{"report_id":"f7486b93-ce9f-4ad1-967f-d90ed4cc5998","version":0,"status":"done","tags":[],"date":"2026-08-18T02:56:10Z","url":{"schema":"http","addr":"v2-backpackwallet.com/","fqdn":"v2-backpackwallet.com","domain":"v2-backpackwallet.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"v2-backpackwallet.com/","fqdn":"v2-backpackwallet.com","domain":"v2-backpackwallet.com","tld":"com"},"title":"Backpack Wallet — Best Solana Wallet \u0026 Exchange | Self-Custody Crypto Wallet","dom":{"size":31579,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (560)","md5":"b7cc9124f6a2ade3a8f612af36d35f04","sha1":"d0b720224c0dc3ab9f5f6a0d4716fff8568b56f4","sha256":"94aa4d27b17982db69f1dda9c3c033400ac2773c9ef09e52d472544d4c53d5a1","sha512":"603cd1946c9122fd0707404e04d2ab08036cb883c2551a4ff4ba22d2d6539db530241ba45ba2d1c034ee53a0b425ae87968812136fd687091dc415234200faea","ssdeep":"768:CZxabsQkFesIRElzFSbCRDsfR1WRO4AAgmdN:CZxasFSbCRw6wa","tlshash":"66e2e81b93f221221663099ae75263fb6f3c9807e20546b93fbc42589fc194599f372f","dom_hash":"domhash06caa7222874b0c96122b87525306c1c","first_seen":"2026-08-18T02:39:02.373153Z","last_seen":"2026-08-18T02:56:10.656504Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"v2-backpackwallet.com/","fqdn":"v2-backpackwallet.com","domain":"v2-backpackwallet.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T02:56:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"v2-backpackwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"v2-backpackwallet.com","ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-18T02:38:58.278266Z","last_seen":"2026-08-18T02:38:58.278266Z","alert_count":2,"request_count":2,"received_data":32847,"sent_data":1008,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v2-backpackwallet.com/favicon.png","fqdn":"v2-backpackwallet.com","domain":"v2-backpackwallet.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-backpackwallet.com/","date":"2026-08-18T02:55:43.806Z","timestamp":1787021743806,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-backpackwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 14:36:22 GMT","end":"Fri, 06 Nov 2026 14:36:21 GMT"},"fingerprint":{"sha1":"B9:81:47:42:8A:98:02:10:A4:D8:A6:C9:9F:92:B8:FB:94:C4:0C:FD","sha256":"A3:60:93:10:FA:7E:BD:44:DE:C4:94:60:D8:4F:DB:77:D4:32:BC:F2:30:DD:44:6D:D2:A2:9D:C2:6F:A0:21:BC"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: v2-backpackwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://v2-backpackwallet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 18 Aug 2026 02:55:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 258\r\nConnection: keep-alive\r\nLast-Modified: Tue, 11 Aug 2026 22:32:04 GMT\r\nETag: \"6a7ba2e4-102\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":489,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"f41d2f2e243cdf6370539691f978e43e","sha1":"ef97b946ec1465791437163a188b91a759ea2a63","sha256":"3e4364edc1905f41a6a2acc2012062e3de46285786b768f6a532b37b7558d216","sha512":"2f12114a5604336f8fad8cbebb0f9ba34135af7c018421bce156a11d995fbfa5759f083d427dea040516179273cbdd38b85912b0ea1616dad14f4eac6293712a","ssdeep":"","tlshash":"47d0a7e2b6532dffe65a453f5f04c242e861c42476612b3f05669b3d4b16246caf81cb","first_seen":"2026-08-18T02:39:02.375781Z","last_seen":"2026-08-18T02:56:10.661393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"v2-backpackwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-backpackwallet.com/","fqdn":"v2-backpackwallet.com","domain":"v2-backpackwallet.com","tld":"com"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T02:55:43.356Z","timestamp":1787021743356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-backpackwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 14:36:22 GMT","end":"Fri, 06 Nov 2026 14:36:21 GMT"},"fingerprint":{"sha1":"B9:81:47:42:8A:98:02:10:A4:D8:A6:C9:9F:92:B8:FB:94:C4:0C:FD","sha256":"A3:60:93:10:FA:7E:BD:44:DE:C4:94:60:D8:4F:DB:77:D4:32:BC:F2:30:DD:44:6D:D2:A2:9D:C2:6F:A0:21:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: v2-backpackwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 18 Aug 2026 02:55:51 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 11 Aug 2026 22:32:04 GMT\r\nETag: W/\"6a7ba2e4-7d73\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32115,"size_decoded":10328,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (560), with CRLF line terminators","md5":"228c17f931c219b98e3916f0e6219e06","sha1":"8afb921578e45b97eb2f58ef3b80198c37904483","sha256":"69270da2fb81ab8006f0c2353860b6f3aafa350ece15fab8aaf0b709d2d8828f","sha512":"6760663a4450d09373938fc42eb90ea463c23c2c4518529e175aaa6749b860689dc2d319fc1b4af0de517d3c9fc902f7fdfdb07c157d0f5b5d52cad6fe0a4858","ssdeep":"768:c67HXVq+5tNmXKCSxbBDxs4p6RC4Zx4cVj:c67HdCSxbBK5N7","tlshash":"93e2952bd3c0212215334a99e75267f7ef2c5447e30102ba3fbd425a5ff190496b7baa","first_seen":"2026-08-18T02:39:02.37455Z","last_seen":"2026-08-18T02:56:10.662788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":188,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"v2-backpackwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}