{"report_id":"dcb49225-cb2a-4f08-941a-2867cd48eb6f","version":6,"status":"done","tags":["telegram","phishing"],"date":"2026-05-12T08:25:45Z","url":{"schema":"http","addr":"mytonwallet.app/","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mytonwallet.app/","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"title":"MyTonWallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mytonwallet.app/","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T08:25:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-12","alert":"Hunting_JS_WebAssembly","trigger":"mytonwallet.app/rlottie-wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]},"summary":[{"fqdn":"mytonwallet.app","ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-03-28","domain_rank":759020,"first_seen":"2022-08-11T16:44:36Z","last_seen":"2026-02-28T21:06:08.359969Z","alert_count":158,"request_count":75,"received_data":5571155,"sent_data":34485,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":2,"received_data":21542,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":4,"received_data":132388,"sent_data":2344,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mytonwallet.app/fallbackScript.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3ce590ba24d4032b5ca0414c9a8771","sha1":"7f237fa9e36085f10fb9f0c9c9370d6a88efd8fc","sha256":"d363b2921714ea628797bb2c1fdd2db9d61c8ab84a18204b0992b124b3d15e46","sha512":"4de8e2c8639291d7ec5d6fcbced77e3b223e4f697152ffbf0fbd615f7f938f10fd86398473e6bb8907d161f5631a0a9dcbb8db00d718b4ffb8388ad1d0cb1fa1","ssdeep":"","tlshash":"65f07d3cfc29952d513a80aab6b9f6657f20020c130d6a03b0fd8098bfa0973191ff9c","size":626,"data":"","first_seen":"2025-06-25T17:57:01.335247Z","last_seen":"2026-06-13T22:17:00.847941Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/main.8d0280e9286d7b2632db.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a21ea30c8584a42fc87e4675cc314c0","sha1":"eb7b56d8c8f26a78cea7587519dbe499700f2f05","sha256":"bb46fce0f6104f4c7f4b94f6f2f130fa962b5e819b23f78cab533f4c496a0dd3","sha512":"68db81d164a5b0cb5db53b56a884fd3f12b5e1abda9b1633d6a3d73e3ea761d49120c9c29ea6144ee96ebca389aa850bc28d0bee7784f546a406c71588155304","ssdeep":"24576:F+4qJ0pqPE+9+go6ZiG7nTYMHCfc74BJVnzn/peY13MXEBLl+nRwkFPMAT7KbQIJ:F+4qJ0pqPEM+go6iG7nTYMHCfu4BJVnl","tlshash":"ec451980b211f03c81fb555b907f0619f3343b44e9288c50e0fedd5dba75f95a6aaa3a","size":1228109,"data":"","first_seen":"2026-05-12T08:25:53.612841Z","last_seen":"2026-05-12T08:25:53.612841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/949.0ccfed40e25b7dd3b55a.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8420b8e35e49cf20cd9d1d7d4ca88d2f","sha1":"b55d08e39b0dd24e7766e20bdbfd253e94145f6a","sha256":"59bca445a378d3af3eebce856fed5acaf10b5c84abae5392fa2c6729658a1968","sha512":"3a83f5ba5edc386e18866d6af53c45bc10ff614e800fd5615715c09a081d928a633abb5dbf98d1045e04bd359511b1adeba23b9840b6f4807397aaf82a61b212","ssdeep":"192:24mCZDYfXwYInm76iRlwxH0Ylvcnc/qyMuVjtRCd9oR9vYLj:24dDMAYInmlRlULVcncLBtRCd9oR0","tlshash":"3512a696a03564ba22da44d8d6244b03ab365554740ad2bcffbc79ef2c8591a30fcf7c","size":9831,"data":"","first_seen":"2026-05-12T08:25:53.582405Z","last_seen":"2026-05-12T08:25:53.582405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mytonwallet.app/duck_run.a70c5e12b26ee1d82b73.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_run.a70c5e12b26ee1d82b73.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"15ba002544138a97905f06373b22cd26-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ7RM6T1FSYZMDNX7K6\r\ncontent-length: 13369\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 207 x 207, 8-bit/color RGBA, non-interlaced","md5":"e4331655e6645a5292771774975e7de7","sha1":"c29f3a7566feee1268528fa8914ab446e6c36d2d","sha256":"e53618710791936ddda211fa177c632c9e524a26fceb2315b30452d9f51eacea","sha512":"12c6954b6b38abcdd53625c3d720ee7d0b3b909469c582bf3c38812b57630f9dbd9266297c7ffdd50f17ba7040faa97d79bc4ccba4fc45bdd56177cc93b21943","ssdeep":"384:os6yyYT+1yU2BIBH/Z5uVu4BwOG0dCRCsdbCq:o3N1yUBZPXOGDR3","tlshash":"a452d17f30706e963e29c3246ac6878e29635d98326292afc166a74501ff04f404f7d8","first_seen":"2025-06-25T17:57:01.374391Z","last_seen":"2026-06-13T22:17:00.82709Z","times_seen":9,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_biometrics.507638446829e8e0d552.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_biometrics.507638446829e8e0d552.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"e52009ba6fab83225620bde5b167aa73-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQTR1CFS71402CMYPE7\r\ncontent-length: 1202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75c459759b88252933015189b8e1652b","sha1":"231acc0498d3f6471daf5466a338f91e686606ae","sha256":"94e22a4f20fad20a0085b460f8fbbcbb630e595c538ab990f0c473175ffa513d","sha512":"dca8db6ae160197e9971bd5c7cd5eaca9ad927c04bebf3e144b4797c17de9801d6de01436e21b1801b7c597b4a606fbac32704012200cdbeecc551160b47fbe4","ssdeep":"","tlshash":"d65101da2664968cf28bea5ebf37e8a0375f60bcb16bd0804d5ec754b187985f50b800","first_seen":"2025-06-25T17:57:01.349674Z","last_seen":"2026-06-13T22:17:00.831188Z","times_seen":9,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_hot.5bd2431d9ed257fbbedb.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_hot.5bd2431d9ed257fbbedb.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"dbc50f35dd6d283e9b2442de422e6666-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQV4S9TQHBRWC1MCKTR\r\ncontent-length: 767\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e74031da511fbd1ac58a3cc1bbfc483a","sha1":"06edb914e8d4df658ab635818981eb4867a4078c","sha256":"38f4fb5ae943073785faee9d2ede1487dcb9204fbcef2109d66747049b500095","sha512":"2ed352d1dfd8861ebf8237cbb3a8797c746b725056451819c6055b5716ce4c6a7d694fb02b28ce8ca25e743d814c8d7903d59584963fa94e721464477ced061a","ssdeep":"","tlshash":"3d01b1f51b5c505c654baa588f3cd450071db0bab2b74380595dd63582e398ff41be74","first_seen":"2026-02-28T21:06:13.215031Z","last_seen":"2026-05-12T08:25:53.448496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_ton-proxy.740e072b02b8bf6e1d55.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_ton-proxy.740e072b02b8bf6e1d55.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"3f801205c7bde3c8c43b9a8a834d29fc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR0AM17PS3QQHQZ2P84\r\ncontent-length: 530\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9985b84c513b66a0c24d96130072b38","sha1":"74f4597b90a63be05ad22fef421eedc4e89f09f7","sha256":"9c278eaee5fa786936f5c30a5f5fad7d5daa2f232a91d5f690cb22cf21abeb24","sha512":"7f1c5ab173a9cf3823eb6beaf216ed382dbb2a7d4d690180f7487a92e1a849973f416848e565502538b0d025efab92d0e2acb829983e2a42c81b441db0f2b211","ssdeep":"","tlshash":"f8f0c9a8c258bd2ae71ad078cd74ca63010dbac5d5da432cb0a06b0dac648e398096b8","first_seen":"2026-02-28T21:06:13.261098Z","last_seen":"2026-05-12T08:25:53.45207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/892.a8688aa34f2b73e22575.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /892.a8688aa34f2b73e22575.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"819f16c3cc4f7d5c1656be79e056814e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMX7MHGG5ZMM9EBQFND58\r\ncontent-length: 6756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14970,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14917)","md5":"9da80c2068f56e07ec5ccdefabefc286","sha1":"b46416d910b2571b5e0ef7b2f4d8d2ec5e24f004","sha256":"fe151e742a9d3f21d376c87aee9dc5f1b98e6212d0cd7712e16b062c0c3f1be5","sha512":"a7bd12ee96e56cf43fd9c31341dfcf484be3adc2044f936b4aca5ead21735975f425bf1e813b77423a27b45d71b381bd79a9963b10bb47d6005c01a86f5ca8be","ssdeep":"384:bTGEOJfeQ9lof21k91MXHvLNUcup6xg3O+pisydlQx4l7C:b/kfeQzofV91MXHDNU+xyEHd2A7C","tlshash":"f9620ac833e2b47653a32caa506f6005e237bd34300dc620f36a55d63c72ad995b7eac","first_seen":"2026-05-12T08:25:53.455224Z","last_seen":"2026-05-12T08:25:53.455224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/apple-touch-icon.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:25.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:26 GMT\r\netag: \"f343028f562c0ee1f53756d74f44397d-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMY6847E47EFMXPVF4KB4\r\ncontent-length: 12815\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"7fe58dd8938f088fd47941364c3248fc","sha1":"3240ab8befac3376c9e248ccb4a4a1165d236784","sha256":"2f50beb7b865bc915c15c3c40cd006c064b200ba3600a9028f187917d5742b40","sha512":"a7a871e1810bab69bd7142de82f58c604d445d3a38582b66d13cfcb5e6ba4686cdf0fd447aad4957857ea4049a0a3554c41eb38454cbb24f1ce8737a94210ea8","ssdeep":"384:hox6+tpmyEeq9ywJrXjkTlRh3Fr4XpzZQ:hox68pfe9XrzSOXpzC","tlshash":"bc42b0bba3f12eacd260e47f5d0e1e60122986eacd1f44e90bad44837109d170c5d6ef","first_seen":"2026-02-28T21:06:13.246Z","last_seen":"2026-06-13T22:17:00.87395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/862.487961bcc20426bc5073.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/941.e3c881c640df0346e01e.js","date":"2026-05-12T08:25:27.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /862.487961bcc20426bc5073.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/941.e3c881c640df0346e01e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:27 GMT\r\netag: \"9c6aac8b9ca1948e4320329434b1728d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMZ9DFV6NPPX9VY40Q4D9\r\ncontent-length: 3825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9078,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9025)","md5":"d5f204e3cff2c9cba742eeae6567ca50","sha1":"b3919560d1975b97662d9088f4a53fd3a773b392","sha256":"e5abd2a3123e684227d8d2443970de8a656416b8f2c545d5361ccd14a6e0c6b8","sha512":"db38d0a285b288a65f52d2c73a8da7f61055092cc599bea5132b55c1b519eae46b79081ec612a442d0305b09adab3693c868afaf049a79f5f1ff7a578915d3b6","ssdeep":"192:0U7XcP9vbOokdNwWKi7E97kz0VfYicR5C1TOgmPHsyTJHajyj:0U7u99sE99sU1q9Pln","tlshash":"7112d98c76f0f4ee92f365e080ab1807b0b6bd99558d6035b35251e36934fc581bbf91","first_seen":"2026-05-12T08:25:53.461107Z","last_seen":"2026-05-12T08:25:53.461107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito+Sans:wght@600;700;800;850\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Nunito+Sans:wght@600;700;800;850\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 May 2026 08:25:23 GMT\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9244,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a5d569edc889ba66e475b813b31bb44","sha1":"e59fd7b777dbf4f2ea68daa6cbdd6071316f8f0b","sha256":"21470fc7c9b271dd3cafea550876aec1ff406f8fd2d3784ec2b0efc4bdd12b4e","sha512":"8bc4c4b9d67ad9601ca577578998be50213d723461b4f9e41809a2bfb5815fcdfdf38e4b0395095c81afa9fea6a4dce11617d8a0045431b86871701db958d64c","ssdeep":"192:5vc3JvcKIvcEvct/vcvcvc3SvcKnvczvctAvcvNvc3fvcKqvcevctpvcvkvc3mvL:q3aKjfevH35KEQtvO3sKhlIv/3dK4Uxd","tlshash":"9312ce90043a5494da037cc233dfbf3aaf5fa0513026d43dbbf894999caac6a5365b4d","first_seen":"2026-02-28T21:06:13.267496Z","last_seen":"2026-05-12T08:25:53.463853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":113,"dns":0,"connect":21,"send":0,"wait":17,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_wait.b0fe6ec6993586b30e65.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_wait.b0fe6ec6993586b30e65.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"f9927e4503777f331c01cb496ada36a7-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTR24K1XMAHXD2CBFY\r\ncontent-length: 10098\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10098,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"9f15af8fe2fe448b9b6396c20f71968c","sha1":"0bc585e17e3bd598efb5d1d03f0f4447898927a7","sha256":"14d28eeba4757c27e1973a79ad279a3b4cce72e89b1da8c82cb171608e2f0569","sha512":"ed9616d9a38a866e2be5c249945066b8e4c114023a3d69c749e99e24095005f30c32a85c85ba9724544a88fbd151cc05a99a2fa7967933d7838c920bf6c01747","ssdeep":"192:oN7jJ1Dk6hZIA4IcWFOHwwf6dAfrSoxYz5C37xCEM1pdVcqWtA4L9s66yh:Cp3hZIAXcxX6d4BxYMxCBVcqmwe","tlshash":"f722d06317c34d422078ad7025bcd7ce51ce97c998ae9b8f30a3a97b9b03b560c18483","first_seen":"2024-08-19T23:05:23.650916Z","last_seen":"2026-06-13T22:17:00.875489Z","times_seen":10,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_connected-dapps.23a942256716f31173ea.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_connected-dapps.23a942256716f31173ea.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"4a7a43463cd27a6b127a5ac5a2de9cdb-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVGEKWWEC7WK3MNADP\r\ncontent-length: 778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"636698919e7947be510291f1def1198d","sha1":"10bc5a87d68425e4342ea46e17173d2f1bfc9d85","sha256":"44066095bed865f37ae4db63a8b402f975b07efb7e853630aeba7afae259339f","sha512":"0e80940c3267c361d0d68d466b6845e0b0c7ccd634bf0809c13f33b83d12df84e5f64288b1b46e599fc482cecf5b6ff3f36edf27dc1d7c7664df9b10d386cc0d","ssdeep":"","tlshash":"ad014ee9c059a54de305116ecf787481a24a31fef58d81b0b0943b1658596dba50dae4","first_seen":"2026-02-28T21:06:13.243912Z","last_seen":"2026-05-12T08:25:53.474405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_exit.768a3954b49360a90909.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_exit.768a3954b49360a90909.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"2bee91b0e1000a8b3d663f962e21b230-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQVGQBNF5AX8RXT0W8C\r\ncontent-length: 604\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc2f184514f2e7518f64f9246918dcd2","sha1":"9ca160f6400b5f40a362e1bc9146568e7ce2236c","sha256":"952e00e3b00456a45b4b26368151be954787112cd4815f06d28b7ca5920a05ee","sha512":"ba0465475d04584446e8923a0ef82e5e5f94edff971b44b0ab61f8bac321f722570ce30b79b0c61b0eb2cac42f2962172a2a20ef76239c18268010bbd6003a39","ssdeep":"","tlshash":"c221cc99b61cf2dd63b2793caa74c1a5a70d3070b881c710ec8edbbaa012483d5c34e4","first_seen":"2026-02-28T21:06:13.220496Z","last_seen":"2026-05-12T08:25:53.476989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_lock.71acb90d189a67e01f51.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_lock.71acb90d189a67e01f51.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"6c90354170e86f964eba6620cf8b0bdb-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQV036JN07MPCBSEQ8N\r\ncontent-length: 579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b485c79d3f62ff079283f0e0ceb584c","sha1":"9308a40eadb0e4b23341a01af2c994e972637cc1","sha256":"24a0daf8c2213325a82b324c35b3106ddeeb4509c49a0dde90882be5e6bb6bf1","sha512":"bd2b5583f5ca763d80d6d7e43849d9d1578a74ac0e4502788d95e1cebf2fca145dcad3d434ef912aa28c00ca2ec6eb17d0df2fd74b4b41353c8059cc20bd0d7c","ssdeep":"","tlshash":"38f0a2a14614804cc2055e7faeed6985174f32edf12f038d76ed15288c0549fe81cd68","first_seen":"2026-02-28T21:06:13.229527Z","last_seen":"2026-05-12T08:25:53.47933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/840.a8361af9970ce7f2a9aa.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /840.a8361af9970ce7f2a9aa.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"3ceab5ade9fc646ca797aecd018306a2-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXESJ2RFM0RD9G0YRDC7\r\ncontent-length: 8536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29135,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29000)","md5":"9856f28813c726aab1a5544eb0ed9471","sha1":"91a58ab76765511784dc7daf706743cff8bcc4bc","sha256":"f6332e3b7e8ee718e29e10661354ce365f35b805a99891555c6e51826d5d2143","sha512":"f8891e01b0dc1de2edf7a1192c52d6739460376dca3b95bc7f3dbdd8dec19de03e4b3ffce0b7708776a5687374f75cf4907a40369e6c6844ad48b2bbcffe782d","ssdeep":"768:/S6lM7EowrDaH2gqLcxGjBIfKDONTttStoV8uT5UT5GijbsT5vT5TAVcMWAUh5D9:/SCeojkc/to+GmGdUAaS","tlshash":"b7d28584f6a5b07643926691006b540bf279ea28740d58ecf254e4f328f68de94fff78","first_seen":"2026-05-12T08:25:53.482393Z","last_seen":"2026-05-12T08:25:53.482393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/862.487961bcc20426bc5073.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /862.487961bcc20426bc5073.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"9c6aac8b9ca1948e4320329434b1728d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXHE5T8YEJGDE6V7HYXF\r\ncontent-length: 3825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":9078,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9025)","md5":"d5f204e3cff2c9cba742eeae6567ca50","sha1":"b3919560d1975b97662d9088f4a53fd3a773b392","sha256":"e5abd2a3123e684227d8d2443970de8a656416b8f2c545d5361ccd14a6e0c6b8","sha512":"db38d0a285b288a65f52d2c73a8da7f61055092cc599bea5132b55c1b519eae46b79081ec612a442d0305b09adab3693c868afaf049a79f5f1ff7a578915d3b6","ssdeep":"192:0U7XcP9vbOokdNwWKi7E97kz0VfYicR5C1TOgmPHsyTJHajyj:0U7u99sE99sU1q9Pln","tlshash":"7112d98c76f0f4ee92f365e080ab1807b0b6bd99558d6035b35251e36934fc581bbf91","first_seen":"2026-05-12T08:25:53.461107Z","last_seen":"2026-05-12T08:25:53.461107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/598.6d12178f6c411faacc7a.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/941.e3c881c640df0346e01e.js","date":"2026-05-12T08:25:25.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /598.6d12178f6c411faacc7a.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/941.e3c881c640df0346e01e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:26 GMT\r\netag: \"8793153313c51fc18ad30d014fa47168-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMY26H2CNSBKY46BJ0TDN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2587991,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65454)","md5":"c48f0b37e42a31a6b20803f6a790e5ff","sha1":"0316127a37f6ec4219cd232eb7e90402f8677c01","sha256":"2e9f31a3c0e98edf4bd71a0f1e6913ffa45583c57871407d2118d4b19dd827da","sha512":"32721291c9dbf8adf1bfaddcca12bd3b385ffd430d1d68c82169bf32d395cdf12d9ba8d1a88d4adfce420d91ced0ddfaa8574b065ad040ebe0dd9d9da95749f7","ssdeep":"24576:7MLoRQas8LS13vk8kXe/QTHJaY3nkTObt1F:7BQ0SuHJaIkTObtb","tlshash":"fb253a887a95f47643c620e8143f180eb33d592de41c1458f7d8d8e67db9ac9a22bf78","first_seen":"2026-05-12T08:25:53.484578Z","last_seen":"2026-05-12T08:25:53.484578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T08:25:22.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; manifest-src 'self'; connect-src 'self' blob: https://api.mytonwallet.org wss://api.mytonwallet.org https://api.mytonwallet.org/proxy/ https://static.mytonwallet.org https://toncenter.mytonwallet.org wss://toncenter.mytonwallet.org https://toncenter-testnet.mytonwallet.org wss://toncenter-testnet.mytonwallet.org https://tonapiio.mytonwallet.org https://tonapiio-testnet.mytonwallet.org https://tronapi.mytonwallet.org https://api.shasta.trongrid.io https://solanaapi.mytonwallet.org wss://solanaapi.mytonwallet.org https://solanaapi-devnet.mytonwallet.org wss://solanaapi-devnet.mytonwallet.org https://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.com wss://*.walletconnect.org https://agent.mytonwallet.org https://evmapi.mytonwallet.org https://evmapi-testnet.mytonwallet.org wss://evmapi.mytonwallet.org wss://evmapi-testnet.mytonwallet.org https://ipfs.io/ipfs/ https://tonconnectbridge.mytonwallet.org/bridge/ ; script-src 'self' 'wasm-unsafe-eval' ; style-src 'self' https://fonts.googleapis.com/; img-src 'self' data: blob: https: https://static.mytonwallet.org https://imgproxy.mytonwallet.org https://dns-image.mytonwallet.org https://mytonwallet.s3.eu-central-1.amazonaws.com https://cache.tonapi.io https://c.tonapi.io https://imgproxy.toncenter.com https://web-api.changelly.com; media-src 'self' data: https://static.mytonwallet.org/; object-src 'none'; base-uri 'none'; font-src 'self' https://fonts.gstatic.com/; form-action 'none'; frame-src 'self' https: https://buy-sandbox.moonpay.com/ https://buy.moonpay.com/ https://sell.moonpay.com/ https://sell-sandbox.moonpay.com/ https://*.onetrust.com/ https://dreamwalkers.io/ https://avanchange.com/ http://localhost:* https://tonscan.org https://testnet.tonscan.org https://tonviewer.com https://testnet.tonviewer.com https://portfolio.mytonwallet.io/ https://*.mytonwallet.io;\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"963d0a30de681898a7bb5403e9ba5c88-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: Deny\r\nx-nf-request-id: 01KRDMMVBE2AC3YNKKV68GEAS4\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8044), with no line terminators","md5":"6256827a34f2a3853fe6f734f66aa8bf","sha1":"78cda5cbacbacfa2798402bb356ed329d59fb2c4","sha256":"d95d29f8683d377d6d08fc629500453efb857e1a6b4a4af4bd6df6a537d95199","sha512":"7d03780e6d4230796b4220e5aff6b654cf7194f3b5276f45b186c53644b33824d41f99451b3ceae6977c309e356d3424c5fe9b2446b6723a117ec4a8770a96ea","ssdeep":"192:eZpfqqtPPNfjsGjlbS4OWUiSKUH4fytIk:cYmVfjHOjKUHkyqk","tlshash":"8bf1feb3f608859d5720a7b2dbd730acc78b944e9db4cd75e3606752d882f928133963","first_seen":"2026-05-12T08:25:53.489864Z","last_seen":"2026-05-12T08:25:53.489864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":90,"dns":33,"connect":4,"send":0,"wait":138,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/fallbackScript.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /fallbackScript.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"2ce77f8ea5b58cebef023c2993e7fc26-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ6G7V3P4WNAW2BE158\r\ncontent-length: 626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":626,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"fb3ce590ba24d4032b5ca0414c9a8771","sha1":"7f237fa9e36085f10fb9f0c9c9370d6a88efd8fc","sha256":"d363b2921714ea628797bb2c1fdd2db9d61c8ab84a18204b0992b124b3d15e46","sha512":"4de8e2c8639291d7ec5d6fcbced77e3b223e4f697152ffbf0fbd615f7f938f10fd86398473e6bb8907d161f5631a0a9dcbb8db00d718b4ffb8388ad1d0cb1fa1","ssdeep":"","tlshash":"65f07d3cfc29952d513a80aab6b9f6657f20020c130d6a03b0fd8098bfa0973191ff9c","first_seen":"2025-06-25T17:57:01.335247Z","last_seen":"2026-06-13T22:17:00.847941Z","times_seen":9,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_mtw-cards.4d616f2a69c8eac584d2.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_mtw-cards.4d616f2a69c8eac584d2.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"cb2d83447341f6bba12c78bc65461dac-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTXF6M8EDRZ52QWJNR\r\ncontent-length: 578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffd3e6d0bc583c7e805b58fd6aef9630","sha1":"e95c6160ddc89e8ad8baf377aeae4b16e749e57a","sha256":"ba89524adec5215f629faddd6743788ce4f03333a621a91171636d6a3ed52fc6","sha512":"20211d3fa8a9acddcd95a59199733835629e007604dab93227eb9d2152c22f4287dfed736afb46e32ba945751733df5e393fe84ac759e6410a0073a9e5c4cc0f","ssdeep":"","tlshash":"6ff0acf4c029b156e38f859adda868a63018b2db85d85357b1c4be4ea4159c3740896c","first_seen":"2026-02-28T21:06:13.250377Z","last_seen":"2026-05-12T08:25:53.49916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/892.a8688aa34f2b73e22575.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /892.a8688aa34f2b73e22575.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"819f16c3cc4f7d5c1656be79e056814e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMX7GE51C739ZJERGE49N\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14970,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14917)","md5":"9da80c2068f56e07ec5ccdefabefc286","sha1":"b46416d910b2571b5e0ef7b2f4d8d2ec5e24f004","sha256":"fe151e742a9d3f21d376c87aee9dc5f1b98e6212d0cd7712e16b062c0c3f1be5","sha512":"a7bd12ee96e56cf43fd9c31341dfcf484be3adc2044f936b4aca5ead21735975f425bf1e813b77423a27b45d71b381bd79a9963b10bb47d6005c01a86f5ca8be","ssdeep":"384:bTGEOJfeQ9lof21k91MXHvLNUcup6xg3O+pisydlQx4l7C:b/kfeQzofV91MXHDNU+xyEHd2A7C","tlshash":"f9620ac833e2b47653a32caa506f6005e237bd34300dc620f36a55d63c72ad995b7eac","first_seen":"2026-05-12T08:25:53.455224Z","last_seen":"2026-05-12T08:25:53.455224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/icon-16x16.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:25.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /icon-16x16.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:26 GMT\r\netag: \"08ed2a9decabe7e5dd4808a8e5cee951-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMY69SG1XX460MS8M9A36\r\ncontent-length: 491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"08e7f24337e61be8eb50a1b68a043a91","sha1":"448e77dc3323769611947175408d4d11b4f4bbb5","sha256":"697e6f928bc00d4fedb8b5a08491d6664fa00756812b85e5db5e2bf50ab8940f","sha512":"132ca2fed9155e01262065a7f7b770390384a4d4635143260590a4d45d7a156a58d6e1a09d361b2b8c6bc3aabb66530c40e7cedf8cd702fc4278ea987828903f","ssdeep":"","tlshash":"86f005f727b004f4518542621f48539c572505443583802d759646f4eab39241c74dd3","first_seen":"2026-02-28T21:06:13.257945Z","last_seen":"2026-06-13T22:17:00.821111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_no-data.21cf5ad05a9a06aebcff.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_no-data.21cf5ad05a9a06aebcff.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"c3351ee3e914bf766d9ff5bf27ce7274-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ7NJ1QTHKQTN2SC2XC\r\ncontent-length: 7837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 312, 8-bit colormap, non-interlaced","md5":"aa28816f373f77698a367298f803f825","sha1":"7b93283c98a2ce9a3f28cf0c20a4b4af8341ca17","sha256":"89c138334e422b73d3e6054403fff89f4b2d1615caf52f5ddf83ab979155f96d","sha512":"f3e942aee8f7131120e13c29b65bdaf9b48b003081090bb40c489e2d02c1d6dad2460647456d19c19c9c5e06970868e858454771286a74fdbcf1e2216c7a5479","ssdeep":"192:GsNJ8lvehEpyLuG+o2LMADEhVcp2L+fAZPWBJqzOa2R:GsfOzpxdhn78L+4ZeBN","tlshash":"10f1afd8c0e16ea52572f8292b113db181fa2be11cff085ac91c3745479a7d6ec7ead0","first_seen":"2025-06-25T17:57:01.382871Z","last_seen":"2026-06-13T22:17:00.865828Z","times_seen":9,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_ton.c26fd7a7467b637009fe.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_ton.c26fd7a7467b637009fe.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"9910a8126b7c743259c1a8c78cf2c580-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ95Q3ZB7X7B7AAQD60\r\ncontent-length: 8577\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":8577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"fb794b021f92df1509806991252803df","sha1":"e55a70a5e3b7f4f44b3d6d430df505b4e0a2c5b0","sha256":"8559183f1658a35629783690f947431c35eca7ea51bb48a30e4d73c3febb7a35","sha512":"3f46b2fe0d91c57f248c9c58b9a163470ba75b8b043682902549801a050f4f52c8d0eaa1f7e31e3944d8bb0312527a89a98209b23d598bfe30e3f78c78418b55","ssdeep":"192:wXH+hYvUacTZ6yfbD+ZHKF24am212pmjar5/BMqvJl:wRvUa26yH+224ad124mrkqvJl","tlshash":"6202bf00fcdb7cb3d26146e5052c466a85275d22bdfec4a4891c7a87d40b9c8ea84edf","first_seen":"2025-06-25T17:57:01.375265Z","last_seen":"2026-06-13T22:17:00.859813Z","times_seen":9,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_about.c9f5693d89a22e5c9a5a.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_about.c9f5693d89a22e5c9a5a.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"17851e6925e7fab6e865487aa1a582cf-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQTF45AYK37C6Z64QV7\r\ncontent-length: 455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1099,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03cc103b62a18a1ee4fa5bb1d4ec46cb","sha1":"294b34cee186457460dbe935ec737ffe521bfc61","sha256":"0eb1195d9a327c93088ad7d4441bfd94a908333b73e6df98ad8a6fc193dda1a2","sha512":"24ede37b234d3dd613d74a4c5c84bb0111f503b0962f9c398dd67395685f886dc58f0568fd76e3aa7328668cf1d7eb87f34160d12aaec6905824f0e8791d5d33","ssdeep":"","tlshash":"7311657d422c96dd63536838db21c0a1d30ca2f27887c6b0ddbed27ca4f2181d8571a2","first_seen":"2026-02-28T21:06:13.219603Z","last_seen":"2026-05-12T08:25:53.509545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_install-mobile.1c22a268841cba738161.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_install-mobile.1c22a268841cba738161.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"89d7447980e70fc7daafd45506bccfc3-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQV5P2JWQX4RPBVF53R\r\ncontent-length: 477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b581d2b15369a6169566f728592ca94","sha1":"215b8a2ac92897b19e3b905abde3e2076d2891d5","sha256":"6010a73161a85938604b875d4ca45916111de300d9b46882fb3c7f464086779b","sha512":"422abec3db94d8057a6cb73cd0196c2f744dc9346525b16bab0a0b50de2f733ed8f6042b452ac0fb4fa09d78ccfe870f41f87789f8746e0a9dba197418b0dbe3","ssdeep":"","tlshash":"4511c929822cdb8fa397af344715c8e4c34d70e1702fdea0d89ca738983708ae1834a5","first_seen":"2026-02-28T21:06:13.228495Z","last_seen":"2026-05-12T08:25:53.511486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_language.df0622b74ef90f819d96.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_language.df0622b74ef90f819d96.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"583fa4c4f0596a1796a189a4e1f6af74-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQVK4DPKY9HV20A25HK\r\ncontent-length: 775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba4ecface3913f03396b491467080f25","sha1":"7392a92c0b12e502e4b7a9f941aeebe0ecef76c7","sha256":"afeb59d716acdc530c453c8b7c8c9f97c7ce569493083688446910fa353caf5a","sha512":"4370601ec6e73d1bc3529b0386c5465a9c38c75150a74b22a06d333c02d001ce6f8d212111a0ee4ea16566f7ecab3b7c113fe9062ecc919e703afa0ea3ea96b3","ssdeep":"","tlshash":"f2312efda32c80dcd24383aa8f3695ab830e90b6b5ddd1e04abd8b382493989d517854","first_seen":"2026-02-28T21:06:13.25995Z","last_seen":"2026-05-12T08:25:53.512974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_ton-wallets.e6fc13a1b7363829b547.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_ton-wallets.e6fc13a1b7363829b547.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"f495fe341e48658115e906d2d647e545-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVR1XPVD72MEJ2TBCZ4G\r\ncontent-length: 653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97e4f0c69adba93f1cd66fdf053a0d21","sha1":"0cf6167f68b98f90ea75e896cde45afe65c98029","sha256":"bffa1af87b58f11dabbee8b0dd0b21d1b14831f3d144f69c4538446f86b2e6bf","sha512":"df9dec8c2c1282cc0f4b2b3f61d9ae698bad8ee9dc2dd76f7921f0bc9bac5b5948e10d31022a4a88d03ee40fabe28c5a92b2585a5b21dee14d5e4f359ba1b574","ssdeep":"","tlshash":"44310cfcd30c9e2cf007c11cce58e372831f60b970594a9018bf86bcc88268ae60ba80","first_seen":"2026-05-12T08:25:53.514294Z","last_seen":"2026-05-12T08:25:53.514294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/theme_dark.84481132b93739f5799f.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /theme_dark.84481132b93739f5799f.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"5f3e3f42d7fbece83cdfd69659b94c3e-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR31PMX3YF1RV4QBS82\r\ncontent-length: 6335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 224, 8-bit colormap, non-interlaced","md5":"a6243ead83c26887a02c3a3757e2040c","sha1":"3df11be0bf0a00a519c240c896408f93a4341f62","sha256":"9950fc63324e13dc3222b40f3c92e1d29e7bda0776322ac70f1d972896867ef1","sha512":"b23da621aaf7355fa9d3324e7f06f1a0b662754d41f758fad72e95b1d9d680550c52b1a62dee3268365028943f6a5b53d3ad7d6fff62d282edd192837eb68180","ssdeep":"192:2PVL2JRIHmR+ulufZRmOIjKbnq6eB1y3KZW:2P35uufZUOyS1qW","tlshash":"5cd19e3252696e12ff4a66b957c7105609f5766d0a0fd96b01db8f8988713423c03b7c","first_seen":"2026-02-28T21:06:13.2452Z","last_seen":"2026-05-12T08:25:53.515762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_snitch.b567535e9c071b993b06.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_snitch.b567535e9c071b993b06.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"a13e8406699ce3fdc53810569aec7de8-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ81W5E54B812EQ5PEN\r\ncontent-length: 7264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit colormap, non-interlaced","md5":"fa85d564e40bfe3f1f832ea7986cce1a","sha1":"420afefebde191a14eba40d16b882df2e6c0e5f1","sha256":"56c64ff065c52761d04ec38da4d1b946eabb579777ed517e3058dff93466a271","sha512":"5d2f6a357cdbc78b930a3a4f3f20103ff4f0e3f5704fb17cb914ed070dcbdf077f053f46b2505e44179902c14586be7e3997768fd27243226cbdac350d7000a1","ssdeep":"192:RHJ+zCygiWI8W7XhzjhBf0zLtUX01hls7Usvnx:1J+/gitjDhJBuLkmHs7BPx","tlshash":"65e18ea6d917162ad5c7cb83b13f7b46859d4b63d7b002afc6cdb2e5b1e2a88001181c","first_seen":"2024-08-19T23:05:23.650258Z","last_seen":"2026-06-13T22:17:00.850371Z","times_seen":10,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/theme_light.8bc9f236b0268765ba5c.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /theme_light.8bc9f236b0268765ba5c.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"2eae4d63884174d6a675eda4b97d86a7-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR4ZXZ5WZ3Y2MYKCZNE\r\ncontent-length: 6190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 224, 8-bit colormap, non-interlaced","md5":"9d3076ca9c8fb113e513ca2ddba55b2f","sha1":"f6396a2eb6128418b942a928b5146086c63ea7d7","sha256":"2d775bf22218537764bcf206c51473d15158c17c1ddd57c1865b37a710a72269","sha512":"0a5857a480a9ef44a62f66db0c97090635a8fa71df1547f39150245bf81427209a47c038ae06388adcca2eae4129023cd929191a718915f5bd55d29a4983a121","ssdeep":"96:/5Nb+cJXbpsSVl7ne9YQ4JXtue2N3Zqj+2quvBHHcMkjuz8iOx34cb++pjfIURqV:RNbx5K9ERtU/29celOt4cbhIUMV","tlshash":"aad18d95dd1f2c763283fe9d87a00dd1209865a4e09c704c562be87f9eb48b88131bda","first_seen":"2026-02-28T21:06:13.252331Z","last_seen":"2026-05-12T08:25:53.519593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/incoming-transaction.4ddd93d8f1ec1c4e2651.mp3","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /incoming-transaction.4ddd93d8f1ec1c4e2651.mp3 HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mytonwallet.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: audio/mpeg\r\ndate: Tue, 12 May 2026 08:25:24 GMT\r\netag: \"d985408d42543366ef6e0fefee7240b5-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMWQ4BY9TQEE5NQAFJK6X\r\ncontent-length: 62144\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62144,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 48 kHz, JntStereo","md5":"f7b10c087e8ee7d3b68e2af24be5f38e","sha1":"745527917172ec108c0d041ddbd7b27188ff52a2","sha256":"5d1a255e23014698cdb6102b692a11ace744574a36df6ca30fc7476578854459","sha512":"f31cca25db99bf8bb4f5e56093f5283101f25a35f36e27bba3f8acf4547339d7f8fda55cd013e2f89c2b9dcea8d4eaed2666e71be2ef51f7c57773714385d96b","ssdeep":"1536:SOohcT4wMJp6/H+HS0InhN5FpX5WMM4zu95HZG1Y:+ikp6/H4S0KfXru/ZG6","tlshash":"6153d019abe00980f1de2abb369b4422cfa314dbef51dcc1b1ae66528f335251f5f085","first_seen":"2025-06-28T22:04:57.337984Z","last_seen":"2026-06-13T22:17:00.856272Z","times_seen":6,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/941.e3c881c640df0346e01e.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /941.e3c881c640df0346e01e.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"37058aec7769c58f07b0c18eb80c3004-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMX42ZVV33J4WB8T5AA9Z\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475700,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59780)","md5":"2e44bd89c447ab1d7c01d7ed42239683","sha1":"dd4b4d037b76e66a02768c3c6d39cbd54204e8fd","sha256":"7f88c2bb5252fb872da5e8de680dbd59bedab75c22368dcf092fc29eab831b90","sha512":"6c9f839c1918f9c18b1c896b62f73c4a4a852f8323371840d98a559690e4349988cdd3fcdb572f4c7177a08e793b9c57a9dc5e7aa4a80951df441f640d1569bb","ssdeep":"12288:ff9KiTK7Kf0fGqQJwVEKkWhhaUSszoETwgJHpb0RB:sL7Kf0fGqAwVEohhaUSszRTwgJHpb0RB","tlshash":"e7a45dd033a3b16197da14e4947712059134bd84b40d8098b39ce9d73eba9daae73f3e","first_seen":"2026-05-12T08:25:53.523691Z","last_seen":"2026-05-12T08:25:53.523691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/861.d2af681b87e9df2f4ded.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:26.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /861.d2af681b87e9df2f4ded.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:26 GMT\r\netag: \"7cb24cf009787dbf2fbcba55299c7c76-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMYEEYNE9VAZW8P5CK1NR\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":4230,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4177)","md5":"e370aee275ad4626abe840d135379f0c","sha1":"5dc34466deebc89145009a4703d3437f7d7d3f70","sha256":"b51994784cb7f9e7de77c81f779f322389f1e674ef8b918bb3aaef997f11243d","sha512":"8cc268ff6f7acc7c91d20c50525925ac45674608e7b3b0beb5b4179f36c74beba1a3106fa3dc19477baea19b951f1f0d8c774000827f63a4d28ebb02015c0005","ssdeep":"96:dqjU7uYDfVDib+PjHATvZpYhEA5pUtdCj5H+yrRfCt/tf8YXu:dqjkuYDfVOxwhstdCNovf8z","tlshash":"1f91e7ec3ba1a1f4535319f028cf8e8780f45962bc0995e4c721e8e99cb89d75075f9a","first_seen":"2026-05-12T08:25:53.524982Z","last_seen":"2026-05-12T08:25:53.524982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_thumb.8d21bd4f32485ac2c2a2.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_thumb.8d21bd4f32485ac2c2a2.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"75ae9d4915cbbbb1dc46a788edb37998-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ9X1DV9NASYEF7TTCC\r\ncontent-length: 12749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"93cd4544846b8d0e16d3c5a0138b3ff4","sha1":"0d2debc3b57dc84eaa63cc6402548b462c801668","sha256":"353363e10e4cfc28d6e97e6802fe508156d72294e70c2d88a65ee94c4cd4df70","sha512":"0c1c8902687844fbd4a0b64338555f2630b5bdbdeeb68d40771bb1c411ec901cbcae6da484a5bc509921aef15dabb2117ee098b42e17b523487dc2cf462f3e4b","ssdeep":"192:1FQor+30QtQ9wsRVOXc7cI27G9tQeibjEl+4Iy+ZiRa/BNprBscZdgW:FrKttsRf7MVb4+ka/3LswqW","tlshash":"7c42c08cd56d2dfae1b2032e44735372ab9e8171a465442f068d320827fca82dc679e6","first_seen":"2025-06-25T17:57:01.343332Z","last_seen":"2026-06-13T22:17:00.858598Z","times_seen":9,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_appearance.61a43ead981894da4a21.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_appearance.61a43ead981894da4a21.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"d306eb30b8e340e141ae5abe03bae6f4-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTBN299CZHB60ES316\r\ncontent-length: 726\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d01655b52b57ea0a330549746c395dec","sha1":"13a29507f1ca535689aa5d7794a451b86c2023b6","sha256":"361e1b504f7c03baa7e2c3ff3a8397ef54253031b41be6b51b12bb7ccb0c12a8","sha512":"0c4e91964f5c34e7028192d9c544f77a915e3e8f79cd87204d6116d08ca4f655d3977da5c552aba815b9ea7c8545db66a92ca18c5d432d68e8d8997be1d4efd6","ssdeep":"","tlshash":"410115a9c2189a5dcb1b503ddef44495131c71f9809c0365b2f56e09b5b87c7dc0d0f4","first_seen":"2026-02-28T21:06:13.264913Z","last_seen":"2026-05-12T08:25:53.527785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_checkmark.4c62604cbc9fd263c110.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_checkmark.4c62604cbc9fd263c110.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"9c521c83e8c79741c1e0c4c8f3d404d7-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTB7GE96JV64KNW73J\r\ncontent-length: 197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"757a4116d9761a722e0cb94e4402f7d0","sha1":"13ebe53997c13ed5ff6c390ba3364f5066e12578","sha256":"4d046013425f96dd52ab166877029c1989b70a5ff368298b7b1b270e78258805","sha512":"3599de8b04de22b7ee3865808dfd2f503a1d5962b042fa5f3a61af72d7ac7c312261a29bd64f44122770613785e62ed5523ae7b7d865eb18a219ff18f09a9b29","ssdeep":"","tlshash":"ccd0124e93485d2cfa274a60db78777002561157071c526de4611674aa1194e793bdec","first_seen":"2025-06-25T17:57:01.385121Z","last_seen":"2026-06-13T22:17:00.843334Z","times_seen":9,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_notifications.6f2383c3d610d9019741.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_notifications.6f2383c3d610d9019741.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"64aebde4e36a57447299a37c068b4212-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVH1J2RV8V4TEJ7GSH\r\ncontent-length: 805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b82432d64ed82399b2428400ee2156a","sha1":"26e78c89c3f15f8a57c0ba5f60289a00a814573b","sha256":"f64e16e57a1632811885aa30728a06147f7d9a31d61aea162bbead97bfd8b9c8","sha512":"45d0caa8e22610b8fd929bdc8f18665592fdec6fd91cd1c2627838cd9845f15a7341b795afe68b57e1327aee672511cade2dd529eb47cba830fced28c2a4734e","ssdeep":"","tlshash":"f20146f6c76d680ed6638675cd2c4491131d71edf858421060cd7f14b854acbc70b960","first_seen":"2026-02-28T21:06:13.273182Z","last_seen":"2026-05-12T08:25:53.531533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_video.2e678912f355b56be160.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_video.2e678912f355b56be160.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"5e290975fc28ba325f295bd7f3400085-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR2497JENR5H94VRXHD\r\ncontent-length: 675\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc05d6941c00f5063cd3426f548019eb","sha1":"4aca405bace9aeb2fa7ecd9f380bdfd739c7d87f","sha256":"c617a7b59b5e8a832288dc60336b66fff2a02016a339d8f074507f241855fea8","sha512":"21baa332b90ad8472d8952740ae293dcad6e0000112ea23efec349cb991fdecae346be54777d145792af49867c6593cfd6e94f65f11d6f50021c18aa18bc22d8","ssdeep":"","tlshash":"62019ef9230c50cc9901c7551f5e24f6235de3f275fbc285b68c965998814cbf14f614","first_seen":"2026-02-28T21:06:13.251397Z","last_seen":"2026-05-12T08:25:53.532767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/main.1e95a7635c27c4e2f9c0.css","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /main.1e95a7635c27c4e2f9c0.css HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"26cb3c6f36456315094decb35683c00f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVR5QXD0CT03QHKAYWC1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":393931,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (10954)","md5":"31765f45e77e70592d1201a17f349088","sha1":"c7711bb843b570a580fdc006d6a5438590e1c9d3","sha256":"4f448ae6d8907d0e5fc0cb4ee31e238177efa5dcaa290cb66bf46cc92891416c","sha512":"881b2f02919d3e20cde4725dbe49b01859baa5cfb80ba9328c96af6333789ae2d0dce13fca076cb6293d1bc2f3a96425611112a50f30e4921b848e703638a3f7","ssdeep":"6144:62yEr08RmEIeYK/OlNNwnHbK6eFsz0Sp+v:RY8RO","tlshash":"fd84ea6df780617dba27d22a17e88bec5238d844df1207edf653b26082c77e71972648","first_seen":"2026-05-12T08:25:53.540729Z","last_seen":"2026-05-12T08:25:53.540729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/rlottie-wasm.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /rlottie-wasm.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"8c6f8e2e11e4f8e7ba012016ccb55024-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXNN635W13D824H1YZ04\r\ncontent-length: 22782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0dc2aa4acda9691f0081fed00fa07cd","sha1":"66eafd865c4a328fda4c154a0cd54f02ea7ef3eb","sha256":"8b571f3d975dd65a66142999e022179619e7f09ac8dd264c3cb0e0fb8bff550b","sha512":"45aa07bdf4460ece5aae1a9712e6e8ee7a2b4425dc061719e6779ae1234398f0c99129774f236b2b44849e49a3373705fed9aea43e3b9f5f5760780123de09b9","ssdeep":"1536:REG6i+XwgC/ieo3+kr/9LcZlImviRilsl3f:REGEGkKZumviDlf","tlshash":"1183f9497ad570f683c73a78a86f260bb2b75c53581cc014da19e8e068b4f59e43ff98","first_seen":"2023-05-18T21:21:17Z","last_seen":"2026-07-20T06:30:34.923752Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-12","alert":"Hunting_JS_WebAssembly","trigger":"mytonwallet.app/rlottie-wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_happy.b8afd923624d1ef9061d.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_happy.b8afd923624d1ef9061d.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"44bb1c87e465a8417a7ae8bd109abebb-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ6DHPJ8A5N9R46X1X9\r\ncontent-length: 16031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 312, 8-bit colormap, non-interlaced","md5":"4fad49c56f2ecd13e7122ac9d0eb3532","sha1":"daa92364f6f7e8aa06afad91513f700c1e921863","sha256":"45866d36c62c4daf95c188714b6ae89006ed72771947ece8f80db8c0a333e7c3","sha512":"e3582daff896e53dc136020432c1b7693d83e7984fbf7c2c697ebbf9f0ec28d303635851e9e913b42beb8e875e22b91f13edc3a82a5ec6472acec909a6d084bd","ssdeep":"384:x97XAUWsnm78LknPxjrTGLZYRbMHN3yBFi:v7QUW/gLsdHGo2CBg","tlshash":"3572c01ee67674b235bfa9f4247c79a4d8a3af371de0c504352c32308b69efc10a6549","first_seen":"2024-08-19T23:05:23.653399Z","last_seen":"2026-06-13T22:17:00.880551Z","times_seen":10,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_hello.c865862ea6c03bf4088b.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_hello.c865862ea6c03bf4088b.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"be43281e2c57d55ec9e4fccfd1a5086f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ6536WK5BWPMZSN34Q\r\ncontent-length: 7270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit colormap, non-interlaced","md5":"aed4987939c8d07b6f9fdc4d2910a68d","sha1":"58f3dcf433fcd6797dfd4d418b8f7398f935ed51","sha256":"9be42edeaebb5d9f079e312603e060b530259a56ee1ca9f9afb82bf1adbeb339","sha512":"5931bc414bdec0a96055a8fec5607741215999b1dec202a320d48854712c592b5723765d72ad7320a01cc08583335457ab95ffff1d3f7779ee00cb70bf40f9c2","ssdeep":"192:Ls+x+1e9yswAhk7FOPpdfBUubv0C1N7hp1:Ls+x+1OEAheFOPpdfVbsC1nz","tlshash":"ffe19e48d9907c17cbe5912cbab894e8d17340ffc5ada36a112c30613d46f7529e50ce","first_seen":"2024-08-19T23:05:23.651577Z","last_seen":"2026-06-13T22:17:00.842308Z","times_seen":10,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_secret-words.594687182868e734ac8f.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_secret-words.594687182868e734ac8f.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"cb47ffdb961b2b24f2b2ca1f23e4807c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVJYH11AWJ08QYQX6Z\r\ncontent-length: 560\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc3ec353f6a796698929063e0e1c7849","sha1":"f57e7d9b0694c5828849a7c1528040f4b9e3f1d8","sha256":"7cf1e56ead8ddb12beeccfff2f7b6fcabebd19ce45308a6376aba671653f801c","sha512":"55299f11314c797aadc1bbe14abfdacb136a5b68d5f40f31b2faf7fee55c692bc4cce55427ec30bc1e3c989f62d0de611a7a8de5277b42cdc8579fc7aaa88df0","ssdeep":"","tlshash":"def0eb90030cb43de28787988fbc9c091a0d22c4f1240588a18c4330d00688ae8776bc","first_seen":"2025-06-25T17:57:01.386145Z","last_seen":"2026-06-13T22:17:00.882979Z","times_seen":9,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/rlottie-wasm.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /rlottie-wasm.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"8c6f8e2e11e4f8e7ba012016ccb55024-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXNHH3KJWE8JNSNVB102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0dc2aa4acda9691f0081fed00fa07cd","sha1":"66eafd865c4a328fda4c154a0cd54f02ea7ef3eb","sha256":"8b571f3d975dd65a66142999e022179619e7f09ac8dd264c3cb0e0fb8bff550b","sha512":"45aa07bdf4460ece5aae1a9712e6e8ee7a2b4425dc061719e6779ae1234398f0c99129774f236b2b44849e49a3373705fed9aea43e3b9f5f5760780123de09b9","ssdeep":"1536:REG6i+XwgC/ieo3+kr/9LcZlImviRilsl3f:REGEGkKZumviDlf","tlshash":"1183f9497ad570f683c73a78a86f260bb2b75c53581cc014da19e8e068b4f59e43ff98","first_seen":"2023-05-18T21:21:17Z","last_seen":"2026-07-20T06:30:34.923752Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-12","alert":"Hunting_JS_WebAssembly","trigger":"mytonwallet.app/rlottie-wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_disclaimer.bfbd307de6222997c175.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_disclaimer.bfbd307de6222997c175.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"0a61942ddbfb446847d04d5ab4c84b2d-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVBH7XWY1KHN7YK0BQ\r\ncontent-length: 768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"578d4fb3893ffae76bfc54c270af2c9a","sha1":"ec15e9bb4f9c783d1895c07289de956573d515b6","sha256":"3107e3239c86575f715b3ff4dca8bffc96eab1f40c7662f0e9031a61453da2b1","sha512":"650a20a4fcde35c8d0b2b9f8e9a0789464dbf3bc14a84f19af84dd7ce3fb133389616e54d7c8d9feaeaf16c059fecf2270a380c7dd4338fe62ade6eafa4f4038","ssdeep":"","tlshash":"7d0125da8148635ed65dd57cdd34c5e1411e20c9c8d7c130e1b85f1de8145d7d6087f4","first_seen":"2026-02-28T21:06:13.209048Z","last_seen":"2026-05-12T08:25:53.550695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_security.88f84d4d147dfe254b75.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_security.88f84d4d147dfe254b75.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"0a5344a4ac46b6ec606d613ec0f31986-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVBE244M4P27DMPSN9\r\ncontent-length: 807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0f872cb669221edae71471ed1d078e7","sha1":"3b19ff1bfb5e29013aef9b8f9bfc319747268286","sha256":"37ed36a61a606ed0df95072eb086b8415ac9b595292f122896ab9cb11c4d1636","sha512":"1da030c514d9cc0b9f85d2aa7a24564d87cfbbf081f3803b62f456ca33688f42fe8f48f36b1096d5889671819fb41512ce3ff70dce6aa922ce61e857db633c81","ssdeep":"","tlshash":"8d01ce65c518d40dc219997fedb89845124e22eaf06f039d66ed1a1ddc140d7d92cdf8","first_seen":"2026-02-28T21:06:13.238971Z","last_seen":"2026-05-12T08:25:53.552871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t7R-tQLL50tE8-Hw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t7R-tQLL50tE8-Hw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mytonwallet.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27936\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 May 2026 10:32:47 GMT\r\nexpires: Fri, 07 May 2027 10:32:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 424357\r\nlast-modified: Tue, 16 Sep 2025 13:32:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27936, version 1.0","md5":"31adcf4019c5a54eaae7bea2dd87242c","sha1":"201447c8c5d8ce5c01ec760e291377ca23f4afe4","sha256":"33ce1a7cd7d610e243905ac0f2b8179ccaf20d771419725569fcb2370d5c176c","sha512":"d30c5331921d690ce4531d29179bd64d8f5fbe4082509df30f20811c4d70670c3baaabd345db1d69043607ebb8f91018cb75d2e56dfcba28b8aa0c6c021ebc58","ssdeep":"768:vx5f7tsIkc2JuKRKJJrf3vELaREdnGmNthWqwbIf:vrf7WIZ2LRKrf3MLaREdnTWQf","tlshash":"c8c2e15c97266348c050def10aafa14b4dc9bbc38903f9dd7127a0948ad62b3391ebc2","first_seen":"2025-09-17T06:44:58.067634Z","last_seen":"2026-07-25T23:07:44.053518Z","times_seen":742,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/862.487961bcc20426bc5073.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /862.487961bcc20426bc5073.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"9c6aac8b9ca1948e4320329434b1728d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXGPWNAT6RAX1A3H8K52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9078,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9025)","md5":"d5f204e3cff2c9cba742eeae6567ca50","sha1":"b3919560d1975b97662d9088f4a53fd3a773b392","sha256":"e5abd2a3123e684227d8d2443970de8a656416b8f2c545d5361ccd14a6e0c6b8","sha512":"db38d0a285b288a65f52d2c73a8da7f61055092cc599bea5132b55c1b519eae46b79081ec612a442d0305b09adab3693c868afaf049a79f5f1ff7a578915d3b6","ssdeep":"192:0U7XcP9vbOokdNwWKi7E97kz0VfYicR5C1TOgmPHsyTJHajyj:0U7u99sE99sU1q9Pln","tlshash":"7112d98c76f0f4ee92f365e080ab1807b0b6bd99558d6035b35251e36934fc581bbf91","first_seen":"2026-05-12T08:25:53.461107Z","last_seen":"2026-05-12T08:25:53.461107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/theme_system.642451fe0677c74596a6.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /theme_system.642451fe0677c74596a6.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"4d1ee253d9e9a5acfe4a7dbb609822a3-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR4D63KCP19GRNDRN57\r\ncontent-length: 6741\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 224, 8-bit colormap, non-interlaced","md5":"78858175fc529b3c2d4e1b2937cba25b","sha1":"31d17a6195895eaa03a54fd33af013badbc7ba40","sha256":"63d895a7e6b79c2b6427573f84f7d8ba42a7008f8b42c8306e3e23580f069667","sha512":"c960aaa41c6a3d950aa4addb0824385ac8e8bfe22034c7b89ccb1020ac0006b3483fa19dd3dfe10d35d3fe6db1817b768eb03557db75c9e6bcd18cef15eee1ca","ssdeep":"192:DR2JWvujLmR/7Lu8lX7S4TJJW/UE+96L65CeJZ:D4WWX0/7NXJW/n+9r5XJZ","tlshash":"f0d1afba1b09c4c0d9270376c24baab236672fe4dbcfa385415d32bf07651814e86948","first_seen":"2026-02-28T21:06:13.230373Z","last_seen":"2026-05-12T08:25:53.560496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/892.a8688aa34f2b73e22575.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /892.a8688aa34f2b73e22575.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"819f16c3cc4f7d5c1656be79e056814e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMX7HET65GN46WQ9NSJ7W\r\ncontent-length: 6756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14970,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14917)","md5":"9da80c2068f56e07ec5ccdefabefc286","sha1":"b46416d910b2571b5e0ef7b2f4d8d2ec5e24f004","sha256":"fe151e742a9d3f21d376c87aee9dc5f1b98e6212d0cd7712e16b062c0c3f1be5","sha512":"a7bd12ee96e56cf43fd9c31341dfcf484be3adc2044f936b4aca5ead21735975f425bf1e813b77423a27b45d71b381bd79a9963b10bb47d6005c01a86f5ca8be","ssdeep":"384:bTGEOJfeQ9lof21k91MXHvLNUcup6xg3O+pisydlQx4l7C:b/kfeQzofV91MXHDNU+xyEHd2A7C","tlshash":"f9620ac833e2b47653a32caa506f6005e237bd34300dc620f36a55d63c72ad995b7eac","first_seen":"2026-05-12T08:25:53.455224Z","last_seen":"2026-05-12T08:25:53.455224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_bill.966ff858d718072aae75.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_bill.966ff858d718072aae75.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"7826c3bbe7ea7aba4ebf8845aef38cc1-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ680GW89FGE4EY3TYJ\r\ncontent-length: 6898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 220, 8-bit colormap, non-interlaced","md5":"e0e171ac5bcdb25d53d05e44f719a9c3","sha1":"505f8aa4282eb2d36f72a78c872e8cf7d07f7454","sha256":"1ed0fddc1dcee617e42b6fe264470a643e3ea5671bfe6babf5217a0e455e3948","sha512":"fabf9d364d73da1ea37c0840ede72276a303e40d866c83f7745123fee0ac8a16a086195f1ee8f1eaf35f0d5bd8574b56d766ce3bed0a21670d9d2d11512cb448","ssdeep":"192:cOHmMbvN6QkJYXxFkJtAdfGcmbfaKPZNFs3HG:RH3rN6QkJYBCJt6fGcGPFs3HG","tlshash":"38e1af91e6ccbd02e20d66c3f794a613007559c52c37ba27ccdf74808dc2490c0a8eb1","first_seen":"2024-08-19T23:05:23.652226Z","last_seen":"2026-06-13T22:17:00.840985Z","times_seen":10,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_yeee.6a3e6f89a1e9cdb20fc7.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_yeee.6a3e6f89a1e9cdb20fc7.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"56a47de042f0489254cbc2d17e094bfa-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQT2232SWED8R8KCYH7\r\ncontent-length: 11105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"c77a12d9a33bbf6a0efb3c63bf460c07","sha1":"e5d5d02f08bbd037f669558c25f517786dfd74d1","sha256":"f21e88b4376e33267358fcad74036f0ee54927d55f296b47098e34278ec33472","sha512":"33f0d993e589138ed65ed122ac55420fb0a5964b74847c28e2618b9d51775f9b2bf6ffb91e809ae80a407edfb3a7c6e66bd954c286f44218f6277bf5b7e5629f","ssdeep":"192:vCGeecFx3siCJLyXq3c+tQAMm0vLz49g3PyXJGenGCoB:KGepx3sVLaq3jhMmA349A6XJDGt","tlshash":"c232c0afa9d15597df3a331f24083ca4150bf3626bea21d5fdfb3d9241840c10a67b19","first_seen":"2025-06-25T17:57:01.344032Z","last_seen":"2026-06-13T22:17:00.828702Z","times_seen":9,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_assets-activity.b96a8a17616b9d0e2cd7.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_assets-activity.b96a8a17616b9d0e2cd7.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"d705c6748cb46a316d543a329e3e8dbe-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTGBRF8P4AQEX1CVZY\r\ncontent-length: 954\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8a08642fe9d16f7fb49c73af802cb55","sha1":"cd10b402e76a0e2eaa9bdc95a87c5be3c056075e","sha256":"f687934c8d33a8d76d794bdd245da8c3445246b9e3e2f5905604837a50ba8de8","sha512":"1de96b080af64896aed62a9db328b52831294af1d43f0a02b45b19cefac248c6955fac6439629f2cabce37e61a12657e7938f6029045790607e120bf03786904","ssdeep":"","tlshash":"4411bdd4812ca9c9d90f8939df2821d32197b5eb754a43646350ea0f59d19f3c10c6b5","first_seen":"2026-02-28T21:06:13.22408Z","last_seen":"2026-05-12T08:25:53.568387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_install-app.69ee9749f83288055504.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_install-app.69ee9749f83288055504.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"776e2611ce0f0eccdb18adf74c37375c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVC1XPHSYV9KYQGT9F\r\ncontent-length: 796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"161c694d099ee2f9108fe161a717e1e4","sha1":"26ad64f1c6ab946a4e169a6a7cafb50dd0f20a85","sha256":"145f4f7e75ecf76a60cdbbb8d661bc5b9155896c83c6168272bb40411cd9fa5f","sha512":"2a24adfcac694988a88d591a85e3bf6a56631a9cb081a6ec9146a47366b0d83fdc97baa0a28fb21323bbf11019478f2dd5cc731a2c13a6000b17bb536cfec9ab","ssdeep":"","tlshash":"d301bdb8d69c891ee90a517ccd788071d31de699704db22065eefb3618411cbe60f5f5","first_seen":"2026-02-28T21:06:13.225283Z","last_seen":"2026-05-12T08:25:53.572417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_install-desktop.be6a3df962b45348b92c.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_install-desktop.be6a3df962b45348b92c.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"6d53d35e45239d46fa2d0557029be758-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQVX6ERSBVXX4F8NY53\r\ncontent-length: 518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c27ab627a8ccc2cdb1c9bdc90baa6af0","sha1":"ed349ef91c709ffc287c0dd1019d83c5ac5c9fa2","sha256":"94314f4d76e857b70181493b3c3ef3550ffca585cb949373fb6e91a8e7bae559","sha512":"16997fd212f6ab154870e4e4daa0a5aa44a3d0cd36a0abb19f8ca0537d92debba284dceff41e6a20ba7d191b448f3c6be5705ecb6396e46e2c842bf8b6e78c66","ssdeep":"","tlshash":"dc21487c820c8bce4697b6a4db28c4d0a30ea165b0dfdee1c59e6a3864334c7c14b460","first_seen":"2026-02-28T21:06:13.221262Z","last_seen":"2026-05-12T08:25:53.575751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_tips.a88cae57d7d5c43d45fb.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_tips.a88cae57d7d5c43d45fb.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"ad46e4c3b694a7edb7b76e6a5846b163-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQZ8EDP54H9XHXVNHXX\r\ncontent-length: 557\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e331fdc4a7ae27b1b9952ed88ba2ed8","sha1":"4b7f9624db63d4915ddae15613ff0317396e7894","sha256":"f78ecb4bcf37722a6851148849b9ec9b94b00da663f14ca23ecba61e67bcd42e","sha512":"d5aef0e670f69e9f4982009760a653f1497581ddc15087e79059bae12d0dd0931d5322bbb342fc30759c000202f90633d6f840728e5de331ad9b449f791533f7","ssdeep":"","tlshash":"d3f0c6b9d34c994ede094229c73858b5135c23f3b8dc42a954ccdb4d64108c7d90f9a4","first_seen":"2026-02-28T21:06:13.210001Z","last_seen":"2026-05-12T08:25:53.576662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mytonwallet.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:34:54 GMT\r\nexpires: Wed, 05 May 2027 18:34:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 568230\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-07-28T14:14:30.714632Z","times_seen":41173,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":11,"receive":10,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/840.a8361af9970ce7f2a9aa.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /840.a8361af9970ce7f2a9aa.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"3ceab5ade9fc646ca797aecd018306a2-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXEWWW1RRBPCKN1Q9QNJ\r\ncontent-length: 8536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":29135,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29000)","md5":"9856f28813c726aab1a5544eb0ed9471","sha1":"91a58ab76765511784dc7daf706743cff8bcc4bc","sha256":"f6332e3b7e8ee718e29e10661354ce365f35b805a99891555c6e51826d5d2143","sha512":"f8891e01b0dc1de2edf7a1192c52d6739460376dca3b95bc7f3dbdd8dec19de03e4b3ffce0b7708776a5687374f75cf4907a40369e6c6844ad48b2bbcffe782d","ssdeep":"768:/S6lM7EowrDaH2gqLcxGjBIfKDONTttStoV8uT5UT5GijbsT5vT5TAVcMWAUh5D9:/SCeojkc/to+GmGdUAaS","tlshash":"b7d28584f6a5b07643926691006b540bf279ea28740d58ecf254e4f328f68de94fff78","first_seen":"2026-05-12T08:25:53.482393Z","last_seen":"2026-05-12T08:25:53.482393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/949.0ccfed40e25b7dd3b55a.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /949.0ccfed40e25b7dd3b55a.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:24 GMT\r\netag: \"3ac89a8e6b24f41da7ae5fe459835cb7-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMWY8S9KZ7PC43MZE59K0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9831,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9778)","md5":"8420b8e35e49cf20cd9d1d7d4ca88d2f","sha1":"b55d08e39b0dd24e7766e20bdbfd253e94145f6a","sha256":"59bca445a378d3af3eebce856fed5acaf10b5c84abae5392fa2c6729658a1968","sha512":"3a83f5ba5edc386e18866d6af53c45bc10ff614e800fd5615715c09a081d928a633abb5dbf98d1045e04bd359511b1adeba23b9840b6f4807397aaf82a61b212","ssdeep":"192:24mCZDYfXwYInm76iRlwxH0Ylvcnc/qyMuVjtRCd9oR9vYLj:24dDMAYInmlRlULVcncLBtRCd9oR0","tlshash":"3512a696a03564ba22da44d8d6244b03ab365554740ad2bcffbc79ef2c8591a30fcf7c","first_seen":"2026-05-12T08:25:53.582405Z","last_seen":"2026-05-12T08:25:53.582405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/rlottie-wasm.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /rlottie-wasm.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"8c6f8e2e11e4f8e7ba012016ccb55024-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXNR9KN8KM4PD8QY3KTS\r\ncontent-length: 22782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":87701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0dc2aa4acda9691f0081fed00fa07cd","sha1":"66eafd865c4a328fda4c154a0cd54f02ea7ef3eb","sha256":"8b571f3d975dd65a66142999e022179619e7f09ac8dd264c3cb0e0fb8bff550b","sha512":"45aa07bdf4460ece5aae1a9712e6e8ee7a2b4425dc061719e6779ae1234398f0c99129774f236b2b44849e49a3373705fed9aea43e3b9f5f5760780123de09b9","ssdeep":"1536:REG6i+XwgC/ieo3+kr/9LcZlImviRilsl3f:REGEGkKZumviDlf","tlshash":"1183f9497ad570f683c73a78a86f260bb2b75c53581cc014da19e8e068b4f59e43ff98","first_seen":"2023-05-18T21:21:17Z","last_seen":"2026-07-20T06:30:34.923752Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-12","alert":"Hunting_JS_WebAssembly","trigger":"mytonwallet.app/rlottie-wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_guard.e52094efbf8070e9b01b.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_guard.e52094efbf8070e9b01b.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"da7aaaeb187324037906d4e576289e2e-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ65VD3YNHDDVY8W1YR\r\ncontent-length: 8023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"22eeafa2bfc2bbb6f0415c7631b3cd42","sha1":"8ed085ae9900391a0856ce8bcb90b9ad4e982c95","sha256":"241388ea76e18b7e746841e034a8e8f8b8001dfba50491c58fd3771c148b7f1b","sha512":"7e48837757f3b456b23bf0f82ecc0fec8b06fc489e6c26bd1e517a71ceec5a9b7721447d178bc2cd23a84b6ad823fdd867e696b5fa95325310b0252448fa60fe","ssdeep":"192:LKyKATzlrcxODfSb708Ni7nQLVfb3XmH+kEpuplQ:cAdrrDfSbXLlQ+oplQ","tlshash":"8af1a0abd9e59ca9da5003fc6cc77b660e0d6c1f0d959c5141faf1769c74340c0204e6","first_seen":"2026-05-12T08:25:53.583286Z","last_seen":"2026-05-12T08:25:53.583286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_backup.b9a780430d5dc0d76c99.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_backup.b9a780430d5dc0d76c99.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"336dcec93003c5216a9748f5e8d6a81c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTZ7NTEHKVC2DMRT3H\r\ncontent-length: 569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cd06b0ac1a92913febd68c43f2b2b80","sha1":"fd59fb06b54b21d1bff0d0eb89f096d3df4d85a8","sha256":"2e92468a91b114b04781ec55b07459f54b6d68a8b874bd6b308e6801fec434aa","sha512":"39f4fd47df6fc95c979d82d559652a1d1ec923bd3b1e37a94c962eb5c9559ce02a1f8e1273b062fb4b87183a7aec2a66106dcaa2a3ef3b629d57cbbc934fcee0","ssdeep":"","tlshash":"1bf0cde8629c444ca90b423cca3c40b4c75ef5a9720d7124699ef73168821aef51b5b9","first_seen":"2026-02-28T21:06:13.242817Z","last_seen":"2026-05-12T08:25:53.584534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_face-id.9114cd96723fdb063bc4.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_face-id.9114cd96723fdb063bc4.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"766d3c624036c903bcc7c1dfe8392bdd-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQT8WQNYE2K82Q58QRC\r\ncontent-length: 670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2036,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c44e90095b68974bde1f23becfe8ad3","sha1":"b6344e66be6638eba556eb5b6443ca258f8062f1","sha256":"5fc64a82218b7ffce2600b483e39cd8a3a439c5d598e2d650ddabd7f33b107f7","sha512":"8b36e72d6816aefec4d4f8d7edac837b157e365fba52b1542096aec557687d557f9149ee26eb028740985e79736b8649f709e9634ad31a8f068a8c9ee649f4aa","ssdeep":"","tlshash":"f341a7e5412c026cbacbc96e8f7894a01b1d6474b7b9cfa46e4fcbb84007e84ee17010","first_seen":"2025-06-25T17:57:01.371158Z","last_seen":"2026-06-13T22:17:00.876419Z","times_seen":9,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_ton-links.99c05cdbbac2de95b6b0.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_ton-links.99c05cdbbac2de95b6b0.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"85f7674d9f88de5293cb8ff0fb806aee-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVR0DFZFW4C1YJ4RHM16\r\ncontent-length: 856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5d31ec8c05e54897c3b85d34c2dd2a1","sha1":"58051fae8bf6a4b231efb4ce76adcdee83b18873","sha256":"e1d2905b2d86ef4cf94f3f1570d042e881e35f4ef23022950dd39a4b8a9d248b","sha512":"1e056277c7cae283a3ef617bda2df51fbf151fdfac08f8e4489f1e70483dfea20181b9421c57d7c0f49dac1d3d6ddf65562d0404c09df49c075cb69fc99da82c","ssdeep":"","tlshash":"a6118cea805ca8ced40bccecdd584015030e61eaf6975725c09d57afb8278cbd49bdb8","first_seen":"2026-02-28T21:06:13.217833Z","last_seen":"2026-05-12T08:25:53.588022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/892.a8688aa34f2b73e22575.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /892.a8688aa34f2b73e22575.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"819f16c3cc4f7d5c1656be79e056814e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMX7HHH7RVZ7V5Z9QA8X8\r\ncontent-length: 6756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":14970,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14917)","md5":"9da80c2068f56e07ec5ccdefabefc286","sha1":"b46416d910b2571b5e0ef7b2f4d8d2ec5e24f004","sha256":"fe151e742a9d3f21d376c87aee9dc5f1b98e6212d0cd7712e16b062c0c3f1be5","sha512":"a7bd12ee96e56cf43fd9c31341dfcf484be3adc2044f936b4aca5ead21735975f425bf1e813b77423a27b45d71b381bd79a9963b10bb47d6005c01a86f5ca8be","ssdeep":"384:bTGEOJfeQ9lof21k91MXHvLNUcup6xg3O+pisydlQx4l7C:b/kfeQzofV91MXHDNU+xyEHd2A7C","tlshash":"f9620ac833e2b47653a32caa506f6005e237bd34300dc620f36a55d63c72ad995b7eac","first_seen":"2026-05-12T08:25:53.455224Z","last_seen":"2026-05-12T08:25:53.455224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/duck_forges.52c157bd0cc621f324e1.png","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /duck_forges.52c157bd0cc621f324e1.png HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"b5d32bf8b028fbe75da649c9486d5e44-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQ67D0ZFY5Z7QWH8CS0\r\ncontent-length: 12289\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 312, 8-bit colormap, non-interlaced","md5":"ad8fe5911ba3be377b90093595bcf975","sha1":"3446958ba5ae7d0d76567199a417c8c7cbc8e329","sha256":"48d05a86fd2af72ea6dafbf6dc955b1d5158679cf70c1b4e0fd6ec0944186013","sha512":"5d71a03f709ac5b300ac37133fd9f9dee80a0caf261620864000357c19941cd9e9a72c90fc073afbc27b2ee806c54c78ac3876fdae5550c908b1d8e540e205b8","ssdeep":"192:CPH0HHuNA7NsHWYo4p+LK0ldiipLAE1RpD1CO2Ten/dHTB1l04JsYi6r:CP0HPJsHnzpuldfxRpD14Oll1i4Td","tlshash":"6f42afd0efe27f8a8d91c514677609c84aaa8ab546ee0443016f75e1bb3fee9d09a014","first_seen":"2025-06-25T17:57:01.373625Z","last_seen":"2026-06-13T22:17:00.849243Z","times_seen":9,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_air.bc1394c26b3ec707cdec.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_air.bc1394c26b3ec707cdec.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"94654136a95e718a367257271b6ed493-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQT60VPFAJ2YXEGP6MX\r\ncontent-length: 574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1639,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59059e16b31bda1f43ffc47582a099c1","sha1":"8fd74e57f40d813c5c6060f883183a1637656f0c","sha256":"721a38e36194c7a8a44a272823c4feee65a842566335a2b60bd7f15295d76bf1","sha512":"1cb088baee470caa84beb3e2ea281c3920e628d415c5742a862aa676188bfe05f609688ff53ab8058cb5d3488a1a681d751b0f711d1569568db55bc4dfbbcf6c","ssdeep":"","tlshash":"7f31acc186f41249e5895b7eefacddd0410bb2eee185e2c4ca979b08d55c3c2f60aa44","first_seen":"2026-02-28T21:06:13.263751Z","last_seen":"2026-05-12T08:25:53.59241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_private-key.5db3564e144d742b44ca.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_private-key.5db3564e144d742b44ca.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"6ac62d3176dc537ff044d3d710aea768-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQVJ7Z5ERV68NZ97R8C\r\ncontent-length: 402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e809e51f5c012b462edad9173a83941","sha1":"d62145037785658dc41a73af02a347105cd97f71","sha256":"3dc7e5abc01cdb913163c5a98c6e977114a08b2fd35862bd9b990da633d5044f","sha512":"a89778c4ec1423d126e6c2b17afc344b94381c5e6d837f18925b10bfdd8a95997c726c226961b5adb2205a4d050558094176f37708172fc3835ce471a028586c","ssdeep":"","tlshash":"4ee0abca0208969c0246c13aeb3c588d272e64ec9c3401c172481524a94293fb02a229","first_seen":"2025-06-25T17:57:01.351259Z","last_seen":"2026-06-13T22:17:00.879598Z","times_seen":9,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mytonwallet.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:32:10 GMT\r\nexpires: Wed, 05 May 2027 18:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nage: 568394\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-07-28T14:12:45.840944Z","times_seen":20876,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":71,"dns":2,"connect":23,"send":0,"wait":12,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/rlottie-wasm.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /rlottie-wasm.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"8c6f8e2e11e4f8e7ba012016ccb55024-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXP2ZDAK80FAQ4B5J5FG\r\ncontent-length: 22782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0dc2aa4acda9691f0081fed00fa07cd","sha1":"66eafd865c4a328fda4c154a0cd54f02ea7ef3eb","sha256":"8b571f3d975dd65a66142999e022179619e7f09ac8dd264c3cb0e0fb8bff550b","sha512":"45aa07bdf4460ece5aae1a9712e6e8ee7a2b4425dc061719e6779ae1234398f0c99129774f236b2b44849e49a3373705fed9aea43e3b9f5f5760780123de09b9","ssdeep":"1536:REG6i+XwgC/ieo3+kr/9LcZlImviRilsl3f:REGEGkKZumviDlf","tlshash":"1183f9497ad570f683c73a78a86f260bb2b75c53581cc014da19e8e068b4f59e43ff98","first_seen":"2023-05-18T21:21:17Z","last_seen":"2026-07-20T06:30:34.923752Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-12","alert":"Hunting_JS_WebAssembly","trigger":"mytonwallet.app/rlottie-wasm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Telegram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Telegram phishing","tags":["telegram","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mytonwallet.app/840.a8361af9970ce7f2a9aa.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /840.a8361af9970ce7f2a9aa.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"3ceab5ade9fc646ca797aecd018306a2-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXENM4S1CNKR84JZE763\r\ncontent-length: 8536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29135,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29000)","md5":"9856f28813c726aab1a5544eb0ed9471","sha1":"91a58ab76765511784dc7daf706743cff8bcc4bc","sha256":"f6332e3b7e8ee718e29e10661354ce365f35b805a99891555c6e51826d5d2143","sha512":"f8891e01b0dc1de2edf7a1192c52d6739460376dca3b95bc7f3dbdd8dec19de03e4b3ffce0b7708776a5687374f75cf4907a40369e6c6844ad48b2bbcffe782d","ssdeep":"768:/S6lM7EowrDaH2gqLcxGjBIfKDONTttStoV8uT5UT5GijbsT5vT5TAVcMWAUh5D9:/SCeojkc/to+GmGdUAaS","tlshash":"b7d28584f6a5b07643926691006b540bf279ea28740d58ecf254e4f328f68de94fff78","first_seen":"2026-05-12T08:25:53.482393Z","last_seen":"2026-05-12T08:25:53.482393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_support.10a609dbcfa678072471.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_support.10a609dbcfa678072471.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"ad91c700897459f1858ac27b15acef7b-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQZJ7MGQH1NC112TNXW\r\ncontent-length: 656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ca9c770c154370cb26b61b8d2806c12","sha1":"ce8f9161637cd999d76857ecbfacb11675e41193","sha256":"593b83426e31665aa58ecd4b96337d3d681823d33924beda188af0fa7597af48","sha512":"758be05d62bde0c1a37d21549b6e609f106512ab945b0c923013fd47d4cab13bc367064f6d09e7eae0aef759793cc4b19d0fcfcde4618c8aa884da5974e89124","ssdeep":"","tlshash":"5df002b4c93c666ed207b15bceb894073b8e81f6b3c082e0d45c9f29a8638c7c00e674","first_seen":"2026-02-28T21:06:13.265781Z","last_seen":"2026-05-12T08:25:53.59822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_mytonwallet.60d18a596388a7d05802.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_mytonwallet.60d18a596388a7d05802.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"ec246a11d03d1e79010ab6774caaf9c5-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQT8D5Q69AJY7255T4R\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":5218,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29dc13c28fdad5b36c9519a5fc4116af","sha1":"e92a1c4cc88504a936dd2f7b816e6706044652e7","sha256":"353c85d0350302277f8f49c1541541ddf43593457233688ad39cc4a98f591493","sha512":"b08bced61777d409d14e77e42577b337b635b31addc21d3afdd5790046f61f6ec50f9724c874c8d6f57bbd64a2cf1e875d7378b2a6ad6e6f6dba59c779b6e522","ssdeep":"96:opToUJF1aHKIeDU8F8xjwXbPYJWZFkry29/l01YhpcCH:oyURa/oFmwXTRFCl0GH","tlshash":"34b189d98734a18fc18bc62ddf24a961130e24fe399bda55d3de4f6c98c34c6ea0b454","first_seen":"2026-02-28T21:06:13.254645Z","last_seen":"2026-05-12T08:25:53.600439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_wallet-version.20154a34da529eb12c7a.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_wallet-version.20154a34da529eb12c7a.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"f72d61ecf211c04189b4bfeaa7851c4e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVR223TRTDXBGKQYWK6Z\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1079,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c41968ab6bddaab221f55b53c5b59c6f","sha1":"eb79f0feb27d62908d6c04700e5d987e4312c2e9","sha256":"4325e98268331dc3b9ceaf73906dc53d0e2ab0d9cc6b03a235ac304c625ee3f7","sha512":"07b8e27efef25116a780cbf6feb91c59f9c0ce70727ec1153904201b78480c1e397308564272e043effe09c2cb9122dfc937b58ce2c12a454a424321c465c4cd","ssdeep":"","tlshash":"3f11f0f8b59c436fc60ee5bdcf6ca4a5536d61d6b1e5422173ccab67040709aed044a8","first_seen":"2026-02-28T21:06:13.261905Z","last_seen":"2026-05-12T08:25:53.602542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/logoLight.c9797ad4583a416a16c9.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /logoLight.c9797ad4583a416a16c9.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:24 GMT\r\netag: \"f0f8a68ee1e61fc71a7059bb254b847e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMWR1N09VBKN5W87GMC7X\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1da77e41e1d9f8b8b2408a676e6ae65a","sha1":"d8e54d1114935c33b8e45814dfbea76bbcf7e214","sha256":"3906f2dd7d5750c2430d92d7290a6eba59b16a2fd20f8fa34dac74c579a58dc3","sha512":"cd4292d3b7f7cf182163803e170a7d67e11482c9ce4b98d12f58e8692805571859b308cbc281dbc0b57af80dde04f01a2153b68bf62d80e969fc76d1653bf644","ssdeep":"96:rn6SNAgFDdJSVaug1y7muGra5e3lZ9ue6zPZgyguzjc0zCFmABlwGViSRgPhDd87:rn6St6a947m59CPZgg/vzCFmmGSG9m4a","tlshash":"7bd193eedd6d22fcd54ae3ae5b20c858334f517e3051c6398dae9bb8108359cca9bd50","first_seen":"2025-06-28T22:02:50.896345Z","last_seen":"2026-05-12T08:25:53.605204Z","times_seen":5,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/862.487961bcc20426bc5073.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /862.487961bcc20426bc5073.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"9c6aac8b9ca1948e4320329434b1728d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXHBF1ER1RFR509KJCW4\r\ncontent-length: 3825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9078,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9025)","md5":"d5f204e3cff2c9cba742eeae6567ca50","sha1":"b3919560d1975b97662d9088f4a53fd3a773b392","sha256":"e5abd2a3123e684227d8d2443970de8a656416b8f2c545d5361ccd14a6e0c6b8","sha512":"db38d0a285b288a65f52d2c73a8da7f61055092cc599bea5132b55c1b519eae46b79081ec612a442d0305b09adab3693c868afaf049a79f5f1ff7a578915d3b6","ssdeep":"192:0U7XcP9vbOokdNwWKi7E97kz0VfYicR5C1TOgmPHsyTJHajyj:0U7u99sE99sU1q9Pln","tlshash":"7112d98c76f0f4ee92f365e080ab1807b0b6bd99558d6035b35251e36934fc581bbf91","first_seen":"2026-05-12T08:25:53.461107Z","last_seen":"2026-05-12T08:25:53.461107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;500;600;700;800;850\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;500;600;700;800;850\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 May 2026 08:25:23 GMT\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10926,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0846774eb882e4162b567b5a22720f7a","sha1":"81df5ab0d07443bd69ecfdef498f192e7e3826d2","sha256":"e813cc0b0d36fbc45cef2849d60432a6736226de3e1a1aa3c75f54d5b742f8e0","sha512":"cbd52980ae2ac0b74610d679f09ba1ad0aaef793fdb05512dcd22bd284ea6cb3d0ae04dfee49f02b4c93195f34d12915452adf3bc5d490b9bd397fdec93d6938","ssdeep":"192:OH+yptkUtH9y6uk7kH0yXLkeLHbywkkdiHyy1RkoXHnyIMkVH:il7QFDPe9hZyk","tlshash":"61327891045bd400aa432cc66bcf7e36ed4e62113454c57aebfd9898ecabd272364b1e","first_seen":"2026-02-28T21:06:13.274149Z","last_seen":"2026-05-12T08:25:53.606398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":96,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/main.8d0280e9286d7b2632db.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /main.8d0280e9286d7b2632db.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"0f2e7ec2c4d22f19303082f04e991bdc-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMVQ6KQBFSX5J8Z45BJHC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228109,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65112)","md5":"b2f926c629e9ee422f5193e7c0561e5d","sha1":"80be6a0c170009b2f11f676fef15a2dfc3bd98ed","sha256":"b9cd9e394ddf766ee5825ef47807bb361093c7d6da030c758153a24044168ee5","sha512":"90988a6f1a21a001df81eb4d7b5f958b3c8a945a56689c18b85c0e74c35728b31e7182aa01eb1d4391b85f2cbf52b2313b4b0145e3f206eacf6f13dd4fb73217","ssdeep":"24576:F+4qJ0pqPE+9+go6ZiG7nTYMHCfc74BJVnzn/peY13MXEBLl+nRwkFPMAT7KbQIL:F+4qJ0pqPEM+go6iG7nTYMHCfu4BJVn/","tlshash":"11252a80b211f03c81fb559b907f0619f3343b44e8188854f0bedd9d7a75b95a6bba3a","first_seen":"2026-05-12T08:25:53.607763Z","last_seen":"2026-05-12T08:25:53.607763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/settings_helpcenter.e1670ecc3894e65d62f9.svg","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:23.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /settings_helpcenter.e1670ecc3894e65d62f9.svg HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/svg+xml\r\ndate: Tue, 12 May 2026 08:25:23 GMT\r\netag: \"4e7b23ecc887924dcdeb6b2a038dec9a-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KRDMMVQTZGESW7ERMQ9HE6GT\r\ncontent-length: 755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":755,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac9e3ff975f8160561eccc0fb6c40611","sha1":"67c76c9e53a907305284dccd392af42a5f8e667e","sha256":"b6c130d51c4f188b8a8e8620002c64c72f7e6937e97203e39dee102a7e81ad5d","sha512":"b7953d486bd85c4053f636d6b7fd0e44e8e6be8909f33c7f8848ad5d853af0b7e760eee0e839028e2188b2a2bf2d5eaf78c9cd78be03b4346520ead981d0ce75","ssdeep":"","tlshash":"1a0120598014695fe69e100dfe3e98d3110d628588c2c31966ccbf0aa85a5c3ab2c19c","first_seen":"2026-02-28T21:06:13.272283Z","last_seen":"2026-05-12T08:25:53.610777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mytonwallet.app/","date":"2026-05-12T08:25:24.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mytonwallet.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:32:10 GMT\r\nexpires: Wed, 05 May 2027 18:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nage: 568394\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-07-28T14:12:45.840944Z","times_seen":20876,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":1,"connect":8,"send":0,"wait":11,"receive":3,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/840.a8361af9970ce7f2a9aa.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /840.a8361af9970ce7f2a9aa.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"3ceab5ade9fc646ca797aecd018306a2-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXC0GWNJV3WQPM1D3WZ8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":29135,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29000)","md5":"9856f28813c726aab1a5544eb0ed9471","sha1":"91a58ab76765511784dc7daf706743cff8bcc4bc","sha256":"f6332e3b7e8ee718e29e10661354ce365f35b805a99891555c6e51826d5d2143","sha512":"f8891e01b0dc1de2edf7a1192c52d6739460376dca3b95bc7f3dbdd8dec19de03e4b3ffce0b7708776a5687374f75cf4907a40369e6c6844ad48b2bbcffe782d","ssdeep":"768:/S6lM7EowrDaH2gqLcxGjBIfKDONTttStoV8uT5UT5GijbsT5vT5TAVcMWAUh5D9:/SCeojkc/to+GmGdUAaS","tlshash":"b7d28584f6a5b07643926691006b540bf279ea28740d58ecf254e4f328f68de94fff78","first_seen":"2026-05-12T08:25:53.482393Z","last_seen":"2026-05-12T08:25:53.482393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytonwallet.app/862.487961bcc20426bc5073.js","fqdn":"mytonwallet.app","domain":"mytonwallet.app","tld":"app"},"ip":{"addr":"99.83.231.61","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mytonwallet.app/892.a8688aa34f2b73e22575.js","date":"2026-05-12T08:25:25.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mytonwallet.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 06:53:50 GMT","end":"Mon, 20 Jul 2026 06:53:49 GMT"},"fingerprint":{"sha1":"4A:4F:DB:0B:B7:94:F1:68:D3:3D:8E:48:D5:C2:79:87:C2:60:62:63","sha256":"5E:FC:F8:79:DE:BD:B9:5C:AD:09:66:1E:9C:5D:AB:B2:46:88:AA:CE:7A:61:CC:16:25:91:1F:CA:0E:07:2D:12"}}},"request":{"raw":"GET /862.487961bcc20426bc5073.js HTTP/1.1\r\nHost: mytonwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mytonwallet.app/892.a8688aa34f2b73e22575.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 12 May 2026 08:25:25 GMT\r\netag: \"9c6aac8b9ca1948e4320329434b1728d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KRDMMXHHZ7H7N0F7RRXARZWB\r\ncontent-length: 3825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9078,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9025)","md5":"d5f204e3cff2c9cba742eeae6567ca50","sha1":"b3919560d1975b97662d9088f4a53fd3a773b392","sha256":"e5abd2a3123e684227d8d2443970de8a656416b8f2c545d5361ccd14a6e0c6b8","sha512":"db38d0a285b288a65f52d2c73a8da7f61055092cc599bea5132b55c1b519eae46b79081ec612a442d0305b09adab3693c868afaf049a79f5f1ff7a578915d3b6","ssdeep":"192:0U7XcP9vbOokdNwWKi7E97kz0VfYicR5C1TOgmPHsyTJHajyj:0U7u99sE99sU1q9Pln","tlshash":"7112d98c76f0f4ee92f365e080ab1807b0b6bd99558d6035b35251e36934fc581bbf91","first_seen":"2026-05-12T08:25:53.461107Z","last_seen":"2026-05-12T08:25:53.461107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"mytonwallet.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}