{"report_id":"e3e07db9-3158-41de-a0c3-749c9296f477","version":6,"status":"done","tags":[],"date":"2026-04-18T12:44:16Z","url":{"schema":"https","addr":"zerionswallet.web.app","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"title":"Crypto Wallet Tracker \u0026 Portfolio Tracking | Zerion","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T16:58:13.439183Z","times_seen":17710995,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zerionswallet.web.app","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T12:44:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-18T12:43:52Z","timestamp":1776516232,"ip_dst":{"addr":"172.67.176.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47252,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-18T12:43:52.057963+0000\",\"flow_id\":1830446283931927,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":47252,\"dest_ip\":\"172.67.176.114\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"still-king-02d0.lostapeclub.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3554,\"start\":\"2026-04-18T12:43:52.049431+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"log.intellimize.co","ip":{"addr":"34.209.246.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2015-12-03","domain_rank":190417,"first_seen":"2017-11-14T07:22:40Z","last_seen":"2026-04-11T20:58:13.043812Z","alert_count":0,"request_count":1,"received_data":410,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plausible.io","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-12-30","domain_rank":8565,"first_seen":"2019-02-01T08:53:03Z","last_seen":"2026-04-13T16:29:42.61591Z","alert_count":0,"request_count":2,"received_data":1661,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"api.intellimize.co","ip":{"addr":"34.247.230.149","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-12-03","domain_rank":198483,"first_seen":"2015-12-18T14:46:10Z","last_seen":"2026-04-11T20:24:07.033213Z","alert_count":0,"request_count":1,"received_data":453,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.intellimize.co","ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2015-12-03","domain_rank":204905,"first_seen":"2021-12-21T21:48:26Z","last_seen":"2026-04-18T02:03:25.409288Z","alert_count":0,"request_count":1,"received_data":370058,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"zerionswallet.web.app","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-18T12:44:22.086423Z","last_seen":"2026-04-18T12:44:22.086423Z","alert_count":58,"request_count":29,"received_data":2854329,"sent_data":14310,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"still-king-02d0.lostapeclub.workers.dev","ip":{"addr":"172.67.176.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-03-06T12:09:04.430669Z","last_seen":"2026-04-08T12:51:13.801576Z","alert_count":0,"request_count":2,"received_data":3736474,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":4,"received_data":1376315,"sent_data":2068,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s3.amazonaws.com","ip":{"addr":"16.15.199.58","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":1245,"first_seen":"2020-05-13T22:53:44Z","last_seen":"2026-04-13T05:49:44.758449Z","alert_count":0,"request_count":1,"received_data":873,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zerionswallet.web.app/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-04T16:43:07.145958Z","times_seen":265147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.intellimize.co/snippet/117668587.js","fqdn":"cdn.intellimize.co","domain":"intellimize.co","tld":"co"},"ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e9b53b33318d20ad091968ee5494cb6","sha1":"a09c36a0f71b48e1543d3c53b6e7905f74e6ed0f","sha256":"8957ce08fe6579e728a577012d15dd706a980d4bf918bd216fe6f6ddc395c902","sha512":"47d50db02295093e283dfc729f1ba78c092dc88a35a326b1022bc64ec2e7daa50d1ad8e76f25827acfb68ab8863e0eb2607cc158b102d5be52567c07206a2f5d","ssdeep":"6144:Whe8DBAZJbs1yPLP0RO59yWGrOLQCPHpcBGmDt5vPSjFA33M6Z+7:3D5xLQCPJ7MC","tlshash":"0474e69072abb23146d9819990790202e336b9d6784d406cff3c6de77c4a9836376fb7","size":369511,"data":"","first_seen":"2026-04-08T12:35:19.974643Z","last_seen":"2026-04-18T12:44:30.335459Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"afc3aba0b6781dba3a4108fbaa99914a","sha1":"c976a9fbb1c8f06f75ae495157acde50193d6ef6","sha256":"dbec704f3a29b997a2a01a639825c60f10d74a5516f57f2403639be6711fe88b","sha512":"ebfbba52c4bbe6876ef45e6f9a39575b324fd81701d80835aaf8a90511ce9632c2f9939969bf69e5508658d94421d5bef011846a729baaef5a55efb84af6f9a9","ssdeep":"","tlshash":"f4f027686ae652bd37b72590c71f9180b6e4406394d4e801b91cf18b0fc1e1024aebd7","size":500,"data":"","first_seen":"2026-03-06T12:09:10.091089Z","last_seen":"2026-04-18T12:44:30.346828Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"66e47ac826e0dcef5eccdc28248ad6f2","sha1":"d8b2c6d92a715712236b91445a74822ae99f9dda","sha256":"f78800a04e9d8f5f15f063d1929b9448c9b4710c8c23881413957d8d4c070bc6","sha512":"217e5644c3ff72134a665246b8d84029fc1110252c85c63cbc67bb2af7f818215456f51c9d27cbf7243cd0210d2ce96d238b47f2422d8b8e3cf2c5438b2c8afe","ssdeep":"","tlshash":"97d0223b22c0603c0c0b7a097b1ff90a3e4b928176902102ce2e97d06d43cee29129ae","size":209,"data":"","first_seen":"2023-03-10T13:56:02Z","last_seen":"2026-08-03T02:25:54.048992Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/fs-cc.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aed0baa2f338ae8fe5a8813c164418d","sha1":"9f014f0b077751789367b62e0178db08d183a4ec","sha256":"bdeed7650697bd478a6b0591a9ea29664b04a6681a4f9f7c4c2d3d10cdae42a7","sha512":"b7f1647f854f55af0f83ce54dd5dfd0330fcefc5db401506fb0d77b7caba4aac4a2e57b8f2be25b9e3e0ad68d9e19c99c10bdb5878dde305958a036fb7654cb0","ssdeep":"768:WeNqfXcWe3r4AvlIk54bWrTlzqo3QJ/va6wtbBOc79:ReXcvlH54bWrxOo3QJ/XwtbBph","tlshash":"6ed20aa1339a753117ee82fb602b1703b220b4a45457886cb97ccced156de4a12f7fb9","size":29614,"data":"","first_seen":"2024-04-26T20:46:46Z","last_seen":"2026-08-03T07:33:20.156055Z","times_seen":2366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20a3bbbb9afb4f215dd32699c23294e5","sha1":"1b67989b8d3c44a20924c346e9b220d6c2a7051c","sha256":"78315a6205a029d8b82e443df7b7fdef173ae9869dd5f64e4f4b7a0405e5dc6c","sha512":"4fc33098b674ab65decdb77b018829edc0eb89b36aca8db4839450c1eda486abfa3815eaa9c4378fa83ea9c9277b1158131315719ffbca448d2b19184a8fe11f","ssdeep":"","tlshash":"d0d0c9c753b6ab26c4d832ffa481fa14e6b7560af05c9d56b36240013ac51564778fcf","size":200,"data":"","first_seen":"2026-03-06T12:09:10.100673Z","last_seen":"2026-04-18T12:44:30.348261Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b906714ce3d23373f2d52b0b92be4e9","sha1":"f7df85206be42561abf7768ddc92d95024dccd9f","sha256":"5a6333a40db34d4f91fc175f1694033f93284cba4c4f306db4e9ee4d4561adaf","sha512":"0e5167a6c75ffffb317210bde4646f0e178a0ad6f1b9554195c1a861e922c3429c3c4c455ae99fcc82a810a93a4c9afc55ddeb0efa85ac82538de112e44cad1e","ssdeep":"","tlshash":"4cb0123e50cc7e10046de0b00e3e5187125a0300b09c6240064dc16435231598d284cc","size":92,"data":"","first_seen":"2026-03-06T12:09:10.10186Z","last_seen":"2026-04-18T12:44:30.348877Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ea69dbcd09fbbd7841d7025295d90c6","sha1":"5ae8dcfb50c8ee560d2f18aaba0e27567a7a9e14","sha256":"4fe5d3da9a4a02e912a907aaca304dacec5e274c8a556e23982abce5c5243197","sha512":"a8bc0463adf5855a001d73b51e4fe0b97cb3cc6f074eb6d6093028fc83cb86488b9157b65b1a041ce9276e28a2a3aa63955bda70e0c6ed8043b7e1549b3a1bb6","ssdeep":"","tlshash":"e0e0263530c4603d049af0b8763f0e0d7e78268055c82b099b7c9286ae34cde9e06c8c","size":337,"data":"","first_seen":"2024-03-13T11:10:35Z","last_seen":"2026-05-23T00:39:20.535475Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8319778e8830ae6f5983a8d251a29ad","sha1":"e2d332d5775e74bddfe5c24334983fffb91b1519","sha256":"1ec1309da9a761130d36f877a6d845505bab870d5e6f2362f03b4ea04e62f4f7","sha512":"9346afb2277066be8c87f7ee4b91a308384f219c75e1fddce80192cbcd0dfc7ccf117be32db2d002beb0fbf38025db6cbc42b22ce604145e14dc592c526ca476","ssdeep":"","tlshash":"2de0487c3b11e975425a265eb07bc5fc353040d415936002a1aeac4d1534d968f4d808","size":348,"data":"","first_seen":"2026-03-06T12:09:10.103763Z","last_seen":"2026-04-18T12:44:30.350298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/plausible.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b5b48c4c1efed79da2c557576bff85","sha1":"f441809be456048d32225ae0d47efaf1006efbe5","sha256":"a34d5ce3e989b828c42fe4994c8c1e21693c311db3b076fcbf5202cdc505e5ac","sha512":"7e68bb787c024fb14042a4ab95b7ad5d81750b357404865fab281d16e925a0f5e5149fc46f32549f73d57fd17052ff10ce323b28eefe34cf231f29457b00aac2","ssdeep":"","tlshash":"80512db96a02757909b9d167b62fb3163a3366263116b401542cd9c13e28eefc323ecd","size":3005,"data":"","first_seen":"2025-10-28T15:34:03.371103Z","last_seen":"2026-08-04T10:27:29.006783Z","times_seen":6575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"76a6c8c47e5a04a2564d08a4c609c25d","sha1":"a4cdceae51d078d711adfb7b1692507e5df81292","sha256":"abf5d09c00b14664a852a7a7028568eb371ea0d1ac0997a9dbb10a08d8a1069b","sha512":"6c4de24adde93104ae40008d1d32d50e7b2b7909a0bf164800c993b9e218c4adfe8a2bb1d9132532512829094110a2ff3e112f6e017edacdc0acea0b65882721","ssdeep":"","tlshash":"faf0ab8f75da14342d4b91365b3c8e243122215ab0458033bcfc88352f092ae0966bf8","size":441,"data":"","first_seen":"2026-03-06T12:09:10.104962Z","last_seen":"2026-04-18T12:44:30.350856Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.66b05907aa9aec79.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e76d783ba78ad007f4bd8a35357d446f","sha1":"cdfd6fbaa81788b2bb6c280a000b36269808764c","sha256":"6f7f9b7881c666da1f09ac0f813193dc8520b1a0cc02312f01700e89e97dcce7","sha512":"d8517adb1d4495880d4b18bea8994e4729351a24466b24f90a46798a0743fc15f717705440747dad422630a4d50845e54b232e295c9c916c3c7dd076d06805dc","ssdeep":"3072:asfeznfyrOnkRsL/bWDQu9CzQY6t0k1XxCZuAvTd7z7iVrP4lUgrZ:zsuuMP1q7z7zlUgt","tlshash":"d3f4b58372e6b57b015f021ea8971005a6f856cbc5d7c6a4c864dece1c3d9ecdb8732a","size":758943,"data":"","first_seen":"2026-03-06T12:09:10.072397Z","last_seen":"2026-04-18T12:44:30.334438Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/index.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcb9d84f79e5af9511f6c532cf1d55d1","sha1":"53b4dc65f6e4a1b26919b4f4f2e2c026e7da82b0","sha256":"c7e5b3b3e14acb665169fb78e3fb5274ece9a3d5cffa3c11b36620769298d5d9","sha512":"bbf579be078333720accaa5c0926cc40064d5ec94623df3adb80822cb1d71b38fa3fde96730bc86370e3770a109e951ab18927f52237fd035bc542e18cc9763f","ssdeep":"","tlshash":"37117a44cb4194b81bb751fb33beba897c3221e49267404921a6055c15e479bc3a7ee8","size":911,"data":"","first_seen":"2025-06-03T09:48:46.85271Z","last_seen":"2026-07-06T01:58:27.782254Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05729ef9bb17b5ff41d3bc0c58ea2c89","sha1":"4047c9dc9b13dc4c7d10fac94a408c9b3a863e16","sha256":"26d62a9d078d54476443cd1f1e944d0e6f04279d8f80fe269df112819cad6030","sha512":"e4995d68e3fd7d0b6766ed9fa6eef55b98b2b023576719055041e36e237c725e267b4ff26c19e5c9351a2349e4b4118522d920de579446830a4148f02f1d24b9","ssdeep":"768:FsqnKNcHY1ZcA+rcD6T2pWcjJ74cUWHSrcKL/c5cDhcGWTUr3nKc+qYUv4izg07Y:tnK6HY26D","tlshash":"a643eae1a94bd4e49e4611eed037ec01e0285967ceacf183b92ddec2742df62854b53e","size":59743,"data":"","first_seen":"2026-04-18T12:44:30.351487Z","last_seen":"2026-04-18T12:44:30.351487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16518077808\u0026cx=c\u0026gtm=4e64f1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0385420de7a580809cf1142000a3d63","sha1":"f6d999b95a500f2b92adc42e1176e719f0198b8a","sha256":"6ab84c6da100602be5339e3a521e9581d42915c68732bf8e20a07d988bc1eb0f","sha512":"f9723de974a2cd61ce8a04c0e91d6a381ef88c950b152d13a1233a0ea0800d052b440370a6b752c7fa001053cea495f2b4d2525803591d48962d7956eb51c3d3","ssdeep":"6144:o4OjKwCi4MRBZtfJJPj8B3U90yIjwcH6pL5gWhurM1XH:KT4MPfJJL8u5MO3","tlshash":"cd9419cdb3d674625393f478903f018ba57a29a2b44cc89af189cce42d7469a4277f7c","size":434265,"data":"","first_seen":"2026-04-18T12:44:30.337986Z","last_seen":"2026-04-18T12:44:30.337986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c7a8001000a67679d921f955ddb4d5b","sha1":"18a14e6f19823501bcf7659864271b37c38b24ad","sha256":"fe7a3ff9c186e531e707db0db973afa03ae9452b752c1ed43a1177d503c1b5ce","sha512":"5756ae7f6c77ed08b4c6d5847a38c6e0e5a79ef0cd8695d149f12c15a4c3c29a6a4a9e2c6a97c7c9892da1db0ef722bb51589d280f6839e5221e1c8788019c0b","ssdeep":"","tlshash":"84f005f7345ce71607d7521c1912f5d1783300471c067403b59c22a5bf48b8d85339cd","size":518,"data":"","first_seen":"2026-03-06T12:09:10.106092Z","last_seen":"2026-04-18T12:44:30.352466Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7561e42c30e1619d8470dd741124cf57","sha1":"bc3067f5e92547ca63d822bb8f027d73e99567a0","sha256":"10f71d353a99b12718ceb79b3674845632b58d6c3173ad1c227ac0f16743c285","sha512":"19878fd3fc0d301b741996a810c3d982d71b97585e47b7ea9ba53c3e4b9a310c15785deb5164bb4964e800e95d515453cf178c0cb22b71ada1d52a3a68c8935d","ssdeep":"","tlshash":"4f41235770d13a6ad5c331d8bcdfe54432f8501ac1ac805ef50ec0ad6934e9d467daac","size":2012,"data":"","first_seen":"2026-03-06T12:09:10.107153Z","last_seen":"2026-04-18T12:44:30.353027Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4e49f4b29986c3b3201b83a172b6a75","sha1":"5676a66384e7a23e61ebbb0d52acc96ebc54edb7","sha256":"1d0b97d7b501965de50120dcf20585257be66706e8a8734ae149e61b2765bd67","sha512":"efa813b005ab6e071ffc6840a7339f05eaec3c1a7b1e0e44274cdd60a40a1c493bcf855b947ee0833f76e4c28ca272e61a99ba4470abdeb12b5eb6f944d5cb16","ssdeep":"","tlshash":"74d0a77b652858290f5b70ec8107d64c3a12591359e4d557753d98856f12f7078a2382","size":240,"data":"","first_seen":"2026-03-06T12:09:10.108226Z","last_seen":"2026-04-18T12:44:30.353599Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"still-king-02d0.lostapeclub.workers.dev/","fqdn":"still-king-02d0.lostapeclub.workers.dev","domain":"lostapeclub.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.176.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15abed6f089821ba0a123a99ecba68ca","sha1":"1ca20cc20a5d51a0a05cd0bb3247a52fb48d808e","sha256":"5b6a8366f81ae6e10cfc09c80914c2d75c8b689cd1280151bd232028e0374a65","sha512":"5565c8d057e9df90a0cddc7535fbd644b782afc1b4a3c81adc7d5b8b17e2c7169df8fe4e4d7de4eb3f58d336026c6ccc36bc101bbff6c9784bd619e85cb5691c","ssdeep":"1536:/MFgUNF9RYq3rM5rZUZKX+/SryC1P1fLkAP3gyEZIav0GQrDZNuHycBOfaxiO0AC:0FpJlbqrWn/SrB1Pp3gyEQDjmqeqAkS+","tlshash":"2464b3c52ad2526cff4b424e8ce26d44d4548d03be5cf163aadefd8075a6e61c0873ab","size":331708,"data":"","first_seen":"2026-04-18T12:44:30.326356Z","last_seen":"2026-04-18T12:44:30.326356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e7b5bdbabebccbf7f9684d3c94de4dd","sha1":"1f473bea3893a74f1a676eb0b4ddc06b57ed7dc9","sha256":"5553abbc130c2f366dc0cd474dd3f382286ac30ba7698778be9c55e2d30dd24e","sha512":"34a2480ad2d56e05c0502539f371f26d3fbe78fb1a531343dd4596af0fd012575d6c2f55b28eee9cbc959c43a344e5712f8e39c63a945b2f1e32333a229bde7c","ssdeep":"","tlshash":"66b012172d588c5031be51f74178664870305cdb1dc2f0367a1c02a44552502c238140","size":101,"data":"","first_seen":"2026-03-06T12:09:10.109295Z","last_seen":"2026-04-18T12:44:30.354147Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4071185a0de6e1d6a218d26f38fefa4a","sha1":"dae1c16a8d71cc3453d6ee55e8342576d10e2c2e","sha256":"a5d2de4c22262a9d72b8a78ce4a2b5642127bd9d74f7cf27acda26d0510749e3","sha512":"11c3005be84dc3d723d88249e480704eb32c2999e397afa3859ae773ad55fc84d3e137664411339873085c537cc0703869251ade22c9ace19916a9691db23aba","ssdeep":"","tlshash":"9111422a39eb6c58c30e9bba725fc7cd14b6a9012a80cc90c089c0b8a015ec510d1a7c","size":1035,"data":"","first_seen":"2026-03-06T12:09:10.092221Z","last_seen":"2026-04-18T12:44:30.359061Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f90de608d9f3c22f6e29159e5b17606b","sha1":"f644c27dc9175b3281f368d3102a1b52c07b66fc","sha256":"c005e507cdb161cd25889091cb7586f0a0c4fce8186765dabd9828001f9cb6d2","sha512":"c928da6003b6a567ce14646738eff2e23b21312f2c016578a63ebda8b165443d4073666f8a514c56991e586699793f8df6623b52dc6e1b1c4d93030e2e2a88ff","ssdeep":"","tlshash":"4631c15c36fba058406339eadbcb120430707543b019e949ba9de2701fa960f9b739ce","size":1580,"data":"","first_seen":"2026-03-06T12:09:10.110168Z","last_seen":"2026-04-18T12:44:30.360399Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X6X9DHZZBR\u0026cx=c\u0026gtm=4e64f1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"964264e0afca1583185eaf52fc19dfa7","sha1":"b937013976895103423f4b524c31e147b67c3a8c","sha256":"3044698b4b14f08d0bdf64e1a6e61a253c5175802c1d7be2625a91a28480cba9","sha512":"758691c23a49ce6773d7fbbfd602db128eeb2137fec267f025a5b0365f85945252ece076db6f4dbe5d9f99604efdb5cc193548c4cae154547ce739d7fee2913a","ssdeep":"6144:2N4OjKg7CA4MRBZtffJPj8B3U90yIjwcHtpLUgW1e77pka1P9jXZ:y7t4MPffJL8J597pkyp","tlshash":"16b40aceb3c674225396f478903f01cba97b29a2b49cc89bb189ccf02d7455a5167f78","size":525482,"data":"","first_seen":"2026-04-18T12:44:30.34245Z","last_seen":"2026-04-18T12:44:30.34245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"519bfa546484df3cdd05f5be707723cb","sha1":"68c18334aa8fc83013d2888540834c192999fe2a","sha256":"ea2fea54cd3ca184554c0d8137832ed7686c610fe69e4044a48648010b8e8b18","sha512":"a9f028a638c612180536b2fe64c34ca85b3ec47e3d050d7d758cea76f177d7cd4711ecd3463ca95188e18680ceed58b3af4a8e78269471c2632c61ea8304311f","ssdeep":"192:1MaF32fZyhbhspkxyk0ZtIsU0nUIWh6Mb2onXeyCSqCPBDaD1MtY7ZmQ6j7qariu:cjEeeNWgQ6C18","tlshash":"7822621c60e72566087322e96b9fa244b0388117769ddd417e9cc3f04f16e2ea6b27de","size":10891,"data":"","first_seen":"2026-03-06T12:09:10.113593Z","last_seen":"2026-04-18T12:44:30.361347Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TCHSGLG5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df88b1ecedb9c48884d04a4e24d98976","sha1":"5787a76963c2e40e2432627a317ea01a2df6fe28","sha256":"c6b16ea79104b0698369975d98fc3e9f68ffe2aec65f3993cdaa8fa1093a4e68","sha512":"f24d9c83cc5173eaf7f2d5c952e3766454f62b1b4366a70f30a0fdd30a7eeff7e0387b38a2c24e528e859de9640c954bf22d6aeabba1a00ab1e3069c09d6ccde","ssdeep":"6144:8i4OjKpCp4MRBZtfJJPj8B3U90yIjwcHepLPgWPud1X:8Re4MPfJJL8C5kx","tlshash":"6f9419cdb3c6706653a3b478903f018ba17a79a2f44cc899f186d8e42d7469a4277f7c","size":413971,"data":"","first_seen":"2026-04-18T12:44:30.340742Z","last_seen":"2026-04-18T12:44:30.340742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.52c47d98.c41d6f4c9bc622fa.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e965f79a831aee7fb73fdf375773c2f4","sha1":"71b6d66cb55fe8e3c808eeb73116919f215d70b0","sha256":"639f9a376010b994e25975edf93a3cf88c5d077300f269d7bf9d957eb94fefb9","sha512":"524ce5a1b0719a12e0e26d34fd268a0441269d4b12fa3d0c2de58c46cc311bc79f15939cde59f81d5dc955317d825e132e5d70f7be93b3fd88c6dae54a72b904","ssdeep":"","tlshash":"5231b9183554f4ee276a98840a3f9086f6116432617ef4f1f322cdf56469bd541b3f72","size":1868,"data":"","first_seen":"2026-03-06T12:09:10.053788Z","last_seen":"2026-04-18T12:44:30.320636Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0f6e7550689c58ea16934f9b2ed71bcd","sha1":"acdc74e4fde0b6ddebfd3f4b7da7170619c44248","sha256":"d8e8cbeba4c88eab7fd6a4d48971d75371681075421e04c1608e53298fc0be96","sha512":"acaa3c028188f387b7ed1004eafaefdc61b11d33507290896312e5de7015b78cb5f3e466fc6456ffc85d43d2c8073fad7bed4ca225332b98a623b5fccbe42e15","ssdeep":"","tlshash":"bfd0b70bf78d107b858fb4135b1972284d0317c70a847108a7314fd558ab653107eaf8","size":232,"data":"","first_seen":"2026-03-06T12:09:10.099436Z","last_seen":"2026-04-18T12:44:30.362374Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8289224fd3301815ee40e201e1ff9c9","sha1":"842ab733f7b52fe083a56d64bd50b29e570342ec","sha256":"d0960cfc128abe62b3ba796403ee6f7cd13ed8906fe8e1842b2dee0a15a825ab","sha512":"b4ef0caf580710841dd45b552ef6517486c679925af4e916f1cd1cbe3d3845906c439afcb587bc526f24c90b0e8b4e78e582f683065bd52282130a9278223b1d","ssdeep":"","tlshash":"6a110e1c72f689b316b33069a7bfb24c313411037189c9843cdfdad00f509baa291ace","size":1104,"data":"","first_seen":"2026-03-06T12:09:10.115797Z","last_seen":"2026-04-18T12:44:30.3633Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.121b0d7ff03e0f4a.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29de64bfd04484baec532c808f4506fb","sha1":"f65e53630936f2f1e07d65ca37c1c29d4ea6e8c0","sha256":"53fd172162279e64b54acefc8ddb9a5a871b20403aba15e10f9c85973068fce1","sha512":"7b318f475e090f0143e9b330455386dd5f03caaac0be86f95c40a4e376faf8bf2ef6998e564f388834ac3e193b27f19b54367fd31a02c6dac8f59fbfb42be7f1","ssdeep":"","tlshash":"4c61e83d3ea036f3649f3cd0a9af790857251da6b50a8da4b817f885a434f077917f09","size":3247,"data":"","first_seen":"2025-05-14T12:59:50.739937Z","last_seen":"2026-08-04T16:27:56.762941Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.36b8fb49256177c8.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","size":41429,"data":"","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-08-04T14:58:58.931165Z","times_seen":16237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee56e005ac606a4fc296f8f5f38bceb","sha1":"57ec69133cebd83400eb595e5055108564d826b7","sha256":"9eee6d3804df709de68a287c4b00a7ebdc69e1d8bf25d6bf0f417d8fb04e5f40","sha512":"9dfacd9a3b16a5041a20ac57c1b4ef25323167144d43d44c4fb61c6a2e0adc2423ff082f34aa51ef96f1c97966be0a714da36ecaadd42b73e99610c12cb52514","ssdeep":"","tlshash":"a1e07d762d0c5ca79aa01a7c42b7930a39d3158134e90f61c6ca99c13932ccf401be48","size":323,"data":"","first_seen":"2026-03-06T12:09:10.114747Z","last_seen":"2026-04-18T12:44:30.36389Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"eadcf72382eab7a0d9c7956486b47523","sha1":"9c1528fc8e4a95c0d172d3ae30e28d3cc88c3e1d","sha256":"4f0960d3dfedb874cc29d51ede0b87f424891da97b45dd3160839df759427580","sha512":"b1e04617cf8b9b8adb911949f2652a494717074ab1a368b5d036385e67f0be8ffde0cf532269293451e6f362d1cf5c84f4f53e34fe836119a8f3596d52ecf605","ssdeep":"1536:UgSjagj8d84PeHyLvyy13dfz02vYS8qtTjhFeYSNPq0jB2oM5/GpOt:UgSjnj8d8DHyjx13pvYS8qdjLeYGq0Er","tlshash":"f934b694eb87819ccea8414fc4a2b148c9848e07ce1cb563df5fddc1aa56b6590c72bf","size":247654,"data":"","first_seen":"2026-04-18T12:44:30.364886Z","last_seen":"2026-04-18T12:44:30.364886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"log.intellimize.co/logger","fqdn":"log.intellimize.co","domain":"intellimize.co","tld":"co"},"ip":{"addr":"34.209.246.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"log.intellimize.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:99:E9:35:29:4F:F3:7A:34:06:91:5D:1B:E2:A7:06:BC:2E:9B:4F","sha256":"EA:A0:1B:3F:BA:CB:67:D7:49:CC:17:23:E7:C4:A5:A4:3A:A8:59:D4:33:B6:A3:25:60:D3:E5:ED:FA:49:A2:26"}}},"request":{"raw":"POST /logger HTTP/1.1\r\nHost: log.intellimize.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 886\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":886,"data":"{\"eventType\":\"pv\",\"userId\":\"0816fb372e.1776516233\",\"isFirstTimeUser\":true,\"userVisitStatus\":\"N\",\"userBucket\":47,\"intellimizeClientIp\":\"0.0.0.0\",\"customerId\":\"117668587\",\"visibilityState\":\"visible\",\"clientVersion\":\"v5.135b8e5c\",\"requestId\":\"00000000-0000-1000-a000-000000000000\",\"hostingPageUrl\":\"https://zerionswallet.web.app/\",\"hostingPageUrlEnc\":\"https://zerionswallet.web.app/\",\"intellimizeUserAgentDigest\":\"00000000000000000000000000000000\",\"time\":1776516233760,\"timeZone\":\"UTC\",\"windowWidth\":1280,\"windowHeight\":1024,\"screenOrientation\":\"landscape\",\"internalAttributes\":{\"ts\":\"DN\"},\"webflowDomain\":\"webflow.zerion.io\",\"webflowSiteId\":\"625440d0613eaa2ace513f45\",\"webflowPageId\":\"6752d30686a183f92ddc5556\",\"pageviewId\":\"49358ae7-6563-4e23-90dc-53b10998a865\",\"sessionId\":\"1776516233-92c7-9565-b0d73ac861fb\",\"policyId\":\"missing-policy\",\"policyTimestamp\":1776516234,\"controlStatus\":\"i\"}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 18 Apr 2026 12:43:54 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncache-control: private, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://zerionswallet.web.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T16:58:13.439183Z","times_seen":17710995,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":406,"dns":28,"connect":173,"send":0,"wait":177,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.52c47d98.c41d6f4c9bc622fa.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/zerion-inc.52c47d98.c41d6f4c9bc622fa.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 926\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f29e5407000ce3c59695bb82540b28b5a971a6269c11d921fb262a738989702d-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.020732,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1868), with no line terminators","md5":"e965f79a831aee7fb73fdf375773c2f4","sha1":"71b6d66cb55fe8e3c808eeb73116919f215d70b0","sha256":"639f9a376010b994e25975edf93a3cf88c5d077300f269d7bf9d957eb94fefb9","sha512":"524ce5a1b0719a12e0e26d34fd268a0441269d4b12fa3d0c2de58c46cc311bc79f15939cde59f81d5dc955317d825e132e5d70f7be93b3fd88c6dae54a72b904","ssdeep":"","tlshash":"5231b9183554f4ee276a98840a3f9086f6116432617ef4f1f322cdf56469bd541b3f72","first_seen":"2026-03-06T12:09:10.053788Z","last_seen":"2026-04-18T12:44:30.320636Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561aec5c44b415eac7cf3e4_bg-bubble-min.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561aec5c44b415eac7cf3e4_bg-bubble-min.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 342708\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"dfb0547add1fd17d7ce794b5110c511c18990185c02065eda6b93f74cb6e7eeb-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.947040,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":352869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2732 x 1588, 8-bit colormap, non-interlaced","md5":"959994dc6a4d441935af22f815da91ff","sha1":"cbc32ed5c75106c41fa1a7e1b765a7863df424c1","sha256":"fe215481ade1eda31447966cdd0b506e8672b4971f3b3e1d1dd6c98f65a8fa1f","sha512":"b262b8e3c1be45d04e4a20de68cafacc274126bdbfd089874c25bf0218fd8bad9c9847604b1cc153c9295e97704c7e055419028010d1e1790ced95c2d944ac2f","ssdeep":"6144:aGCoNds58tYeTdpAtlPdchOqVrIDxrIwI/UdibSpKYSTOpNwsG:v1Weh+ahVVcDxrIwoURG","tlshash":"7474231fe00a448e1b0ba97b7715087f9b5ac5cca3ce7b5dc30770f152d52269e6a2b8","first_seen":"2025-10-29T16:12:26.994903Z","last_seen":"2026-04-18T12:44:30.321364Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6560bf6c1c95b74ecea7bb24_zerion-lockup.svg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6560bf6c1c95b74ecea7bb24_zerion-lockup.svg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1681\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"cd3fb581f07e5865f2c438c0a3cd4b081d0111a330bd6c0751ccab35a5a81eb4-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.228442,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5b2dbbf737c66344218684a03cb9140","sha1":"1e8f4472304a1ce12026b39f6288b774c45d7b77","sha256":"e3575bef0a2f439235a8dd5e6552a16e4c3120a42112d2854771ddc438f1942d","sha512":"911c8254332c9c39f0aa3fccd090d87deb860c9fbe8897edc3a6d870e0c712f03d350f219b27cd77d24a1c3cf4a09060d39ebaa4b388acad25beef636bb0def9","ssdeep":"96:W3YNsjVNg7D/IlMsS3eXyB5XkA/roOaM/zhtP37padkt9jfl2WLE:xdDKMv3eXM5UA/rjaMbPkkd2Wg","tlshash":"649166ef73e8d2d0b14be7f8ca385899379b18ae3f06d29983760d49f45147e8c44951","first_seen":"2026-03-06T12:09:10.045692Z","last_seen":"2026-05-05T01:37:09.694795Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /css/zerion-inc.shared.9bfb11c80.css HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 49290\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"a752637f0edae3b2522732fc9e419bf6026767b2353945d182537d896052de59-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.008194,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":404724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"066daf8305ea647a3ca07809fab63d52","sha1":"233ffc6e2e1fffff07f82b07ace903236b864b01","sha256":"aed7e99f73a98491babb6d489b634eb5b5e80fddff7969b26a54d9b13a47c937","sha512":"bac2b48d4c1b1d1ba5f05a26218774edcbeb951ceb2921b93d777348c3f0a8fc107a5e68738cb3288d760d5012003c3ec239f6d65aef1799d9dbccd4a14ce322","ssdeep":"1536:Aye1REzP0XcPyjowKjxBizqPK8Wxz+uAiIeOFSbEQBKZVQXZJ2lJbU/FltPG7QcB:OyP0XcPySAmd8ZIOPrNvFEIsaTMNhFPH","tlshash":"ba8466492bb52518785b90b89da667c4a3398043de4fcdadbae1705cdf8c2c43973b9c","first_seen":"2026-03-06T12:09:10.068702Z","last_seen":"2026-04-18T12:44:30.322487Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561d013ded4edd8d04dadc4_bg-bubble-footer-2-min.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561d013ded4edd8d04dadc4_bg-bubble-footer-2-min.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 184118\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"5ceccad4ef608246dabce543783516de315277d9022d6c3e4feacf019d4076bd\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.954795,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184130,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 411, 8-bit colormap, non-interlaced","md5":"6049723e159a2ae1432ee84a1f98f625","sha1":"0c150080dc470f10f018e8f1e1b2ebb32a99c7ab","sha256":"22abf8a77859533d851747e1af91a4736c820cfcdbeb4dbce4ba10db4f904d4b","sha512":"66ca28257a280d83fe28b036b06f9ba5aa5cccc8e055a3616bd1afc82dfb21475b0e87e8933e780b069e7e0a565f3a4c6a1c6cbd3f4b837ec99d254b04b6122b","ssdeep":"3072:kh7vUmmn+8CzdyiLCVkmkSkGhTfFpkNgl/f1DBFJx+VoDN43zC3M5bVGPpbH:kh7vUWb7uV5kZGhjzKslDBrx++543zCb","tlshash":"280423c37be8d33b6fa880214da4f82170e36f1977bd15266e1c90da0c66b9a5e1c45f","first_seen":"2025-10-29T16:12:26.978996Z","last_seen":"2026-04-18T12:44:30.3231Z","times_seen":6,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/fonts/65250ecd95fb1f82cf266e05_AeonikPro-Regular.otf","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /fonts/65250ecd95fb1f82cf266e05_AeonikPro-Regular.otf HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 53571\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\netag: \"1102e126c80f2343159593207d155de39f50fc8d917b4488d464600f18a54e29-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.964645,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":134268,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"e77483748f538b4be472ee8a98d5cec3","sha1":"785b8284858f327e31d7bf3bf54fb1024f333c64","sha256":"d7b8d8a4b92131124dbf0be970a8bc4ac2b7280048535cd34809930a2804e712","sha512":"b5bd438d2e70b077595bb981534e2dc9d9f971626a15632e1aa3237b5ba51f7b9c2b2e3e88a82e3366637901b0fc8b5c55b9cacd1e789a267d692cc3102bdb5b","ssdeep":"3072:E+35xzZ5aT9jrq+Y4+OmsqnsFVOjPHg1QFpy:NHZ0m+YLsqnsbXepy","tlshash":"06d39e6277076305f4969e328ef3d330b7317a28ae3ad70ff5858120ae861950e25bdd","first_seen":"2025-08-12T07:31:52.002355Z","last_seen":"2026-07-19T03:52:54.803307Z","times_seen":14,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/api/event","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zerionswallet.web.app/\r\nContent-Type: text/plain\r\nContent-Length: 85\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://zerionswallet.web.app/\",\"d\":\"zerion.io\",\"r\":null}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\netag: \"b7bab6b83fa074653ff28c8d2a64135d3434575f70a12ab3d3ba8080461b9537\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776516233.168873,VS0,VE60\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-04T01:44:50.169048Z","times_seen":4791,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561d5cf52eabc3d82e2f7e3_illu-coin-blur-min.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561d5cf52eabc3d82e2f7e3_illu-coin-blur-min.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5129\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"25d1cf184cfd761fd0c6b3fb527d4ac0116c3398b3b0792f4b000aebee580fe4\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.228256,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 117, 8-bit colormap, non-interlaced","md5":"3a8eeb1a30eb838143105c1faa6ee76a","sha1":"2595bef89fc39281a488246d23a2ccb1e10316d6","sha256":"d7644503bb14bd117a4251e8505659c9fbdca01ee94eb30470e269872e58ada2","sha512":"dc1044f915cd9f0b796ed6185d67a93b8da261ce7475d820d4d19cbf54cf267dc0fa89960d2f4fbdea0995b21c31ac942f59c461d559ad98e9e7a0140ee2b103","ssdeep":"96:oSn2QVHHwi5/40KqmflHlqTUofNDqYOytrZEizTtMlFlqFjgGeX:oSn2QVbA0lyFlqQ89hOYdD/mlujgGeX","tlshash":"d4b18c41a3a016d76255e2a1ef4ef4e0f4cf313308cac84ac99df4515b66892c8cef9a","first_seen":"2026-03-06T12:09:10.064738Z","last_seen":"2026-04-18T12:44:30.324649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 00:01:50 GMT","end":"Wed, 08 Jul 2026 00:01:49 GMT"},"fingerprint":{"sha1":"3C:FD:B2:2D:F1:AA:C2:3C:B7:C9:7E:35:CA:DE:08:DD:82:76:F7:1C","sha256":"63:5B:85:93:21:76:43:35:07:9E:64:87:C1:FE:5C:99:39:EB:FF:C1:D9:17:BF:0C:D3:41:24:A8:B0:09:B9:26"}}},"request":{"raw":"OPTIONS /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://zerionswallet.web.app/\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since,X-CSRF-Token\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=0, private, must-revalidate\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-request-id: GKd0Gf1lO2JuvKWh4UwG\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 04/18/2026 12:43:53\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: b9221fc46ca0f6af9e6208b0f4009c72\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T16:58:13.439183Z","times_seen":17710995,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":60,"dns":17,"connect":17,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6566e84d9db87cbe6e6ce35f_mockup-tab3-min.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6566e84d9db87cbe6e6ce35f_mockup-tab3-min.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 127083\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"00903cef9f27997c25e8de63b14aa4e59933232986d4b6e7caf48c8ddb995ac7-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.231942,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1065 x 1458, 8-bit colormap, non-interlaced","md5":"120f54b58a8d292e0fa6e2dc441dfb1c","sha1":"fcf8bfeeed45bb2247df182695b9658b92cba5ff","sha256":"9ae772bfadd5baa5c70da95b42f66bcfd60914e923a9c18240c41393d8494a9c","sha512":"4c55829f5d9506dadb502f5e6bb8a486b5f8333aa558a1f9ed30b9c1bb62567e66b0b0c486728b22744c62a8c41185b7e74ddc649a37df34b4a12a3b8db956bc","ssdeep":"3072:rfF35qIO0Te9V2uTKkBpdsPGIhXouoXKic+Wr+:2IO33FTKkBpG+Ih4uoX7c+","tlshash":"9fc312b7615a621387f01011e912ccef7fb50d7811abd4c16928349ef6f08ae63d66eb","first_seen":"2026-03-06T12:09:10.07989Z","last_seen":"2026-04-18T12:44:30.325223Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/656db66be090a122a4a5c04b_Zerion_favicon_large.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/656db66be090a122a4a5c04b_Zerion_favicon_large.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5659\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"94b853456483e2c3788a9094a5a03caeff824cb0344caf0f06897d8311b926cf-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776516233.366034,VS0,VE118\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"0adaa32149651c89c9ec7d6e9001ab30","sha1":"e8d6acdf39efebfa2847e9ef339b48994d71b5ad","sha256":"d6b93746aa9b2a7d2a090a7f44a1a61618e8ea784546c4cd41f6f53c3c1091e2","sha512":"a7252f90166bca19428eddf87bf81b0c754b67caa0aef8b1ace93b128b770afbc64674a5804feecc27285a1899e9c0e27b375cbf71e5f3882e8f03ba3bd18a2c","ssdeep":"96:1Sh+U3YufmPU89cyBEkDjYze40icrJYMTDDNK0rn3alQLpWBlLjxaPljphLNWJOY:1SvIJPU891hjl4Elc0MHlvQVvY","tlshash":"6fc18de3c551af6bbc1c9acd748e7f4d096f10c7478e0cd92bb1b004819e9a6807976c","first_seen":"2026-03-06T12:09:10.073513Z","last_seen":"2026-04-18T12:44:30.325801Z","times_seen":5,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"still-king-02d0.lostapeclub.workers.dev/","fqdn":"still-king-02d0.lostapeclub.workers.dev","domain":"lostapeclub.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.176.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lostapeclub.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 06:10:14 GMT","end":"Thu, 25 Jun 2026 07:08:44 GMT"},"fingerprint":{"sha1":"63:D3:AA:43:70:6D:95:2C:78:CC:9F:61:49:C7:07:89:AA:9A:6D:4C","sha256":"F1:9D:E1:2D:54:F1:8A:FA:4C:BF:3C:1A:19:EC:EE:51:68:AB:DA:B6:BB:D1:10:02:58:01:48:01:39:26:77:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: still-king-02d0.lostapeclub.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5QdUVwCVl%2FQIZWorIWTJ4N8WE1kMkFDB9DSBwz4u6Dp%2F3Htyy%2FpB1OFJIpuqpZg0e4I88YY7C%2FdGqX9v4zDCgZ2vo2h7IdoHo06utJEza34yTn7AiEetpJThGBPs%2BpxQSzV1B3yvHvInoh1lIucNe8ji18c7YSzZVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee3c1f27eeb5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15abed6f089821ba0a123a99ecba68ca","sha1":"1ca20cc20a5d51a0a05cd0bb3247a52fb48d808e","sha256":"5b6a8366f81ae6e10cfc09c80914c2d75c8b689cd1280151bd232028e0374a65","sha512":"5565c8d057e9df90a0cddc7535fbd644b782afc1b4a3c81adc7d5b8b17e2c7169df8fe4e4d7de4eb3f58d336026c6ccc36bc101bbff6c9784bd619e85cb5691c","ssdeep":"1536:/MFgUNF9RYq3rM5rZUZKX+/SryC1P1fLkAP3gyEZIav0GQrDZNuHycBOfaxiO0AC:0FpJlbqrWn/SrB1Pp3gyEQDjmqeqAkS+","tlshash":"2464b3c52ad2526cff4b424e8ce26d44d4548d03be5cf163aadefd8075a6e61c0873ab","first_seen":"2026-04-18T12:44:30.326356Z","last_seen":"2026-04-18T12:44:30.326356Z","times_seen":1,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":60,"dns":48,"connect":1,"send":0,"wait":585,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/fs-cc.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/fs-cc.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9266\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4e468d82327d8681cdd6f1d110056dd1ec16e24058ca56eb8aa2de1be6d6a04c-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.009952,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":29614,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19250)","md5":"0aed0baa2f338ae8fe5a8813c164418d","sha1":"9f014f0b077751789367b62e0178db08d183a4ec","sha256":"bdeed7650697bd478a6b0591a9ea29664b04a6681a4f9f7c4c2d3d10cdae42a7","sha512":"b7f1647f854f55af0f83ce54dd5dfd0330fcefc5db401506fb0d77b7caba4aac4a2e57b8f2be25b9e3e0ad68d9e19c99c10bdb5878dde305958a036fb7654cb0","ssdeep":"768:WeNqfXcWe3r4AvlIk54bWrTlzqo3QJ/va6wtbBOc79:ReXcvlH54bWrxOo3QJ/XwtbBph","tlshash":"6ed20aa1339a753117ee82fb602b1703b220b4a45457886cb97ccced156de4a12f7fb9","first_seen":"2024-04-26T20:46:46Z","last_seen":"2026-08-03T07:33:20.156055Z","times_seen":2366,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/65fb3b7098c8556a680cf591_image%2017%20%281%29.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/65fb3b7098c8556a680cf591_image%2017%20%281%29.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 186604\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"d08d31edcd0b799a304e72e8767af9116ba82bd26aeb62ed437466018996fbeb-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.015629,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":189037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 710 x 972, 8-bit/color RGBA, non-interlaced","md5":"85c00e667f1a2d7cc1cbc500d6c2e421","sha1":"a3edf35fc29554a6fb22c4c3e7dbab81e9e9ac15","sha256":"7f19da8cc31a6a124ec34e54d0f12cb781e400a14be567788062a136851e81a1","sha512":"c321df38415d50ada8881da0c4fa52a7ae9dbb07a898c1d7590c4b2d833efb5328eb3b4818692e9016e13f90d9afbb9644e9f65576fb699af44ffecfb6ac7415","ssdeep":"3072:VfZ/fMI5iM7o8WC5Ud5wSyrG3vRm8MSIfxGgwBXXlrySJVOTEaEeNnW7zKkoWaaN:NpfM+f7hMdiSyyfRPM8FFBcNkl","tlshash":"c404121da9b148c8df8d46a9a9c10c8d8ff860b9dd2d91395379b7ee4e84f3d051260f","first_seen":"2026-03-06T12:09:10.052858Z","last_seen":"2026-04-18T12:44:30.328104Z","times_seen":5,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28008\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1636e15b320d5032702d99b0ed52abafba808e92e08ecdb139e9099099e41029-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.016181,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-04T16:43:07.145958Z","times_seen":265147,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561d8cfe79197d7d7eb6424_bg-extension-min.jpeg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561d8cfe79197d7d7eb6424_bg-extension-min.jpeg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 33102\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"434cd1680b05b44a28b01cf614b8f7a2fe58443c38da891f9705c0269d77190d-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.939061,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"6190d862754b8078c19490596a87fc9b","sha1":"0979934a4b81c0ce2b68894b1e48982cc883b4c9","sha256":"b3710f284e036cf8e49fb577d08f1a5b237206272bc11efb787781e6e06af023","sha512":"ee8427e2ac34394111f6666401eb0bb124289a5cf55ca1b61b93947caa651d751f156046a36034763cd88b83d28a81d9aa15d340bbdf06a71f9a6d091817cf5b","ssdeep":"768:E7+BhAY4TieYTZ9m1+SHyUlMZ+pRU3E2fYrk5XwyCVApQF/lX:cE34T7YN81+SHn+hGApQf","tlshash":"63f2f12cf2135677fff07b1ab93582432a9ab1518ff426ee39ae121646701431c9f21b","first_seen":"2026-03-06T12:09:10.050201Z","last_seen":"2026-04-18T12:44:30.329193Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561d8ce252b118a9dead48a_bg-web3-min.jpeg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561d8ce252b118a9dead48a_bg-web3-min.jpeg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14458\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"f8d0000412231f6fe5f68bf9998a6123c5a2f8345d518f302636a3ba7c072b40-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.947058,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"18c00f557a338c69bf7d57fa32620b5e","sha1":"512230b5439ec562783489c067095911cec976e5","sha256":"5d708ca7ad4043890717c248c46b2f0d40206867502fa8f47ff881de6fc3b931","sha512":"a8a6404887960e7e928a555f89a2fd849a0195e8a002b1a1e81d0468ef3a0fe342f01743df96948f5ade0f74dbfe39910aaf64685efc21c6f617e496b5bbe95e","ssdeep":"384:BaD9uEVTHTPf2BRGjxuBjyI5DPwXWhWG5b:BOTHTPfMk0ckuW8q","tlshash":"a562c1de2d57d0c6d9c414371a92e574eb7222cd1a3591cabcbbc50210aedf0feca152","first_seen":"2026-03-06T12:09:10.080994Z","last_seen":"2026-04-18T12:44:30.329722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/fonts/62581b6dc3438b271cbdb9c0_Poppins-Regular.woff2","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /fonts/62581b6dc3438b271cbdb9c0_Poppins-Regular.woff2 HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8344\r\ncache-control: max-age=3600\r\ncontent-type: font/woff2\r\netag: \"74cc4da0e5a79e56bb9878f4d31d5d6e4beac3ea275af2aab202125a5cbeeb23\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776516233.990614,VS0,VE117\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":8344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8344, version 1.0","md5":"ace8536ccb19f81f61a69a97c44aea1c","sha1":"43ce8282b656e03b894c0a86922a1fe508a8079a","sha256":"16d9554896f7914ea80877cfbce216aae8988e836a9a9ce1cdd76154ebdd9d7f","sha512":"9b1015875e8a4559f0ae05e2361964ab81f5b6009b463795eede298d01670a2f512c1477a084629856460ef5b6cfc83129cc3cdd4b8a0394688f30716382afd3","ssdeep":"192:brOMLXRf2zLTDQ7FMgmE+0Q4vAcSIiMPBAUWC7jsKp2BId/X6jf:POMz4XFZIAcX5AG74Q2BI9wf","tlshash":"5802a09616c05ec0e21dae67053f03101add288ec5e7e78d65944c50a3bd3ebec04d66","first_seen":"2026-03-06T12:09:10.043296Z","last_seen":"2026-04-18T12:44:30.33024Z","times_seen":5,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 00:01:50 GMT","end":"Wed, 08 Jul 2026 00:01:49 GMT"},"fingerprint":{"sha1":"3C:FD:B2:2D:F1:AA:C2:3C:B7:C9:7E:35:CA:DE:08:DD:82:76:F7:1C","sha256":"63:5B:85:93:21:76:43:35:07:9E:64:87:C1:FE:5C:99:39:EB:FF:C1:D9:17:BF:0C:D3:41:24:A8:B0:09:B9:26"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zerionswallet.web.app/\r\nContent-Type: application/json\r\nContent-Length: 100\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":100,"data":"{\"name\":\"page_view_user_without_wallet\",\"url\":\"https://zerionswallet.web.app/\",\"domain\":\"zerion.io\"}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, private, must-revalidate\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GKd0GgDs5xiIZsXngNmG\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 04/18/2026 12:43:53\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 9b8918b16e64ef0b59c5be0b26cd5bf5\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-04T16:55:41.273003Z","times_seen":445162,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/65ba5951611d186c2393b23c_img-bg.jpeg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/65ba5951611d186c2393b23c_img-bg.jpeg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6959\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"959aa46a1929a68072f028316b12c392fc5d1d94acc64ce1cd1d2002b0f68452-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.937763,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7432,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 762x608, components 3","md5":"4e955ae2baf07f158dee37efa00343e2","sha1":"62b06558b0e992920c4a2f4694b4d407a678e8f8","sha256":"667bc9c24391499502cdca0b6d79b276edc74a4eee3fbc9f505b63b128d01697","sha512":"ed1029d50deb9a59739ea17af17e0a1cf8e552af0d1895f622ebbd366e15e2d9cb7f7c75649a9730c4418facdc66190791b45f9a78aedcc5cbf2ddfd4afb25f1","ssdeep":"192:ZTYVaio6kTQ44S61vS2OrPVKOmh3IxUt53L33GGS+WC7TrB8hKjX:RB68Q4jrPVKOmSxUP3LtS+W8TdTjX","tlshash":"b3e1bfee2fff6223c7a850f0f5b62288976494dd21bdf397394f09d87a208e34045066","first_seen":"2026-03-06T12:09:10.059682Z","last_seen":"2026-04-18T12:44:30.331244Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6561c9521f695122e03db3e3_zerion-lockup.svg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6561c9521f695122e03db3e3_zerion-lockup.svg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1667\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"1d360cc6279fc51299840cc0a030f7c2ccde18417e55e0fa331d362353e1fa9c-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.228534,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4564,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f96c291e9091acc75e32291a6e4a4a9","sha1":"f32350252cc9b81bcb4682df1cb3847ef87c0579","sha256":"ebaaa109ae7e131f87bfedd71375f9a48e927177209a4a39c1db1c4ed241b957","sha512":"3c8a17b16f38f050e62da208b97457151dd3abc021151334642e34411a527e7267f3e981de27cb74c218b1f71227e3a533f3bdaa3ebaccfc2fce9cacb0867c4c","ssdeep":"96:g73YNsjVNg7D/IWPsS3ekyB5XkA/roOaMmRzhtP37padkt9jfh2WL2:g0dDpPv3ekM5UA/rjaMGPkkZ2WK","tlshash":"d69166ef73e8d2d0b14be7fc8a38689d379b14ae6f06e29983760d49f44147e8c44951","first_seen":"2025-09-26T11:40:39.567338Z","last_seen":"2026-04-18T12:44:30.332464Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intellimize.co/context-v2/117668587","fqdn":"api.intellimize.co","domain":"intellimize.co","tld":"co"},"ip":{"addr":"34.247.230.149","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.intellimize.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1E:A7:0E:07:0D:77:00:AD:FF:31:0C:E8:E0:73:12:08:7B:18:B0:81","sha256":"68:77:F5:E8:21:AF:4A:7A:1B:D6:2E:53:BF:B5:27:9B:29:5C:CC:F0:47:D5:EA:BF:55:A2:F5:B3:BC:04:B6:55"}}},"request":{"raw":"POST /context-v2/117668587 HTTP/1.1\r\nHost: api.intellimize.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zerionswallet.web.app/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 64\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"clientVersion\":\"v5.135b8e5c\",\"userId\":\"0816fb372e.1776516233\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncache-control: private, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://zerionswallet.web.app\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d8716924fc58d99834f453f005d2ec2","sha1":"8fa97923439bf4aee1ed7b3a921419f5b1778118","sha256":"f4c36915c5162cd13f25da3f37d6fd10f4ccdb932bf122fc23217683399b562f","sha512":"c2b6a98a62b77e66cb410b4d0c1ac0c3a9e8f53e243a46c898ff873de6fb07308b5df4ba5202f206b94d6e5cbbd1f31b193560d7d60f3af1538f83f587696d3d","ssdeep":"","tlshash":"2a8004174140000345d101cc1545540370d0414004154cd44150044c11d57754c01014","first_seen":"2025-04-20T00:18:05.020079Z","last_seen":"2026-07-31T07:23:34.044572Z","times_seen":71,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":126,"dns":32,"connect":35,"send":0,"wait":35,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/td?id=G-X6X9DHZZBR\u0026v=3\u0026t=t\u0026pid=2102914419\u0026gtm=45je64f1h1v887476857za20gzb9206894838zd9206894838\u0026seq=1\u0026exp=0~115938465~115938469~117266400\u0026dl=zerionswallet.web.app%2F\u0026tdp=G-X6X9DHZZBR;87476857;1;6;0\u0026frm=0\u0026rtg=206894838\u0026slo=9\u0026hlo=10\u0026lst=1\u0026pcid=206894838\u0026bt=0\u0026ct=3\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /td?id=G-X6X9DHZZBR\u0026v=3\u0026t=t\u0026pid=2102914419\u0026gtm=45je64f1h1v887476857za20gzb9206894838zd9206894838\u0026seq=1\u0026exp=0~115938465~115938469~117266400\u0026dl=zerionswallet.web.app%2F\u0026tdp=G-X6X9DHZZBR;87476857;1;6;0\u0026frm=0\u0026rtg=206894838\u0026slo=9\u0026hlo=10\u0026lst=1\u0026pcid=206894838\u0026bt=0\u0026ct=3\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:46:0\r\nreport-to: {\"group\":\"ascnsrsgtc:46:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:46:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T16:58:13.439183Z","times_seen":17710995,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.36b8fb49256177c8.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/zerion-inc.schunk.36b8fb49256177c8.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11612\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0857f3502b6323883ec0ad6359a6dc7df4908c00097ea4b00204f994d20f30f8-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.016665,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41429,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41429), with no line terminators","md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-08-04T14:58:58.931165Z","times_seen":16237,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.66b05907aa9aec79.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/zerion-inc.schunk.66b05907aa9aec79.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 61872\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f5db67fa2c776d7de8b8c474f50c7fadbe51254fab2f217b1c52c9bb3d85828a-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.017821,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758943,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e76d783ba78ad007f4bd8a35357d446f","sha1":"cdfd6fbaa81788b2bb6c280a000b36269808764c","sha256":"6f7f9b7881c666da1f09ac0f813193dc8520b1a0cc02312f01700e89e97dcce7","sha512":"d8517adb1d4495880d4b18bea8994e4729351a24466b24f90a46798a0743fc15f717705440747dad422630a4d50845e54b232e295c9c916c3c7dd076d06805dc","ssdeep":"3072:asfeznfyrOnkRsL/bWDQu9CzQY6t0k1XxCZuAvTd7z7iVrP4lUgrZ:zsuuMP1q7z7zlUgt","tlshash":"d3f4b58372e6b57b015f021ea8971005a6f856cbc5d7c6a4c864dece1c3d9ecdb8732a","first_seen":"2026-03-06T12:09:10.072397Z","last_seen":"2026-04-18T12:44:30.334438Z","times_seen":5,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.intellimize.co/snippet/117668587.js","fqdn":"cdn.intellimize.co","domain":"intellimize.co","tld":"co"},"ip":{"addr":"151.101.130.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.intellimize.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 03:42:50 GMT","end":"Wed, 03 Jun 2026 03:42:49 GMT"},"fingerprint":{"sha1":"91:AD:EE:15:64:0F:F8:0C:3B:59:53:F2:DC:20:B0:F8:00:D5:05:13","sha256":"8F:F4:88:FA:F0:80:7F:D8:FB:07:CA:4F:BD:8E:E3:E0:75:9C:39:97:27:8B:6E:83:2D:FB:B4:17:B4:5D:51:DE"}}},"request":{"raw":"GET /snippet/117668587.js HTTP/1.1\r\nHost: cdn.intellimize.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncache-control: max-age=0, must-revalidate\r\netag: \"05e9b53b33318d20ad091968ee5494cb6--gzip\"\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776516232.111323,VS0,VE252\r\nvary: Intellimize-Namespace, Intellimize-StatusModule\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 87064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":369511,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64635), with escape sequences","md5":"5e9b53b33318d20ad091968ee5494cb6","sha1":"a09c36a0f71b48e1543d3c53b6e7905f74e6ed0f","sha256":"8957ce08fe6579e728a577012d15dd706a980d4bf918bd216fe6f6ddc395c902","sha512":"47d50db02295093e283dfc729f1ba78c092dc88a35a326b1022bc64ec2e7daa50d1ad8e76f25827acfb68ab8863e0eb2607cc158b102d5be52567c07206a2f5d","ssdeep":"6144:Whe8DBAZJbs1yPLP0RO59yWGrOLQCPHpcBGmDt5vPSjFA33M6Z+7:3D5xLQCPJ7MC","tlshash":"0474e69072abb23146d9819990790202e336b9d6784d406cff3c6de77c4a9836376fb7","first_seen":"2026-04-08T12:35:19.974643Z","last_seen":"2026-04-18T12:44:30.335459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":89,"dns":61,"connect":13,"send":0,"wait":265,"receive":20,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/plausible.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/plausible.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1148\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"bf1ed92bf7ded4babba1440d9f6722db7a864f4c689b8b2bacb51cc076c2d603-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.011419,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3005), with no line terminators","md5":"25b5b48c4c1efed79da2c557576bff85","sha1":"f441809be456048d32225ae0d47efaf1006efbe5","sha256":"a34d5ce3e989b828c42fe4994c8c1e21693c311db3b076fcbf5202cdc505e5ac","sha512":"7e68bb787c024fb14042a4ab95b7ad5d81750b357404865fab281d16e925a0f5e5149fc46f32549f73d57fd17052ff10ce323b28eefe34cf231f29457b00aac2","ssdeep":"","tlshash":"80512db96a02757909b9d167b62fb3163a3366263116b401542cd9c13e28eefc323ecd","first_seen":"2025-10-28T15:34:03.371103Z","last_seen":"2026-08-04T10:27:29.006783Z","times_seen":6575,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/fonts/65250ecd562ec023bfa0d36c_AeonikPro-Bold.otf","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /fonts/65250ecd562ec023bfa0d36c_AeonikPro-Bold.otf HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 56465\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\netag: \"d39db5ef7fc2c47adcb5feecb2eb31401435f78de5f16be366951953492dd233-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.966546,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138828,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"d890a2a68da8e9a1508cf2498e2f97d0","sha1":"dc764afcb990df17482f95bd3ccd941b356948ea","sha256":"2091918d12d17380b472a63c0962d17502c8ab59a6f3f722509e160ca8a3e7cc","sha512":"736f8c24feedf8ba7720f0c9c79ae61f160209b47e37598c23e0601916f9d9b607002377d671aa6171dd013f65add77f2c6471df720fefdf9e507654cec4bcdd","ssdeep":"3072:635XOZ9xdvG0jW5T83AkRb0sRb4CpL+HQibD:08Z9xdvG0jG83AkRbhRb4Cp+zD","tlshash":"b6d39e55b3066705e1da8e354ef3d335a3317628af39cb5af24586206ec22f81d927ce","first_seen":"2025-09-12T10:34:39.40009Z","last_seen":"2026-07-19T03:52:54.849324Z","times_seen":11,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6835c42083ce59487637a3af_zerion_favicon_2.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6835c42083ce59487637a3af_zerion_favicon_2.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 724\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"1ea49e79b882c72708b3b645da129415fb978bbe712104f9b162bae9176428a0\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776516233.367369,VS0,VE93\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"74061cb5a0c85e8b6111c62808fdd9b8","sha1":"af987aef7a451713672d94de77698335785738f9","sha256":"e216064175ac30c61f5b398959863e014f56662d6995100d82eaa9d29156ac2c","sha512":"37ca4cab71a436284fd8c4acd3123b33207ad4acb964ad6121afa308bc222b3eb3124be4080522e490d81866267899e412e80b133c618e4ccb6b18ad88f67072","ssdeep":"","tlshash":"690165cf9e1428a4ed78c2e78dbe0a10771f5b1666351019994f3f4022009891667752","first_seen":"2025-06-29T22:42:47.750647Z","last_seen":"2026-04-18T12:44:30.337081Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16518077808\u0026cx=c\u0026gtm=4e64f1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=AW-16518077808\u0026cx=c\u0026gtm=4e64f1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nexpires: Sat, 18 Apr 2026 12:43:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146123\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434265,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"a0385420de7a580809cf1142000a3d63","sha1":"f6d999b95a500f2b92adc42e1176e719f0198b8a","sha256":"6ab84c6da100602be5339e3a521e9581d42915c68732bf8e20a07d988bc1eb0f","sha512":"f9723de974a2cd61ce8a04c0e91d6a381ef88c950b152d13a1233a0ea0800d052b440370a6b752c7fa001053cea495f2b4d2525803591d48962d7956eb51c3d3","ssdeep":"6144:o4OjKwCi4MRBZtfJJPj8B3U90yIjwcH6pL5gWhurM1XH:KT4MPfJJL8u5MO3","tlshash":"cd9419cdb3d674625393f478903f018ba57a29a2b44cc89af189cce42d7469a4277f7c","first_seen":"2026-04-18T12:44:30.337986Z","last_seen":"2026-04-18T12:44:30.337986Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T12:43:51.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"80495ef3244f62658b5a7003f75aa9ab6900bf5742bab22bd9424ff9ed41e2d0-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:51 GMT\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.798536,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110766,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2008)","md5":"f2feabe75f66a675d31c3957cf7cbeb8","sha1":"f4adfabe05c06201f2abb235ad5b6ef7c50f4b43","sha256":"83ab85e86f35e9e0d004de0e033177438929e4333a113f3be3ddb5917c6310ad","sha512":"9309d14747ad5878bf22d00b1b6722e4432363fcc4c7cd042c4eb3e6d6c8cb25e9a2faca2c50900a15cfd66365361558f614b84f086a1d4f0cd2c10bbd40c6ad","ssdeep":"1536:zLfZc66m+yVRsFEs3fec5MWsd2AwdkzLtD:em+yVRw3fec5MHzL1","tlshash":"e3b3861162b164e611df41c8e7b6fb1a66a4ee43dd4b9494b2fc43d40f83ca6fe9304a","first_seen":"2026-03-06T12:09:10.057631Z","last_seen":"2026-04-18T12:44:30.338793Z","times_seen":5,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":57,"dns":26,"connect":13,"send":0,"wait":15,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/index.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/index.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 316\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"722d66486b9a8335cc62089bdc488060d2663b80680e030f567753d3823aa753-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.010737,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":911,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (910)","md5":"dcb9d84f79e5af9511f6c532cf1d55d1","sha1":"53b4dc65f6e4a1b26919b4f4f2e2c026e7da82b0","sha256":"c7e5b3b3e14acb665169fb78e3fb5274ece9a3d5cffa3c11b36620769298d5d9","sha512":"bbf579be078333720accaa5c0926cc40064d5ec94623df3adb80822cb1d71b38fa3fde96730bc86370e3770a109e951ab18927f52237fd035bc542e18cc9763f","ssdeep":"","tlshash":"37117a44cb4194b81bb751fb33beba897c3221e49267404921a6055c15e479bc3a7ee8","first_seen":"2025-06-03T09:48:46.85271Z","last_seen":"2026-07-06T01:58:27.782254Z","times_seen":34,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/js/zerion-inc.schunk.121b0d7ff03e0f4a.js","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /js/zerion-inc.schunk.121b0d7ff03e0f4a.js HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1293\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"9e41d9f3ac35c4d42156a958de28db257e5762a1dde9f3875c918f34f8a3786c-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.017991,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3247,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3247), with no line terminators","md5":"29de64bfd04484baec532c808f4506fb","sha1":"f65e53630936f2f1e07d65ca37c1c29d4ea6e8c0","sha256":"53fd172162279e64b54acefc8ddb9a5a871b20403aba15e10f9c85973068fce1","sha512":"7b318f475e090f0143e9b330455386dd5f03caaac0be86f95c40a4e376faf8bf2ef6998e564f388834ac3e193b27f19b54367fd31a02c6dac8f59fbfb42be7f1","ssdeep":"","tlshash":"4c61e83d3ea036f3649f3cd0a9af790857251da6b50a8da4b817f885a434f077917f09","first_seen":"2025-05-14T12:59:50.739937Z","last_seen":"2026-08-04T16:27:56.762941Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TCHSGLG5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-TCHSGLG5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nexpires: Sat, 18 Apr 2026 12:43:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 18 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142807\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413971,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5461)","md5":"df88b1ecedb9c48884d04a4e24d98976","sha1":"5787a76963c2e40e2432627a317ea01a2df6fe28","sha256":"c6b16ea79104b0698369975d98fc3e9f68ffe2aec65f3993cdaa8fa1093a4e68","sha512":"f24d9c83cc5173eaf7f2d5c952e3766454f62b1b4366a70f30a0fdd30a7eeff7e0387b38a2c24e528e859de9640c954bf22d6aeabba1a00ab1e3069c09d6ccde","ssdeep":"6144:8i4OjKpCp4MRBZtfJJPj8B3U90yIjwcHepLPgWPud1X:8Re4MPfJJL8C5kx","tlshash":"6f9419cdb3c6706653a3b478903f018ba17a79a2f44cc899f186d8e42d7469a4277f7c","first_seen":"2026-04-18T12:44:30.340742Z","last_seen":"2026-04-18T12:44:30.340742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":153,"dns":3,"connect":20,"send":0,"wait":42,"receive":58,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/fonts/65250ecd543fdf4539522586_AeonikPro-Medium.otf","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /fonts/65250ecd543fdf4539522586_AeonikPro-Medium.otf HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 55977\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\netag: \"eae1aa825c26d6274250c852a683115ec0b32653d19e867c724a0f346b5a2a2e-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.971701,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":137080,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"ed513defc8b4033bde660b17e5fa8a77","sha1":"31ab0eed5e11f39cf0375d352f21bd9f1ca3f3b4","sha256":"3549aac99f542d3fc3f3dcd8aeb782807d6d35057fac7839b403b68ce464ca67","sha512":"0c7b9748f71c727c4ad28f57f6ee487187aac686bbe718d7b4125f297f1a1a8f3c37e27c26961e8aeb80155e390fe29f2847bcf5d316193435d65ddfe6cbd16e","ssdeep":"3072:F7Ri35y8ZDgQcxipEXBwUQdP4bR6+AGJZE3Qca:F7R8nZDgn1xwUGcMxlU","tlshash":"64d3ae2673065329e8d68e355ff3c331b76436285e29db1ff249996499ca1e80d323cd","first_seen":"2025-09-12T10:34:39.436867Z","last_seen":"2026-06-07T03:16:35.02111Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X6X9DHZZBR\u0026cx=c\u0026gtm=4e64f1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-X6X9DHZZBR\u0026cx=c\u0026gtm=4e64f1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 12:43:53 GMT\r\nexpires: Sat, 18 Apr 2026 12:43:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172772\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525482,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"964264e0afca1583185eaf52fc19dfa7","sha1":"b937013976895103423f4b524c31e147b67c3a8c","sha256":"3044698b4b14f08d0bdf64e1a6e61a253c5175802c1d7be2625a91a28480cba9","sha512":"758691c23a49ce6773d7fbbfd602db128eeb2137fec267f025a5b0365f85945252ece076db6f4dbe5d9f99604efdb5cc193548c4cae154547ce739d7fee2913a","ssdeep":"6144:2N4OjKg7CA4MRBZtffJPj8B3U90yIjwcHtpLUgW1e77pka1P9jXZ:y7t4MPffJL8J597pkyp","tlshash":"16b40aceb3c674225396f478903f01cba97b29a2b49cc89bb189ccf02d7455a5167f78","first_seen":"2026-04-18T12:44:30.34245Z","last_seen":"2026-04-18T12:44:30.34245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6565018813de558cbe3a5863_qr-code-min.png","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6565018813de558cbe3a5863_qr-code-min.png HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 12003\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"3d04bea01efa614198959056919d89a1eb221a2e7a68e8c48da405a5239195b2\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516232.015601,VS0,VE2\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 672 x 672, 8-bit grayscale, non-interlaced","md5":"1344cc6f2d038da512ed83557f152aad","sha1":"d1346a3f5ba678c6c88a1734b1d0f48d6a71ecf4","sha256":"0cc898dfdcb07375fcb157bf08d087716bc789d4d509ea046832b5b4e213f1d8","sha512":"8d35d054551bae55d2cf9a9200ccd4c9133afceaa90453d639460caefd4f2fff1e8488aff6f6679e16f7851d9c00fde90c6ed00986bf0a224361f7e2827307b0","ssdeep":"384:qeh2bks864GLzdCM9GtcFsqZGtEV1DRHkyBlMSXA1:HbhkdCMAtcRZDb3K","tlshash":"5d526ad1f272ccad6bca96645de30594b3331c10a448cd4beecec47a48a38027ef9225","first_seen":"2025-10-29T16:12:26.989076Z","last_seen":"2026-04-18T12:44:30.343397Z","times_seen":6,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerionswallet.web.app/images/6560e03ed6d4dc1d4705bf3e_bg-forgetting-min.jpeg","fqdn":"zerionswallet.web.app","domain":"zerionswallet.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:52.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"WR4","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 16:23:07 GMT","end":"Thu, 18 Jun 2026 16:23:06 GMT"},"fingerprint":{"sha1":"BE:D1:01:2B:DD:AE:2E:C1:88:8D:14:24:87:DE:A3:C4:61:0C:8C:F3","sha256":"38:E3:C9:2D:48:5D:84:E6:17:95:F0:95:CB:3C:5F:8D:B0:70:98:CD:4F:AA:45:3F:26:56:68:22:10:22:A6:FC"}}},"request":{"raw":"GET /images/6560e03ed6d4dc1d4705bf3e_bg-forgetting-min.jpeg HTTP/1.1\r\nHost: zerionswallet.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerionswallet.web.app/css/zerion-inc.shared.9bfb11c80.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26433\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"c2035d064306d8c9940e39e3bd9cd0349fc880a2f1110c06367f45df61cdf671-br\"\r\nlast-modified: Sun, 12 Apr 2026 00:09:28 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 12:43:52 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776516233.938271,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":27024,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1102x1104, components 3","md5":"12930e268c56364d07b5abd9f42371c0","sha1":"e53d8591dcc445ae910df4717901c24ea1c58fc4","sha256":"37fbca7c25e35002014733e98867f82144c48d99440e1d37d1dcc801b4858585","sha512":"190695bddb84eefa077b407d9ec6f0450a8386f4446d5b7726d69fd6b8bc6991ce635db4e0ed87d86a93827292178120542061416b942f8c763ffeee548230bf","ssdeep":"768:21eoxN1RSx/Z5DBimHfQLW+AsuJJ5mrJ3ow:qeMN1Rm/ZbnHfeAsSWtL","tlshash":"7fc2e14edb50fcf1ed159078a3db9450618f93a7b1b0614780d82ebdfa1baf41b0a21c","first_seen":"2026-03-06T12:09:10.040956Z","last_seen":"2026-04-18T12:44:30.344317Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"zerionswallet.web.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/android.utils/app_version_no_google.json","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"16.15.199.58","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /android.utils/app_version_no_google.json HTTP/1.1\r\nHost: s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zerionswallet.web.app/\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PzZf90grXWhpd3bziyxz/mZ9qrhop25/nWxIUORyqGefOS/eUsCsEmxC3YugZtHxJ1LFi4sUpT4kaHGYO7oJAD9GCpGnHois\r\nx-amz-request-id: 6HEFSJYVCHHEW16C\r\nDate: Sat, 18 Apr 2026 12:43:54 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nAccess-Control-Max-Age: 3000\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Thu, 26 Mar 2026 17:47:05 GMT\r\nETag: \"7de61c9fda15bd7f7b92d94929e787e7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: enm0RFDQ9CaPfh_Mpo9ZW6vw.hj3QB9U\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 220\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7de61c9fda15bd7f7b92d94929e787e7","sha1":"21579ec8b03f6de567e46a3891e736d7400a4f36","sha256":"b4716e4c47ff39b4139987ffece827e8d615541d4662ce879bc254cb3b2e7a37","sha512":"082ef6901689251d5b170095e376c71065cb756991355ba7358da21f48504b1dc1a8400fc1eef045cc5a7a5b4032d1ed4f6cd0c193c008f0f2eb073710a15901","ssdeep":"","tlshash":"acd02285c6e0cc3b19eac33c1168103847376ba3aef010da0724d14c9605df860121ed","first_seen":"2026-04-08T12:35:19.98009Z","last_seen":"2026-04-18T12:44:30.344951Z","times_seen":4,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":232,"dns":14,"connect":96,"send":0,"wait":122,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"still-king-02d0.lostapeclub.workers.dev/?m=2960860","fqdn":"still-king-02d0.lostapeclub.workers.dev","domain":"lostapeclub.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.176.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zerionswallet.web.app/","date":"2026-04-18T12:43:53.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lostapeclub.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 06:10:14 GMT","end":"Thu, 25 Jun 2026 07:08:44 GMT"},"fingerprint":{"sha1":"63:D3:AA:43:70:6D:95:2C:78:CC:9F:61:49:C7:07:89:AA:9A:6D:4C","sha256":"F1:9D:E1:2D:54:F1:8A:FA:4C:BF:3C:1A:19:EC:EE:51:68:AB:DA:B6:BB:D1:10:02:58:01:48:01:39:26:77:48"}}},"request":{"raw":"GET /?m=2960860 HTTP/1.1\r\nHost: still-king-02d0.lostapeclub.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zerionswallet.web.app/\r\nOrigin: https://zerionswallet.web.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 12:43:54 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2jVVDk%2BDjAV%2F2nlP6sY3b8olCWyF3cK7BsZ9jQ%2FwQipeGsFd8lFyMWspToVBxoSeUXEIkAbgh1rF9FOQMRWCe1Wuq2hVDFcNntbjO5fJbL48VhIjRgqr3VdWMEfhcV19R5ob0EKevZgnIhb%2FdzmJ%2BHzUXCEGMjyGwY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ee3c1fbebe00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3403326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ddde7ce4589a04b3079331d1e712bb11","sha1":"6cdca0c82bba86eb9f2e874973ce7af83e72d6a6","sha256":"3a8d1744f6f2f69130556940c36f24e38460d6c24a8836c5be254af4e374acb1","sha512":"5218e4ed8a9b24a34adc96b681977ed67b0e5a76ceb6b26a02ab29c0e0e24b18ab71f426e0ef8211812f378d537777264f0691965cad07ec30e1cb5bcb87477d","ssdeep":"24576:YV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd89Alj:Y7OwPEZJsd","tlshash":"542533216da7fe9a4e4cee757cbb7e4339821f86848da8db6a73f7c40054136019da0d","first_seen":"2026-04-18T12:44:30.345892Z","last_seen":"2026-04-18T12:44:30.345892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":651,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}