bfcc20da698252814971bd2c4467bfe7f86e6933b11a3e1eedb0fb6f2a8a884f98242d3abd73e15e6d508c58c561b5803689c4fad574b241f4494742","ssdeep":"6144:PBktx2UHTRqRyv9CZZw83D7QGej4yhCdV04qCNvmsz0N5CNvmsdw0UBpVtCNvmsS:O6ZZFx1yodTqamsG5amsyRtamsEIamsB","tlshash":"8925f9807774b062875a29d0042b504ef37efa2d584a057cf658e8f67cfa9846a3ef35","first_seen":"2026-02-02T11:20:43.648414Z","last_seen":"2026-06-10T12:57:40.313895Z","times_seen":34,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/3_desktop_9c55368a.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/3_desktop_9c55368a.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:16 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f74c-c2a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lStf3gM3fSohyrdTgR8JKRB%2FffaS4D3dLDtfKCZYbMX3kstdA8TqxTniW6MHmNFKuTptndTyuiqmZjYjC3wkAYWhilUXc9guZjJZx4zX\"}]}\r\ncf-ray: 9c79972d29a4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ffa0b44ebbb42ab72feaffa27191d6d","sha1":"941bf7b2ab75bb17f1f2d5dbb0f0951f71cf8479","sha256":"6fcc29fffa48dd86508c22ff5227bc6f942ccdc33a8ee5810e1dab6c41cece5d","sha512":"bb9e259fc0a191ab96c135b3f13efc886d97347bb7618b03525b877ea0f844f15bbdc02116b7243c54b4bb6950baeefa43b389c565e78d95f239bdc9e8ed0a00","ssdeep":"","tlshash":"975162f9f064d82de494c69eeae40491231fd1f7a48482a8cd5d6b2d20658cbcc1f7c6","first_seen":"2026-02-02T11:20:43.658353Z","last_seen":"2026-05-29T22:31:44.667306Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/nodes.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/nodes.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:38 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbd6-b2ab\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKgU4hCqez7C7R%2B3OCzWZnl6eu25YVLiXzFpIWlCe4AuZn%2BYdCmZbyFnMTJ6dGM5CYFMN9paLxuQ%2B%2BCTUFMY374sN8qrB%2Fk6RcEo%2FG7U\"}]}\r\ncf-ray: 9c799722d91d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45739,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45739), with no line terminators","md5":"6112be7d248c55f0ebae661257883bc1","sha1":"b96a7c5345ae5d52378f2c0428568500cf7a49b4","sha256":"89ee9f79583e7484d7da861eaec245b636ba84007341f793cf234328c59910d8","sha512":"06cd0507098efd286b6248c34116add16c8c2cf5a931d194e66a18241755c801a97b50ee93d9b79a860a513b4f3c68a180456cb2b0cdf852b2e519c242df8bfc","ssdeep":"768:lXMNAl4/F1dKc8mIcgOnkOngOnoOnMOnLOn/JnMJnWfnMfnwlrQ2Q+/a9FmTYwmF:lXMil4/F1dKc8mIcgOnkOngOnoOnMOnB","tlshash":"bc238535e2c62e1b5a2f8611b0e0f3d9522c80d9d7635f6aeef176290bb09c5217367c","first_seen":"2023-07-13T05:03:34Z","last_seen":"2026-03-28T05:37:22.552324Z","times_seen":30,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.11.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 75728\r\ncf-ray: 9c7997297a0e0b49-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e60-127d0\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1575544\r\nexpires: Sat, 23 Jan 2027 12:11:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1QW6IOfPfOGw8ufsQYHGTwMU6mdQmU5snCN%2FULsMZPLREXUNciKutxCbQnzAVX0H6MVHVFeDTiqKw5ZVW60uA3yrpXRIZFEYDH0oXXYqKXo2Y9IXIA8U%2FVuYfcCHWzRxJRzmdA31\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75728,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636","md5":"44d537ab79f921fde5a28b2c1636f397","sha1":"b2879f9e1d0985a96842bf7f55a2b2cc4c636d04","sha256":"3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be","sha512":"08836d89ba7c7b7645c9de36e2e856cdc31fbb1c3a4a83045848d772720b98d352fb11182471161ef07d01739953a6320355ffecf25a06881bb1111ba02a73cb","ssdeep":"1536:sFUt//lLi8pq0MWeLhkzipMZ4LbW+nNjzw5ytuNCNbqg6g4xNRrFw:99Zpq0MWGhqa/HBnlz8ytuNYWg6ZRrFw","tlshash":"32730235ca0b7289b178227b3cb16645b72981c25e5bc4529f6fd3acdb0518c35f07ae","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-06-18T10:51:26.700599Z","times_seen":9785,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":9,"dns":2,"connect":1,"send":0,"wait":16,"receive":4,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"country.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 21:38:44 GMT","end":"Sat, 25 Apr 2026 22:38:40 GMT"},"fingerprint":{"sha1":"9B:B8:9A:57:72:88:9F:13:3B:29:49:FC:C0:40:D3:07:AF:56:DB:CC","sha256":"C0:60:C8:CB:C5:76:45:0B:FA:B9:74:9B:6E:3C:FF:5A:18:E0:D2:D1:02:4A:BA:07:56:DC:C5:EA:0D:D5:F5:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-wallet.org/\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCQun3yDnhckcFcKzF5jbJ4vXxS1xI3k%2BKD7qbt1H31A9hzIrSa1wHqYcHjf2xm3goZIhWaxo80RnkQ%2FWsMnx9uk%2Fc4HXBSlRQqR\"}]}\r\netag: W/\"24-zrg06P0Q0vTI8rHm2IALnoRYNN8\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c7997283b3f56ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6f805925944ef9fa79bd0a02e00e2e99","sha1":"ceb834e8fd10d2f4c8f2b1e6d8800b9e845834df","sha256":"3ef013039e6df373c7ef0730658c403527318c307c67145ac08c728492392800","sha512":"ba60076e291e81c9f43d0d755a461242468502102efa19654333ad0feb8ea26a16e4e5ee6cdbc474f55b07e26342584bd875ae21b9734b2c9077833e00183540","ssdeep":"","tlshash":"0480043500504714dc50c14dd507131153d54105c3070044c5c03715c5107fc1140031","first_seen":"2023-04-10T08:30:32Z","last_seen":"2026-06-07T04:43:25.14461Z","times_seen":4318,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":69,"dns":34,"connect":1,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/favicon.png","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 842\r\nlast-modified: Tue, 07 Nov 2023 14:56:48 GMT\r\npriority: u=6,i=?0\r\netag: \"654a5030-34a\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWdLo74hT4en5LZAEDqMpKoSsp4w4hWvl1sAdYmUexm5fzrZazrE7V2Xe6fUi9IGA49Va3cmosYg4YuPdb3MlI3SeFvmwLJx%2BXAWzbo3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972a497c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"476eed806d70bf9f1bfdecf4baf2e309","sha1":"97e7c78720573a83268c59ca94c2cd3f4509b87d","sha256":"5f5e527b934604aca616122cb13de8a844caa057dc72d8e9310086998f6c61a7","sha512":"e424a2d6608c004c7f8b4d122c9855d5148ed4d8ad6cbfed40e14f647b8ecc50b1c46c2d5c5357f6b30ec8b75f6aa332e8fa8698dd6599c4f9b0e5b5a3874721","ssdeep":"","tlshash":"870170afa2392807d0f80e99eb12528edc91934c611abe14cc280703867fcb3f2a1d03","first_seen":"2024-10-04T11:01:22.290979Z","last_seen":"2026-06-10T18:41:40.208882Z","times_seen":300,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/PRmiXeptR36kaC0GEAetxpoxY6pJ8tEQQdWYhQvtl8Q.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/PRmiXeptR36kaC0GEAetxpoxY6pJ8tEQQdWYhQvtl8Q.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 19:14:00 GMT\r\nexpires: Thu, 28 Jan 2027 19:14:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 406639\r\nlast-modified: Mon, 27 Apr 2015 23:46:11 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20472, version 1.1","md5":"e65b7c3077db4163724ae7acafff865d","sha1":"82598c54a0d37b6b9a7810ff10475575e163d318","sha256":"b540d86b68fe76be2931a16de02bc4f3bb37b2301539c658cec42ea931a64bc3","sha512":"8e7bfc3256c1eeaa2859801d350cb16f77947688b228d95de8f1292c220a1b14335b2164aa52d2ef6d00ea8395a079e5ad2957d6ebf699a53b01770db445fb7e","ssdeep":"384:QXDFjxsbGj5v9we2z/o9PFOkYHYN5eMuXtsAtbweq5Ae2dZNUvIk6AL:shjxsbGlVweU/gPFRYHe5eMufdweR5zM","tlshash":"b492e1713dc2293da50a557bd45b4e2cbea0852cc13bbb71531ddc8ff2f462aa06122a","first_seen":"2025-07-07T04:38:39.209813Z","last_seen":"2026-05-18T23:19:19.853278Z","times_seen":108,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":81,"dns":3,"connect":20,"send":0,"wait":8,"receive":3,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/app/4.2/delivery-builder?action=async\u0026key=5d8ef80407fbb11bc30d6cd1caf97c25","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /app/4.2/delivery-builder?action=async\u0026key=5d8ef80407fbb11bc30d6cd1caf97c25 HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:19 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M86bksOIB5TyrozIYM1IkbAlLHCx%2Bx2Z28zdZHCqVLnRB26ZDAp9P52zuTuWFGYpm6YjVrK%2BUPL%2FKfLXfHTxsjPy9mp62whLXDrsYN6\"}]}\r\ncf-ray: 9c7997283962568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-18T08:45:58.092861Z","times_seen":45429,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5UbO3LdcAZYWl9Si6vvxL-qU.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5UbO3LdcAZYWl9Si6vvxL-qU.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19400\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 12:37:15 GMT\r\nexpires: Thu, 28 Jan 2027 12:37:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 430444\r\nlast-modified: Mon, 27 Apr 2015 23:45:38 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19400,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19400, version 1.1","md5":"932e598f77030c618d887a5c9be5ef03","sha1":"a80c70382f05635ff0674d73ec2e2dc9115206ca","sha256":"9e8f00bed071bc169467cc91b1d2d8405ce391f070d10e6c97781c20d4d96170","sha512":"b4d37d10149b4b7c356b35314cc7c4f42f1c2bb326cb4349d26c8c17be41a06ca3a5959aeafbabf1e803d01eb39ce073d73ab369a4e080847b5e4347b5d2ff2c","ssdeep":"384:qOuhGXOWD0pzRAjNPfoAxihW00QwRNbAPQtyMIWTQ7vUYF/KBOAe2dD5e45V:qOuhU49WfoLs1RFAPkxHAvUYFO5fz5V","tlshash":"d192cf721fc53e71f44157b396a84708daa63150267a09fac0098f5eb8bfb74fc64268","first_seen":"2023-05-21T15:10:38Z","last_seen":"2026-06-08T11:21:17.682006Z","times_seen":234,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzAcuEIXEaFWBWXA4NoGd_Oo.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/opensans/v13/k3k702ZOKiLJc3WVjuplzAcuEIXEaFWBWXA4NoGd_Oo.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 18:44:40 GMT\r\nexpires: Thu, 28 Jan 2027 18:44:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 408399\r\nlast-modified: Mon, 27 Apr 2015 23:46:23 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19196, version 1.1","md5":"8226663c0f9503f304dc7734e80585d8","sha1":"3c452fbdf61ec89f9e881e49a98c89804bf4c8a5","sha256":"cd01185f335d20e75286a45c3c44d4f9af567fff4c78dbf6ec414a60f3c602f8","sha512":"b66496d85541d2bb1b40b1bce114575a0eb97d3d3dcfe17cd83f88d5b877b26caa52d98376226f574ceb771d63dd5da1f9ce8b5f0f49324b88e4fc80d1b79dbf","ssdeep":"384:VqUxtGLTpt0WHC6Igcs5R9r+/OFrnOe8eOQ7z30kfZSeons6YrJ8+cGeWMgkF0:de9K4T6/0TOveTP0dfsbzcG7Pu0","tlshash":"2582d0af3f80bbeae3d4d3759757880c6304045d5c0b665a2e121ee0bd93d5b097232a","first_seen":"2023-05-21T15:10:38Z","last_seen":"2026-06-08T11:21:17.671858Z","times_seen":207,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/default.css","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/default.css HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:36 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbd4-29e73\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWYCXvUmelO6mF%2B5VCFbXRH0469BO%2FUGLMYQWCzlHCZWIeE1dASTw2xELU3GeYdiisPAHW4xoVs7eTUVEJoOtC8hrR47PT3jiyRJRKLF\"}]}\r\ncf-ray: 9c799722d91c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171635,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"109639b4bd5a2411484488d830aa7f51","sha1":"b0820499bf676944dfc19ea6ef0a6f696abecdad","sha256":"9fb9b97f65f291ad3876b68c5a21566434a09c2510deffa249297ac6d93edd60","sha512":"aa5d86cbb0903b5a800f12910e2c0df978f7836c4f7204ebcb5340ff42976582551bdc9b3ef73b99ba0859279cb2510b9e2f5c8c73df44d0150ded7362736a52","ssdeep":"768:dwBIqZW+WDhmI9mRRhNU8IqS6SxR0qe4nTDYNHxgCFxWI2fPCh+QGLAu74LFB4kD:GNZW+WD570qe6wYyNBBTyrI","tlshash":"90f385e13d26a246e4264d8770ce7f8b6a150435b1359aa3f65cecbc8ec791b0371b1b","first_seen":"2023-07-13T05:03:34Z","last_seen":"2026-03-28T05:37:22.648386Z","times_seen":28,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/default.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/default.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbdc-1ae62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdY5i4KLI5WMq8PFoT0tEv0nFebjqYU8YWHdfsUObWdco7lXMjlz811NyUEXKVfLpmcSNPQBTBulT%2FmFlcAxXtMNNCaZnotwZ00d7fRJ\"}]}\r\ncf-ray: 9c799722d91f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110178,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60774), with no line terminators","md5":"d15118e000515cfbf15572fb8d51e2b7","sha1":"02e078944840dd5c6bbd57f257556cd89554407b","sha256":"0f55db1bef850ec8d17e75b9e7309994f6fc711194033f3950a6c9d280ea91aa","sha512":"14f518267905f160ca9cdac0f46006aad759f11297513c1ea50559f12efba417ee734c883e9d5296dd798c6a31d6208ac4f9eccce4c3467a3eade02a61c93a1e","ssdeep":"1536:DBZfripWASin8rac0vEYZQ9Sy4aQK9KHwU1w1UHYOz:FZfrHhOcOZQ9SytQLwU1Lz","tlshash":"abb32ac8b2a6356311a77033607fac057232647d9d161250e726dbee6eb8d85233bf2d","first_seen":"2023-10-19T10:37:49Z","last_seen":"2026-03-28T05:37:22.535969Z","times_seen":30,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v14/JTURjIg1_i6t8kCHKm45_epG3gnD_vx3rCs.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:19.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/montserrat/v14/JTURjIg1_i6t8kCHKm45_epG3gnD_vx3rCs.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-wallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:07:35 GMT\r\nexpires: Sat, 30 Jan 2027 13:07:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255824\r\nlast-modified: Tue, 23 Jul 2019 03:46:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12504, version 1.0","md5":"d464ca5f2af53e65a7064d90a46e2e40","sha1":"4eb9e5b9f040c6dea4e4873c6fec70bccca53f92","sha256":"24d5585f2965f7d5080769a4286d580a98d722b18964b999ef6b87ba13c11f2b","sha512":"0dfa626a04f13e0b994bbe652a1b66c64cfd54956efa3b80e6664ee14670db6c3c2deb97c66ce927a4b6f820df7301f7261de118d379af5f953555fb1009609c","ssdeep":"192:wdOsZJHnQ645WIGiLRdJNp/RySXqJFGmfDhWWKwMR/6Qf353rmcchETemDHIlADz:Cw6SbDJNBR5XqLGWAnvgWTHDH5ue+D4","tlshash":"7b42d1d04997f512dc3db96269335453c2d56e10f4fb709230dacea02df889aad9c7e4","first_seen":"2023-05-08T13:28:01Z","last_seen":"2026-05-30T01:06:06.919668Z","times_seen":61,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/1_bae5afce.svg","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/1_bae5afce.svg HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 12:49:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926f74a-1270d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mmg7dqgssLLi70kz0rOCPtf5bF59qXJCyKeHIqmRyKJku4TYbcGtS4zx8x%2Fd%2BmvFNMLMCNhLNimxfNDtVW%2Br9l8jUvJJPRghpbreISvo\"}]}\r\ncf-ray: 9c79972ba994568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-06-09T04:59:18.589215Z","times_seen":491,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/local_static/andrew_aleksandrov.webp","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:20.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /local_static/andrew_aleksandrov.webp HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5358\r\nlast-modified: Wed, 26 Nov 2025 12:49:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6926f74e-14ee\"\r\naccept-ranges: bytes\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sw9qhA8AWwG1V9i2A7z%2Bx24vJxIzLl8cUmXAUwS1StFaJk93gFJlXrFLq2xvHeRbMqDeGbSpy95Rzf3Q1SlETQgtcWpJfH7LXzNGOgmS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79972d39a7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-06-02T09:19:28.526407Z","times_seen":436,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-wallet.org/assets/4.2/nodes.js","fqdn":"check-wallet.org","domain":"check-wallet.org","tld":"org"},"ip":{"addr":"104.21.32.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-wallet.org/","date":"2026-02-02T12:11:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-wallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:19:46 GMT","end":"Wed, 29 Apr 2026 06:14:52 GMT"},"fingerprint":{"sha1":"13:8E:06:1E:B6:6E:C9:98:FB:F1:22:17:A3:EC:8E:23:74:6D:CB:3C","sha256":"49:D6:F8:A3:07:37:11:80:68:0F:B6:59:8C:38:9B:F4:9B:B2:1A:95:93:27:5A:6F:86:CD:1D:5A:54:5D:55:F2"}}},"request":{"raw":"GET /assets/4.2/nodes.js HTTP/1.1\r\nHost: check-wallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-wallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:11:18 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 13:08:46 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3067\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6926fbde-ae70\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVnfggDuKoWd9VDzczrJvpPLKD4ATQ4%2B%2BzlmpOc%2FfV8itskK1E%2Bf0A0DCmqqA9JFQsGKuuwn%2F1M0PeClmGxe7qwnmi5a5OJvTFWWztZ%2F\"}]}\r\ncf-ray: 9c799722d920568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44642), with no line terminators","md5":"ccc45b3256d151219bbf65c029302a6d","sha1":"02dd1debb629b95672ed50e1d8fdc59d8a3ebcec","sha256":"77b2bf53781ea091303539988badedf0531333c82d47b206e6253a28d7d6c968","sha512":"992d2ddc464056367a46edf31982fe4217aa3fbbfdd0a7c11209ccf223941c3b8921fe07efe8eddc16d13fccebb237fbd8fbee8e2dd1b4f510d59461ec4766c8","ssdeep":"768:Se6nI82YF2vNbevtCJj0QShvnZqxdaA4/Y//sFBREW6KCSYz+q//M7j/3BRqIlzs:S1I82YF2vNbevtEShBq07j/3/Z582YB","tlshash":"8213a5d8b084385208ef3077517fa90db17a79bd9c475640e467a2b44f7ca9a2327fac","first_seen":"2023-03-13T09:26:45Z","last_seen":"2026-03-28T05:37:22.537686Z","times_seen":30,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"check-wallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}