| appsweb-server.pages.dev/wallet/static/cake%20defi.png | 188.114.97.1 | 200 OK | 18 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/cake%20defi.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 200 x 200, 16-bit/color RGB, non-interlaced Hash332670f417286038928ee59b926d5f0a 2c125c495e7cdd464929dfdf14b0f78163c9c153 0e38eae41b479ecd8df40dbebd738da485c2d97d321d75db2f079f0439cf179f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/cake%20defi.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 18196
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d5ea9f39eead1b472957ca620a588198"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2H%2Fq%2BCfdRKXdvk7JXYimtePtrZCT2LqWhL%2Ft%2BOv784JNytq6rfxfNxL9zAaJTM3Tjjrcw64CWaK3QPQdmNZosYM8sDB1O8KrJQ4hJFaPyQtEcdtBwF5ODbBwfct4x6Uxmb2xDGIy9kytq%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee9569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png | 188.114.97.1 | 200 OK | 4.9 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hashaa4cae32f46260663fb90abc8153bea0 013828c94a8a6d44a95523b4352d5edd7f29a321 4c7260d3a03b17e68dc0b4983409158852404b56b9e4dfdd4f3724189a07dcc3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/trust-wallet-66f8777532931d9c09b633344981a6a9.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4868
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2d3173e31da19da1a4f8b7fa3970a450"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=voHuy8kyd6Ta0eXUuq1LfxHw2qGfPRnttg6Z%2Ft3ErL15c4mS93%2BT82T%2FPxnU3%2FtluaygfeCiz1grbkPLQOqQaGEy1oFDpM%2Byc%2BMW%2BFA2bwIYEB6vNDeCOFBgn0KHEtsEUiirgVtCVLKOu7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee6569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/error.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/error.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 259 x 194, 8-bit colormap, non-interlaced Hash656767a090b853f4c62135e4c3b52010 ba238cd323a821f9a84049f2390833c24744591e b13c7606b4a8554a450f39807b26fd4a45d7a77cf65fb1151973b549020c8882
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/error.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 2742
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7667e2c8554f501ccd77efd4be5e8403"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdOL2MrQoYqXiEfpBB33iW1xwPBlAJIt7hEnhvH3Fuyfw28X7XGKTgCXvlmPud%2FGKs9sRo1G9VJGCOVKyeK9zYta51xR26gvN3PKktsTXy8hCS0QPhM1TAJ9mQ%2BTorDZy9YuWPUE18Lwz1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5eda569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/otherssss.jpg | 188.114.97.1 | 200 OK | 9.1 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/otherssss.jpg IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 513x598, components 3 Hashe06ca5b89d661ad8ea28333eb7f7e24a 3fa9fe08f94d3678bb37f181619f4335b65c0906 6825aadd71fec0e547aa35d6eb84b61f0791a7bc83418272cfb773a4bc58eda4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/otherssss.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 9056
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "99235c87e5e0bf9aa05017a50f222733"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1yAgglZrYhtxBbuEdTAkp%2BJdjCBp8gmmpVDf9lygA2nzK6WTw7KcD7Kwuuap4exV8hixya0cpdZFL%2BwVB%2FaAbPKTPm1pv93cbE04eIfXwXtXHZLWjoZWGZRCWiiicWdQn%2Fv0rjEcHXpZ4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ed8569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 420 x 420, 8-bit colormap, non-interlaced Hashb2521ef2692ac7c8802b1d17d494f2e8 ba4a36fe55376d0b43410230ece5b99d7e57504e 2e4a7b4b020e2822694880cdecc65e35972e7f961db8596912f92b8fe2af1d40
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/rainbow-207dda8d66f8ffc00a21e4fcc5ce0a73.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 22036
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5e26af44f8b5d24b9993e69b235004df"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QTnNcuz6vGB7jPTPfuDmiXPG2x%2BjhdmfQnTUWzqQ4Y1vKYB649eYpWKfAKlPDYP0XKhyYF%2BaqupyuoYtpJq2gi4XmzCA5WUSNPoKlJI4DI4ksuf9FuC0dH8CRQoYYO%2FSp%2FW5bxd0gs5n2vE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6eeb569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/bsc-logo.png | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/bsc-logo.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 338 x 338, 8-bit/color RGBA, non-interlaced Hash473b05a2b26173f477aa4fe36ddcf36a 449c7aaded7ff019d25cbc983ddba1b00f49b34c 25450d45cb0f88f0312d658ce75e537cf9b6c9dd5c6d7b905710c1afe5dbeb9d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/bsc-logo.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 22565
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b1a30e0217fc09dac12484ce0275d21a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=avIcyjQO027xMp3h3Q97DMRty9E%2FpaJky2X6Vghcw5fff3xfz9mqvqz1FEaO33ZLFMNjbYsBiLt%2FoAcRF0V9ib6AxlVZF%2BzR83drSME8Ea%2BKmupJfA3rdY0g0ItpTauP8Pjj3aDo6UuKMBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee8569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png | 188.114.97.1 | 200 OK | 9.9 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hashc4ff79e07cce011b60eacd026fa3ca7c fe03e0d06bb5aadf1a060d3b99ddc943d8810b4b 481ab42edaa77e032a7a53e2ae191a1d8f39932cac86e61ddb297cc71802c7bd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/metamask-69ce6b56bbc9953dfb4aecebdf88729b.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 9914
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4f651d53a8a7bec322a5f9c9e1b9c2c9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkRwa9GAo4E5B4YvEQPevui0VfycwXv1YVFpDE3WNJTD7r82joWJfmMThiXd1srMVJgAjAAVuHzAmQiLM9aF7WMeBXBXxoeIug9jqMG4lZqZQEmTJ5%2BnBvInlT6u6Ta7WRe7JUYesVYzTlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c5ee3569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png | 188.114.97.1 | 200 OK | 27 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash500937c7bb85e0bb58e5043461f80b9f a4a541efa9c55735354bc8ba8b929abfbd947b38 663d35a3d897c47e87516ff63f3913ef3025c3b13b01ad056d00ba856172d8b7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/crypto-4cbeac57421fb3ca2573db2cf448169a.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 27261
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "12d8c15829360d3f162081506309227b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTX7e5%2Bqxo0dgMfi1dSdp8DKeu3A8Y5fANoTy3HGJUh08lG5y2a3ijh3KSlFyPxfkn9JDv6Qa21rdBAHR0O%2BQEAolpPUInfTdV68f79NaOOu8dD16AxyVUXvHbfa%2FkKCrcqfYe71QCAUiY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6eed569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png | 188.114.97.1 | 200 OK | 8.4 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash9747beb608ad621d9602901df58d7d8e 59f8e6d6874a8214caf31036b2584afcc50e835e 10340ccc4fce1c9ad810ff8aae7405699f57a7f41f411c593b7a6962ff945975
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/onto-983003d35fe32bf916f9eda381f138f7.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 8388
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "23b9951802a7d44f24a03586846d51ed"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ztHcp%2Fn4LzRrXLJKgX%2Fjv%2Fjv7WEsPMnang0SeAxtkgX%2FRtRBzHxUOWXHLM9S19w6GyX2rQSG7EW1HYm1YLYe4sSGLn5zGQq6AldQBkDRLiKhOwTjvVprfLB6psCqmqNvqTzshDYTCw%2FXQzk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef4569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png | 188.114.97.1 | 200 OK | 31 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hash8ef1856a4f6cb16038b2608bf32c6bdd 477f99be9dd16d7ad84ec6f0451a9d9baea92391 d5d2cfce4b759fc1d2e19f4d2b5800935934defaf6cb7eb09550aeebb8f45405
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/math-wallet-9e2256cfa5aad3b33af05f3fee4dc9ef.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 30923
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8e386b5077220ffac49ab102f44a85da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LVrDi6b9TRSdhKrYxpmuMDYIB%2FD8t%2B6%2FoiTcZ7tAvrtzLBoDrH3b%2FrLn%2F%2FyY72%2Bg5vNDHsyHcJg2wMqJwynZ%2FZeVz7nUr8AZO8cwaKGnrQDF%2FlDq1Y5NKWyJRZpIZxgywx6W1PjPotYB370%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6efd569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hashf0df9d44f9959b4f153a81fe5050e051 18baeb6efd7b6f929432a2d20fd5858c225c2c1b f0c3ec0a5a55984c9d9f25774bbea242596b5d976a65579f6ebaf82002a360c6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/imtoken-fd8c7c52dac6101568954e7448a49202.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16524
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "694b5f6ea2650be5add9fac84f5d02ec"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T7lpQXaIUIM7tgjcoiQ9RaNyX2%2Furgscgl%2Fppy1OJZNYaNLiV%2BrlSM0qg78MQMo2fbSThFUpMRJh9hMvoxy2B2Tjju36hq4NRGU6SJ12QhYCi%2F3Q76Ot3gsUpCf70w4JF4xSdAqtLGp8kPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef1569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hash0332a155bdf19b17b6a8f3d51441a11d 0acc86472737ec2cc4b8d5e8293af973bf0c9e3b 37d02e6539ffef6542a6d5706b7739c2a6daa87a3407837e34a2f7b985cf449f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/walleth-b60336f8dd9ea86285408cb4f96634d1.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10649
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c31362fd1c7419a07ba419029a258a7a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3lQOt3rye6GrmTy7utjhuLIcQatbxkHzpFsfsF5e3NhK%2FNVvN0WRjwumG%2BUKgbKSCm583C17qfEFP7W8ZzpIKaGbdVzfW6FZH95Gci9%2BGMfJaOWk40MFYEBBBPX1O3j9vkIb4QAvCisJxQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f10569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png | 188.114.97.1 | 200 OK | 7.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 596 x 596, 8-bit colormap, non-interlaced Hash3bf9c889b1978ce4246a0770a9330dbc 602d749051e8ab141f848ac779356bb72080d5e1 536118ed978930e9f559116dbe47e2d926bcbcdc68ccd66c09f35a233aac7180
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/authereum-32f3939207b77c1837547d5ed4f86110.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7633
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "66a9612d1709a9203cba751ce2e285f3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9pO2YNxUbKB2fyNoqERJRxlOoU3XGUYTGOAr1FWd6PBM15GnGTpTV9aOLbAi%2FnT6WjGSiptx%2FrW6yr4DGnXftyvENYG58XBMhdyuj3wVJyhvULcHxzxAoozxWJDX%2BqDePDz3xw%2FOeeWpO7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f11569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png | 188.114.97.1 | 200 OK | 6.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1025 x 1025, 8-bit colormap, non-interlaced Hash442235cb72d9e15c295369041e396e73 726d60d9c09f48b8268b0323b4f41845c18c0c6c 7d29d77c8e6e0425979ff3712689a22bc8a8c07d2653da57c620a828b5944203
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/tokenpocket-57a4a886cc644e5237ac1558226154cb.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 6590
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "65d3d7e5f3c56b85dd17a146e822123c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BTmVxMRZz6vJc96Z069dnuKIaCyHQer0OZuE49bwJjPFTMPxQp9YKcREw5cVdZ1qN7yAbwb5TxEovXsrD3XBKHvueR6p7OIJA1ifTj4bK9m0usKC8WF7sMtRhZVSja%2F3GOjib1QEPBLOAgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6ef7569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/maiar.png | 188.114.97.1 | 200 OK | 36 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/maiar.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashb0877d28e416ec23c239a7e10e2f397f fa9125bacbed52a0b96bc27be6b34dfa18451644 e2a3b0d3f1792998c5422fd090791ac37fe460fb86f3f0127f170ae74557e6f6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/maiar.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 35963
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8a42dc1d64426c53f8213177cd5c96bb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6SLid7RSsIec14M1rqsIGHLdgRA%2FJkPtsYvmvKWSj5oJruvIRZ830cUSwgFpPiuNrUchX8yLTdHkuxB7pcm60CxdbAjM1Im2M8ZL%2Fi0o7S5aaNyCUU5TVi7t9wiuGYOBFveE3kAYKAqjto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f0c569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png | 188.114.97.1 | 200 OK | 7.4 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 460 x 460, 8-bit colormap, non-interlaced Hashb61380d1d625acd5236637674ef89540 bbc2345ca11d7753af9027df2e975b83d58cde71 12ce508093871afde606fac87247346fd775a111efd0e6aba9208bcfa63641d4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/ledgerlive-9fe387e571fb42ed5cdf08e29bc920ed.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7417
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "61051e5eb2790660aec783b7245fe082"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KvxB3pg9BIF6DZAXTvjThKH3XHIk0V4EyvRQInbwYPunzh1YwuTlNZB%2BjZXS3GKPvygk34U%2FBEVA3OJpCTahq%2FTUUzzU%2BZLMUGuMwtj0P4PCcLXUBgucZncjecqhdxU3BF3P2etSYhhKrmU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f0f569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png | 188.114.97.1 | 200 OK | 63 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 560 x 559, 8-bit colormap, non-interlaced Hashd26fff041871f323018c7b301a694c7b bd6011749dbffcff4609af30450c7a4eac94c79c 2a35248b8c44e32680931b3218a99fef1ffa8b7b8a8770018c5e885d49500f29
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/coin98-c5b50adaceaf474e48ef1dad150d0829.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 63204
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "4449901712f50802b0aeb985ced3752e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=heHL%2FlyWuLcQc6OD%2FLojbZhJ%2FcenHzaGjvUHpwleN6ufCZKZkLedpsnOG5WBAsQ0ENmcy2hn7llGaHpYgqPG5kGCDP9DSpzyCB4rIVUR8Sw6qghiNmv8IOT0XUIg5lFOk%2B0CxnXpKpmA6gk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f1a569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/parity-signer.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/parity-signer.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hasha538c4237c018bb5ecf9cc63e7d78231 1fea5b4b50cb19b38a12ab97926cfda184f5fe0a 6fa0d316441513d656755906806aa127728514c46d6d0e7acbf0c3f8b9e473d0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/parity-signer.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4405
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d8aedae1b1461b2c3ddf44a3685f00d3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LqbugYuFGbkiTavDkOaf3Va0Gm7JkpSb8tvl3GHgy3NYoHgyqX%2BKKjRVWcDeZbiUmUQFz2cfxdv6Mt31D5G9gn0vl%2FgtoFX%2BMntaj77USQElsEjWqCio0pzZsxNlfBtspcW7hwHn%2BDY2uRc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f1e569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png | 188.114.97.1 | 200 OK | 8.0 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash47e2ad4467a524690e3a9a199cfea8eb 5c3d98c88e570f9779d3ba328c11442cf20b8921 1fcbee125b4a2221d3828710e5534d4259c6df3fd9fc84d63d9a12b338fe301e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/dcentwallet-f0bdbaec0837431b87ac9886bb22dfd5.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 8033
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9e0f157a2569390f6047d6ad17ae23cd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BDWhP889vvvgtL3PPM%2FR3p%2F4rf3u1bmpCpB8%2Fm5QxbYjurAnKttheunpWhcSjzCh9cCsoYnMphG3h9PmOZFdphOUfXCm%2BuQZTPq9bvphJwDdOcNtfmvklFR4Jjw9is%2BWnvhLkmQ4VNdAWP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f22569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png | 188.114.97.1 | 200 OK | 45 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 2001 x 2002, 8-bit colormap, non-interlaced Hash6b0fcf3084e61d672d0f39c0c8bc4845 c5a90ebda934c04e524eabcaab5d4a9e5be8aa53 27db3752a4289c09b2a3f970487ee860daa7288f04cf3e3d7cbb8961272a3e68
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/zelcore-d4c1a7a444b95612f6373f0b536b6ccb.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 45396
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40c94b279ce352c3b5857c8b239b6eb3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9%2BO1cmzi6KNNeMIQvYrFVBq0az4g%2B4ExurAx1u7cwcHuNPp7pKBYumw06tBDpYIabb%2FEVH6i1H5t0wcwIqJcfth0hEauQRIcxx4PIpUFhYiF%2FSw%2BQKbhu%2BWmg8bzfqSXGH4prHjItvuFhU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f24569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hashecd4d927ed747e9b340b45410665ec6a f9a65b0a40924bf79caf2e3ffddf2586fdb26b4a 72e14e276e668c5c0126853543d6205dec0dc5f7aeebb6634b7f631aa125f157
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/coinomi-7eecd68e38d78752d68b7232bd9c58d9.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 14122
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "51a63d97c422843be8f11f6f2aeb1ef6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nag4F6S67gJBRXkH5IADAyaPgUQxAlByGFhc3cf2dTOdQ9RNDbr9PVeLe11kLOsUpHvT3lvB9bkqNCFTPST0oKUB%2FS9xqwfT58v20KcfO8mCbtlVg%2FUoyxzd%2BSCSjvdHjmzSA2ayQtqODSI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f25569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png | 188.114.97.1 | 200 OK | 140 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Size140 kB (140157 bytes) Hashe32f670b6af5624d8724e2196b3d4379 4d83f118b5c7618a80d9109c5d843b2891789f00 b690836dac57a2a985b8bf613d478e1b554fcfdf7baf42c4ebdf49b298fe15eb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/cybavowallet-16e7e96f2e3df01fe2170da5267774b5.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 140157
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "edc47741ea7eb64c51d4a0ba8b6adbac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjoBYfFlHdIFpUFtWuVT4DyDUFJnGnIwXEJ%2FUwNFluVWkWCZ8oe9UAtPcC11Gv5%2FUYPQ0lAOlYTaSnbVFDlsqjhcl5dufQEaNnHBXA32uV8l3s0M7pNMz4ze8z52Lqxkeaw0ydsAGlrjv2M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2c569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/wazirx-logo-rounded-9bff9f42.png | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/wazirx-logo-rounded-9bff9f42.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash9ba2192a5a41f8ce3274d1c94d7db369 1d3892ba1f63610e89bc1d0d10a04451d1a9bffb 7686521d3e7bca651a2090b7c874f8509206e0ff525dd47664ae2a5bc0adf2e8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/wazirx-logo-rounded-9bff9f42.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11806
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f0a45d4127a7215de8723a0190534f4b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3UY8rPnHnSICrELTYee85%2BE3Q%2F7lOhsEU5kv%2BhjdzD7Er2qxJuRiujxDLHpRoczJq%2BohQEQ6vNSOxMbjeiN2AIgE54ZtCZ9smbMtPmhyZl2yPwK6HXKv%2BwQXlhOU7ZdNjIeAKE8j%2BhxSvv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2d569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png | 188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 227 x 228, 8-bit colormap, non-interlaced Hash1b7bc4d69d08a6c0ddf62b97296c0f36 93f5777cb640b1967e29e5bc057cbcd9ab55919b 6410f0205a4c47eef380a616cdb3facabc8337846ec06394d36a3f6c2345601f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/infinito-wallet-68da061495160c96f4bcb5e70e612fdd.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 5332
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "87026a500fbcde4c520a77c30897d265"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1CurOY8bYZqAzkvaw%2Fl56IUShCwFOkN7w%2BUok%2BrsKFsjiGWHy8tNWcTOl9D%2BCj8RTsaCUcWLItpPnXibuDZnXrycJ1ZfLJ7xaY5Z2E6zN1PGUwSAInljvdsWGt9LYfc%2BxrpH3R47l2kd0C8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f31569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hash6936b6160bc96fcfe6f17ef68a5791cd 88b8151ef1cb6c9b34e6d364038bb9e264276b37 2c181af611618f9787aec5272ab2097b7a62ae3a1a853b4ca0ef3757272aab4e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/wallet-io-198f396de22fe25eb370f46544abe69d.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11274
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f241ff74325aef91afb7fa39a6e5ca23"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bn7ZxdYpkjd9eiFoD4YqNXTi7Y9IemlHtETgkF4ru950hzzHQVjmWzD%2FvNhubQRJf%2BoxsbpJNJ1gJs3jeo1LsG%2Fs5BzU9NdR%2BBphLbCdRWlFAWm2uJyqdlouU5WTiSsOJNoFgjxEhfxyebc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f32569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 939 x 939, 8-bit colormap, non-interlaced Hashd42d0ddb4d1cb8a5f4312b3dca0c19ce d55a5a0333f739be3d4dd89ce5e5747e53b451b7 4d1ad0895c520cf08837d57c4fb47695a9201d710f90f15750b67113831eba5d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/infinity-wallet-48e78bc97f96bad14ee6b781423a69ea.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16780
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b47d58f09b3abe932b0d70c627ca5ba2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9PL3x8I%2FCdtqEZKX9%2Fn8uFXax%2BCbdJila8yv6svt9gdqAAVfpc9okTi9NQlMMObqNZ6oTFVtwn2UHwSZieLdGvMXQbckwjLVLwLyKmfAl3gITn5sslZXP1dGmQHb22Nv10oAH9BHj%2BnHPQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f38569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png | 188.114.97.1 | 200 OK | 41 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 532 x 532, 8-bit colormap, non-interlaced Hashe8315763d1717aeebd75864bfe07d7d2 d78755727d54f4c0cb25a24a4907571d9d5850b7 820ce188e231cdb04cd4a1b4b5f66babc0690a730914a67535d5752f2a53fca6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/ownbit-0b6b21e40acf2fa0f85d2c5ce38c4c51.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 40585
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "20c3745fb0c5b9e0c29ba0591c09534a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0uQhwS5GP8TzAP1jqLLPRy2S9pMVgBSVR0wA1Lu5e7JLe5AF7z%2BWoX1pWJPkQG7F9DR4W%2BoIhoCzdl7NJJzoimJBk2Wg63YCTrooWCfw75kB%2BsIvCpwnym0anLVp%2BJCKfnAHckmWUJ5bPw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f3c569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg | 188.114.97.1 | 200 OK | 5.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hash7de1955aa2f99c18e7cd406f13acfe01 74b84eb6f355cf673db6ba3ef82ae689a648ce42 7d1f310427268c947d775c0446b1ef416ad38d43a98dc7aeb877e56c28c044d5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/easypocket-436ea3270a7bf77c02a880bfc70d0ee8.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 5625
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40f08a078ccda22ca5814fd4d56ecac6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gcQo0YkreR85T0fHn8Q8Fw1gyx2LduFxNReogA0ORBnGh4NejYBo1rhnSXlYJ8bAfrTplNwmpGuNK60IHKoZESkPwmykLDsd97UjET29Sdr6A5jdzV1ziUk1XJ%2FYvRBD%2BiXfMHl6D12jQvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f41569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hashca3fe0eed06b6231639c5ee96fe85bbb ede1e38841e18072b65b0c4160bcb99272b86ffb 501f77f1bf6b2df8fb07504bfd369de4406276e886ee1c4b2adadf5dd11a34d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/sparkpoint-5c0d3a4ab850a7ee2a3f03e215b68f2c.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 17260
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eb6318ee01572324c965ad58c8b2e3e2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ezS5b%2FICjKAeiiEH3qIq0DAsHsN4ZVOxR4qPSkivsU7Ylwqm4X6Y1Ie837QTdoptR9UnIB5H0McTU%2Frg948BGRh%2FUB6fhmfRzx%2F00p%2FbJp92cH47SUjK92BAKwW%2F4PtQx6ifa8zw8g69VWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c9f43569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 600 x 600, 8-bit colormap, non-interlaced Hashc8b38eaa1c15a39d22e66b29fbb31b02 3d6791b76a2fae2450436a00b9cadf800acc2db1 84a278ea7d8477744a805fa935bda7e8ede51e7c39b5f4ba193a784000ce6471
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/viawallet-ae1502eddf4d2ed89abd36907dd3ae8a.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11314
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c1e15858b7a13825f53f39fda4262549"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=co9E00JyDRrIJXkjZu4OIGE97cgSeFhbsFQDv7pLmbb%2Fwk8HiThWFl6Nmeys%2FCGbsKn6jNRCs8KFszo8c9grr1TojLKQRjaH9%2BKOZPqrDidkSXOWY7o%2FUGR7UHIXt82sixiFQUqNkq7xM9c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf48569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png | 188.114.97.1 | 200 OK | 7.2 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hashbaf9f6d8d1b4ae2b8e085edaef7629ee d6906ae73610f7679495760a48a82e705b5257a6 4f1047f6fe8115cecc59ad226c8714d496446f564703f6c6128dd28168f89fd1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/bitkeep-387b0ca7da4cf322f44c70c23064c529.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7226
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "530f6d39722f1b25945e5ba5b90995e7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bE0z%2BMpOLbQZLAtkJ4Q6QHIEwyvJsUpqExXMGkG4x5cLSX%2FCAy50HP%2FLwA4o%2BVyRWXvokoAU3wnwBPa36nNMT1HQ9aiHw3jI896Vu0P%2BtT7MTSWiit8ejZKAr5fj5vCYdkrsVSIXXR4f020%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4a569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png | 188.114.97.1 | 200 OK | 9.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash5977ec47a88ab5335ff142753d995494 0773cefb903c837d860cdd2e6a31545340e22c24 14ccbc0661aac1a3a603e124e1bb4e951968dd0171f7006182dc868ae85c79b8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/peakdefi-2e1d4f97cc1a737a9aa765b3748ff315.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 9621
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "9cb276f0bd7f0e810343f89babd07463"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xKP%2FSXMqMTGNKPOhPtm%2BW5vMoQ%2F92h3U%2B6PNEle93OGPrGYSh6nwvEk7LkqNY4AA%2BbvIMo0LShfFN9ofrzbUVxFCrjEf9KWPHQX%2BsLwNYQQg8qlWxMet1rySSAck2ts%2F5COadRRsrkRn4uI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4d569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg | 188.114.97.1 | 200 OK | 18 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hashf2456ba68e1bdd5d53dd5b5eef562921 0d32bff54274fc101bb0888b6db8d25c4def0945 2ecb5d0da52ba47ba519a3573e53811f3ea819d84d2d8d92a581aef5c100be49
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/meetone-01093db7d99e3e6cf5cca68b616f8255.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 17624
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "48938f42a34434616dd625ebc00303e6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EcUxTiaUFV4ZTwTSjZnKq5EsPjGudSE5GUbN%2FqgAGkquJLB%2B4ZMaWpeLq9WBLO9rSaQu2%2B793%2BYWqETaz6G3FlLi6b7Z4IEV6LmNglreWYy0rWhYJHDyno1ctnSSEZSiGufM6lV6dDKMgg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf58569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png | 188.114.97.1 | 200 OK | 6.0 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 460 x 460, 8-bit colormap, non-interlaced Hash09b986ff5f0d42dbb6d699f4346a8e96 daf24f272a2e893771daa66fe3ed044b6a6d56ac 5d37ac28f1a68ef5350099437f75851fd8c97e3bfb49fa78d2f6e57f856c792d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/dok-a32c522e109217cc2a1a2a310f3c9bf7.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 5967
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eb8c0a2b543b3ff15dab848ea148b1e5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZ7%2FaMr6GHSaScinF1MM7ISis8sd9CgNzBfooZR95XNi2RJ8AR21asbKEntcqXd6THGzwGKOy3uHn12dl7BsCfJJ5c2cFYE0jXh3ud6sJCxijAV4mtH%2BjhqcReeYHTZEPbKfUs%2BooEWVD0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf5b569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hashc74318ffce0700799c6d01663d6a991c d8439428dfbf0cc8ae284fa1bcfd2d0f1b24246e 627aeea61959b31a6aa6f5d3bc454e885935b8de00b3cdfc856bca95619b4859
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/atwallet-2611d814a50a964b89d5f8bc1e5cb3a0.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16957
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f593f3d5e2df9e0072290111a842f282"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYIv%2FdULVDrJAAqb8zl1yyr31GD5C3uhl7kop3szoGuJnHXbn74buNA%2FEkSBn%2F8FUydCiKXxLe1XKA7i4zWEfkKV%2FDNuskzye4T0S8Vb%2FeUyXpB7Z%2FnX0fRMEi8KPlh%2FIsfJnsK%2Bd9ywjPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf5f569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hashfbb73aee20a5a62f0d3194549d1f540d b929ef44db26d0c4c7b3d05c14abedbf7216d014 d5434779dbda107074254ac1d5796197c5611f3e9481d45dd2df52d7d85c6912
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/morixwallet-aa7d607cf9ad52afeb3b7c83e5f34eba.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 23228
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f7ac4ce400c22e57284959ac2e250a9a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phbOGOP5Poq8zjs7CtIsKwH1JMP%2FWSXofWlQU%2B65xmCxbwJ%2B8SuiQ8FNgmNBqv8OlvK2RCHXugC%2FecJyeN34vSK6DJGOlNFAfSIjHj9dXSlqcZ33vnUFouuksdffeRbfeaMaKtyXizDsirA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf60569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 916 x 807, 8-bit colormap, non-interlaced Hash13b46b98fbb85588726598c62944c92d 8f7e333344d1e44edafb88e5d33f27e9d8b34c9e 55f5e1cafa6d56b09610509f452f993c3f2f9b0dac1217dd3245964d9e03e79b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/midas-wallet-5c5057d972ca621414f077541845fc61.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10149
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "98fb15a1c9a058d285fb3f29ba285f19"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Pq3rF6cSqqMU5PtrztXs9%2BzxLaRRR7Lx7jPmVcFV2VG2I1W6CzHAU8GF36fZGEBGqLfhYPtWhW%2FxZdqkUDIcUF6Z%2BRhhxpB166r1zgv5Dpc9bbu6k%2BHuLCr3bmvv0ImBekL8YYi%2BSXQ5iA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf67569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg | 188.114.97.1 | 200 OK | 7.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hash5c1f0b3baa9072f7d0d76066fa67cb54 f5ec960f111ef16ee27b1c1e1b4a0c0b4e530c17 6a3def54dde9303756979ae76f8f310509488bb9559be873c54a4ca4bf23a8be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/bitpay-1573dd6c95eb38386f181048663590d0.jpg HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/jpeg
content-length: 7554
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b9fb64a925419d2faa89872fe262d6d8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFp%2FEq%2F4%2F95HzNlw6QOuFbeXbUKALP%2FvBZcrSGKFFAmMXwHSm3ALizTCbIKBAQ8pUxSENxP%2FlifosGyh3Uz3Dde0asGYSfEY5%2Bjs4opLMfyVn%2BMhYNDilMNTIcyexZIhNcdIWwQMVDMbt5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c6f01569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png | 188.114.97.1 | 200 OK | 7.2 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hashc62edd4dd8392f1d69385ef8e92e3a0f fd35d200521818573aceabc9f199cc8652cbec82 4bdc954d148ff3602de6e063814d9104faa7d2ef8d0cd9592fc2752be97d61ae
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/mykey-7419df5270c0406c80cba19fa5165923.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 7192
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6b5d12923a41d8a441d8a64a1e9530d9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BIubt2o4uW7q87oU5%2FcAgFnNLxX6n25x%2FfFY2g7DkoTgMG1Fgv7W9a2XsKi2Q8hsSHArmhqVtSQkwagSd6%2BMxnmVugP4NJFnLZ2FPIzvSZIFZh1rCRYuZuAapah1lk9t1wzBG1dTq2LJNjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f14569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 900 x 900, 8-bit colormap, non-interlaced Hash99334068bec9a6b45932d401f7afaa6c bfca20025e7689fe4f269d3558ce809eef0382df c8cd51c2b6e389f70a3dac8e163d106a3bfd6d9d19a91f76548c02cf33aeac19
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/trustvault-9031a67f82293fc50ead978f936cfff3.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11036
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "c3b8b3ee22932f8403644f8d960ae62e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hI7AOiAYUYUu97v4OPvueahQXCutPnYjERAu9nznt5iRqYCEXOvEeKEF08pJ0Ooskfm3lQryCQMPgJIb1a5%2Fh1gM6KLE48GZ8EJCoy0my05UTwAvAyHp5Bp8Q6kj0%2BMrpuSSnCjxXkhehp0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c7f16569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 346 x 346, 8-bit colormap, non-interlaced Hashab8305fccae0ad703631eb8edd7432bf f1cbee5fc46ba2cabca26357cc00c999d0edf7d6 3d259a231e036c77da9eb5def6ce778085eda636fc627cfdc608b3eaa9e9f804
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/coolwallet-s-cc612ee7a151c1863293fcc69dd0f677.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 4064
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7fcf4ebbf5092489fb021e9d9e116180"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvcvidXIE7ypF%2BTBlWrIKNLdn0dA7MM9m%2FRI0MG1T16rbnNQ01NNz%2BPYT2QYRgFm8yGVglOdyk4gBdAwmmMLdRwJzfAv4irzUb2dVZrLtr8knGoU2eVwcNYl0pgSISyIYW1LhxBSuh8lYiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f20569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hash7eb9fb15a7d94157d461824e8c6c9fe4 0f10545dd2d557171450e84343d952c45f93123b 1aa5719d35592a108d797be1d29cad8b08a9f8741ed5fd1df611c95df088b1b7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/gridplus-8cedce167d37ddaa02f2afdf55841d8c.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 10787
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a24fc1c2b2f06f337c02aaa730fc3a48"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8pcLZR11dQJb9JcLD0DQpIiAIv7CxHK2%2BZW6zuarkeYzwFo8EQ3YP2VDZk8gO8gf%2BHUIeevGUjh3fg%2FrGWMBNCi821TQSqS0cJpCHs0SaWNEP1oKu%2BvtrAFNn%2BTxkdBr7XQ%2FHSwvq752Xo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f2a569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 338 x 338, 8-bit colormap, non-interlaced Hash3eeb70e42da8860540cd540f5565909c 42d381e05b34f7e86e56a15204d81792fdae6a49 85da9acb383b073e3b7192692307cbec8226bf87573da4f345765f03010fa678
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/safepal-1022b40e2ea3a4a6bb19cf6ff28d8b92.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 16695
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "da9735f1e1ee8d2b2482301d12179240"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIXS4XVamwg%2Fx9suClekyIYNMmoAuySKcSa6nMGMwXMLThLuV%2Frks8CP%2FaL59gavQmyO0SkbPFLXodUCxMeamTNZqatXvWSmHN2FRlUnFtlc1BaZ%2Fv6Hu5ri6Zs8X0znxdoFVKfkEVU3Vz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f30569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| smtpjs.com/v3/smtp.js | 109.169.71.112 | 200 OK | 871 B |
IP109.169.71.112:443 ASN#20860 Iomart Cloud Services Limited
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectsmtpjs.com FingerprintEC:83:1D:D8:A2:64:CE:2A:CC:AC:62:79:7D:42:09:D5:21:4E:8D:05 ValidityTue, 09 Apr 2024 02:31:24 GMT - Mon, 08 Jul 2024 02:31:23 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (841), with CRLF line terminators Hash3834e1b9e65ca954b7479464ea1e5118 437df45dbf59c3a3414236f44e3bcd5045bfe314 fc33c6b2c79aafa930e841962ae3c25bf8f56cbc20ec48fc2b0ddd0aa6ee23b6
GET /v3/smtp.js HTTP/1.1
Host: smtpjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 15 Mar 2024 10:08:42 GMT
accept-ranges: bytes
etag: "b65c4ac2c076da1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Sat, 20 Apr 2024 16:30:35 GMT
content-length: 871
X-Firefox-Spdy: h2
|
|
| appsweb-server.pages.dev/wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png | 188.114.97.1 | 200 OK | 93 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash3b090704566275aaddc163286674d259 b34308c27d71a60099928a295cc325b693ee3255 9843c186d2321c9f833fbecbf153a22b1e7644960573f5e8b95868cd3401a61f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/vision-928292fe642172a18e62feb5eaa2d639.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 92570
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2c064a24d22ec3cb1f62c2624c167c3c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfzc5qHYLmua7lTSVFR7p4h%2F7PNTKAZHx1uQmF8r9IfNiTgQF3%2FzY3pt%2FWJUN9vMqzC3qNtHgztWKRLufwnoYx%2FgRX9QVFA6UJROAwZizzyKc7DN3aATBbNvZEzHJ6USbjBwwhQGrGT%2Fwys%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf4c569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png | 188.114.97.1 | 200 OK | 6.6 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 320 x 320, 8-bit colormap, non-interlaced Hashd01b142caf1f55bb8f9130b14401bdf6 af0440ebd1b74e7a567b261a917cd25f51a69622 ac4dd9c4c99afaa2c2ef08c401feeaebf3a0ceac2e6cc01289daa67b5ba9ef62
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/unstoppable-0d3474dcd7572ac2080b0f4ce632dfac.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 6558
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "8852bfabe3cc3ce9c362b68d02425020"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3idhUlh%2Fcgfv8FqvClHeAHIKW%2BGpQGgOCy%2FdBuKshwdzBgdtoFUwS%2Bt450r8U0N2fCoQoS0ZXjysjnrkkvbmIXzfIO%2Bp%2BH3LamT8Ip4nKBPj58PRUsQIH5ZV2%2FtwperO51w7wHpfIT5o3cQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf55569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 600 x 600, 8-bit colormap, non-interlaced Hash3422f769d0333523b8de1783c120dde2 1340bbb5612f944c0aa91b077b917d3621251518 71e8e7be4ca33f76c3fdcc4e901b5122c803a38839d991bf85909931ae3263df
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/xdc-9a98bff95dffc41869b8e77912a6cc54.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 12100
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e37cfdc50461215094fad951c85c9614"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FgqBCuv1J2tjleWrk2RZSYlcVdqI8zFv0fq0sJwtJUFbT4Zxh9f7hauvPk31TKpigDBeHV4U1almH5b5BhQ2yZfs03k1mB0Q%2Bg6Cox9Be1R%2F404IcShCFrVrgeLN3IPU41u1kxV8%2FyMS8Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850caf53569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png | 188.114.97.1 | 200 OK | 26 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 900 x 900, 8-bit colormap, non-interlaced Hash73de0559b186341586412385e3fd1443 3aa91ddd56d71047ad43cff928f1ee17c074e50a 7f926b400154c1118a0cf47cf0b18ccf973613336419466d61d4f4c3a1cc3617
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/keyringpro-830b2c0ee1db401dd64c2899eaf2adb3.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 25892
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3cf83f4d56bba341288c869488d47305"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gq%2FD5%2FaWOfghV%2B3V0ZG7V1vp1yRVlAymRrFsgkTQOuI5IxtaDKcxmkWjkxBNUIMjOk9r9ZnVmfBCfsPGnO7Rf%2FarFZI8E3CPVhrGhGuj88RNSUa3FKc0gdAMqw%2F6Je0GWIFmOvei8f9bAao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cbf6a569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png | 188.114.97.1 | 200 OK | 123 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1800 x 1800, 8-bit colormap, non-interlaced Size123 kB (123157 bytes) Hash5615862ea7831a623e802c7e0e0aa088 dfe853ca3a4d56c25e88eef043cb8033dd614199 b8301578f01f78cb9b3a609ac8fb0b920e68422115476c9dfa3ce15879ad5625
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/atomic-4c02d2b33cf091fd83c7a49819394e41.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 123157
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d19bb5729c7351954c946dd45fe65bea"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BorHcplQcGBczh29r1yLfYL789uZdCIv6fz9ckgDg5WiSfx%2F%2BqC1rHNxP92XO1rLWhNqwobz9u%2BPTCRmrmusMLe5%2BvqPC%2BgWtuQ8wv0AkgipjVpaHATK6slg3uk9oTgdBKAfHkfxH7Lq6sU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850c8f18569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/js1.js | 188.114.97.1 | 200 OK | 1.5 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js1.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
Hash15e1fdc42e78658a13568f7b1e35fc77 20652fe69d5d902bf95f91582087ba61d705666c e7d7ef7e68dc4480c2437b7a20a9f93dd5cdc5c3287cb3e157a0505812b3abcd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js1.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2231e5c3b0667bb9768263f4eb183c71"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d3kOTPeflTgJNngmaYtijjME898nGhgIuQvSrrvXzk%2FIi6dWIgBYotI3OAl6OALjDMyZl8TjRhH%2BX3i44ZVl5Puy%2ByNnSQNAQ9ZmxINUYhrY57kW6%2BMxEJdnGeGfzZa%2FJb2O1eIvVOjhgKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf94569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2 IP216.58.207.227:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18076, version 1.0 Hashad513518b8de790106aefb37f7304835 c0f06121be08d11af3437bab4886a700c3c15f56 951a3b8ec1c6a0ae2767a3bb90ba6995397c5d13bd7ff79ea0bc87529b8024ea
GET /s/dmsans/v6/rP2Hp2ywxg089UriCZOIHQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:54:31 GMT
expires: Wed, 16 Apr 2025 09:54:31 GMT
cache-control: public, max-age=31536000
age: 369364
last-modified: Thu, 05 Nov 2020 22:00:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| appsweb-server.pages.dev/wallet/js/js2.js | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js/js2.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (342) Hash4d13047b1374a60684455ac688113669 68a84415438d070c3646ae61061b432f3ca87927 de176b77d7d458466ac0ac010cac961b3903341da7a35ad4ab5673f270a3c284
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js/js2.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"eff735b4a642f92fdb97f8ba0406ca96"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zY5wWmt%2BflgbxTlgwif6AzkJ0BQX86lXhGMFVROQl5v%2BxKhsOFWjC92FwUSKWpBsv%2BGHwjTmIYlaAPlHvO2YjHk%2FyyAVKOd5twV0CUpjCyf%2FQIHxk4j1TkYyblXT5HBTgD%2Bk1nBNS%2BK3uaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf93569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2 IP216.58.207.227:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18244, version 1.0 Hash171ccc885c8deb88a0f3b55096584514 508db0c1eaca7d0d4af54598d17e57467a8d503b a8e5a0c39f7371f633203c6e77de59b3fff273bc2c1a5df9c1356e6dc24ad92d
GET /s/dmsans/v6/rP2Cp2ywxg089UriASitCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 09:46:34 GMT
expires: Wed, 16 Apr 2025 09:46:34 GMT
cache-control: public, max-age=31536000
age: 369841
last-modified: Thu, 05 Nov 2020 22:00:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2 IP216.58.207.227:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18296, version 1.0 Hashfde3d0124cb7ec9415ce2b8ebaf89118 ae93664d7ab4ef117c6171cd6c0ce13d29637b72 8d3411c961b332008c61452f483ada3da4cd0fd06cc264c7f2facfb01bc4b1d5
GET /s/dmsans/v6/rP2Cp2ywxg089UriAWCrCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18296
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:16:22 GMT
expires: Fri, 18 Apr 2025 03:16:22 GMT
cache-control: public, max-age=31536000
age: 220453
last-modified: Thu, 05 Nov 2020 22:00:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| appsweb-server.pages.dev/wallet/js/js1.js | 188.114.97.1 | 200 OK | 1.5 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js/js1.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
Hash15e1fdc42e78658a13568f7b1e35fc77 20652fe69d5d902bf95f91582087ba61d705666c e7d7ef7e68dc4480c2437b7a20a9f93dd5cdc5c3287cb3e157a0505812b3abcd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js/js1.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2231e5c3b0667bb9768263f4eb183c71"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VZWT9ek4%2FaulynB8J7kGx9bS0sPEtCxuNJ0z8AMwzYmU6JW%2FgSvN3CCRP08B9OdzHQoNroyJiPoH%2FeGEo73D2fCbfuYeprP7WwW92daAH4AAu4RnYrt6ABL7c%2BWwePxSp4NFDgQO4Lgi48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf90569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/blockchain-logo.png | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/blockchain-logo.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash335e0da6439d61d0f94a913a67707c71 c45fb1d7a6a6fd7be7928f565910aa6e913f5690 7f8ca27957b9c11eb5258bc322ccfe39c1fd540886f003650c228b20613a4574
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/blockchain-logo.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 11781
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7edce981bf2ca6edd2028d3da39afa47"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYtbqL%2BBf3oZrA%2FAS%2F2H%2BsDrD28nSE1e3SDtYhsuU4cHMoiAj3Kc0r3qRtpGiSckrKeMINWu%2FyAnE%2BqPsetv2XcdD6vVcCItHCTn8q1oI0MalUFxfjHA7bWnr6d5UA4UVKXZHNhgwHx9dHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf72569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png | 188.114.97.1 | 200 OK | 26 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hashe8e7b60e78fc0239336f5188667d0281 216fb719dc1e60ddf159f58af7a8f27bebdbfe85 8b2480d2c4cfbec760ef72c539d35415d27d11ab0d8bc719bdb7184b86b4e05f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/aktionariat-c5784b26234a389632687a36d2fb3258.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 25942
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "eece775a4f5adea57e34b4cf98fec694"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gieewZ0dt26W665LCxq2opxgho1DJULWsC1%2FwvNN20RI%2FFwKB7tXFIcXLLGzgooOf51Q6gPZfKmrywSk0VM7mbIPxzeB3A%2FtR4%2Flna%2FmO9KY0li7OWzwa9nVDc5XuVMqoqfIIKfnagOyPgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf74569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/js/mine.js | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js/mine.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
Hash457e9c039158f3a3ae3638115ba70935 9f4bb4fd77facbaef765c268eb9ce6f6677a5ff7 662bb9c9d16848a2cd955188415e6a9ef75fbd44a3711e2fddd72d6482a6b147
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js/mine.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a8ef0938a7a9559b68b747503c14d685"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYbgz%2FmmV0F9m9pMHGskGOSY2whm4k8na0%2FYnC3Rh%2F810MYguoYrb6YkNJfMflHOeSqrZ1g29lq5IAgYvO8hLdOZvRTYm2zHFV2WkM3gjbxJoppFG81gk2Hq2mFUPa5GoiQwVQLo8J08n0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf85569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/coinbase.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/coinbase.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash8fc1b156c624ee737969728f3640bbaf e8f8084084e5dde2c46c2874bbe6c334bcdb1224 bcf95dc014e01231fed00deb5f23dc0ca84fe24775ae40c105870adf29442674
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/coinbase.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 3909
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "637bbe81d6be1d3eafa70c42fbd77706"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKGU73MiOuqXNm23OK5wk5XwceMRmsmvdoqvaPnfp4Z00YvBrTk4%2BiS4qpPuyIBKYuaQJiaAXTAvI9WsktnVedai8Had0ZLxOVHsMy9B%2BpqKcF2P25dGhpHCQmAe5g2gyQxZCzVfSvoloWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850ccf78569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/static/images.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/static/images.png IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeHTML document, ASCII text, with very long lines (331) Hash4c1920da7e5d9180796a7cbd50c058fc ebc6858e8987cdb52fd011a29a6914f65e753a3e 69e48d9db7c27991e0dce1a56f246fec93363cc286c71e6160282a31bf05e867
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/static/images.png HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: image/png
content-length: 3082
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e83123d19411cc1895ab1e692567c409"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RWZKoYrpfCIM7TDrhu3JxvrZJEdWTkIZWu7Irva8GZCOjghT8kxpv3cZ7PS%2FiY1spu%2BWPIO8cbJ2WjTVRYfm4oXuQgVTsD8WdUB%2BxTDQgsRPgC3RBjdU05EiI0vSdLIKMkWDo%2F6lH6zMsn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877685108b76569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=b_Nexhha7bgdPzoO_CaMvHDKbcawh3w-cGjnv7msevcE_GPVB45unfQkbQMZpBwIxAOC5Zg4SefHtYhJVDCvkWYXEjTe_fq58g7RXq9PSr3Dc-0YQvU4L16oOK3UV4we
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Sat, 20 Apr 2024 16:30:13 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 40
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.connectwallectsonline.com/page-data/apps/page-data.json | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/page-data/apps/page-data.json IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /page-data/apps/page-data.json HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.connectwallectsonline.com/commons-728581910d6e685fb39c.js | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/commons-728581910d6e685fb39c.js IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /commons-728581910d6e685fb39c.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| appsweb-server.pages.dev/wallet/js/app.min.js | 188.114.97.1 | 200 OK | 536 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js/app.min.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
Size536 kB (536373 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js/app.min.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fbde0dd0853a524bd864bcbb0a4e3d64"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YuKYPoDWUKIodxQreHEjoHy9LEUld22vMhGmODTclqjkkFFOCCqRsU7mSdp78phuc4LRCYDuA%2Fl8%2Bg5%2FGN6g06TbgTbiyPQ5SB6XCY5rqVPWGN9eJZN3orobeHSTakvroeafWz9Q7aqkow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf8b569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.connectwallectsonline.com/app-2b5a75f35e7d5a1e67ad.js | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/app-2b5a75f35e7d5a1e67ad.js IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /app-2b5a75f35e7d5a1e67ad.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.connectwallectsonline.com/page-data/app-data.json | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/page-data/app-data.json IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /page-data/app-data.json HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
Origin: https://appsweb-server.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.connectwallectsonline.com/static/otherssss.jpg | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/static/otherssss.jpg IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /static/otherssss.jpg HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.connectwallectsonline.com/webpack-runtime-08a0e953018334063ddd.js | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/webpack-runtime-08a0e953018334063ddd.js IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /webpack-runtime-08a0e953018334063ddd.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.connectwallectsonline.com/framework-8e528b732ab2eaadb7b7.js | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/framework-8e528b732ab2eaadb7b7.js IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /framework-8e528b732ab2eaadb7b7.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| appsweb-server.pages.dev/wallet/inputs | 188.114.97.1 | 200 OK | 525 kB |
URL User Request GET HTTP/2appsweb-server.pages.dev/wallet/inputs IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
Size525 kB (524817 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Crypto/Wallet | PhishTank | phishing | Other | Quad9 DNS | malicious | Sinkholed |
GET /wallet/inputs HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 20 Apr 2024 16:30:34 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1c9433338d7f22c53264d0cf91d1f698"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UfV%2F58Xb%2Fnj%2BwLG9TZbOYmFgtIUvYcxb7fVd88EExy2SpVYkXhfsYCzwxghPcxw0OBcMjrCmwkuIzdMY6%2F3%2BCU5ByLbMDR0EsxgnbfcqGao2JbKAF%2Btbw0lTmzC8AGXC2TGLwxGAVR8bAzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 877685095c7756b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.connectwallectsonline.com/component---src-pages-apps-tsx-50d212c53780f4e2ed64.js | 0.0.0.0 | | 0 B |
URL GET www.connectwallectsonline.com/component---src-pages-apps-tsx-50d212c53780f4e2ed64.js IP0.0.0.0:0
Requested byhttps://appsweb-server.pages.dev/wallet/inputs
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /component---src-pages-apps-tsx-50d212c53780f4e2ed64.js HTTP/1.1
Host: www.connectwallectsonline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| appsweb-server.pages.dev/wallet/js/form-submission-handler.js | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js/form-submission-handler.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (4002), with no line terminators Hash53e27959e64975a35aaa9f039b48e9fc 240fce62d18c9353f54a52627ad0eb918e0adda3 a4385aab7a2b12e23b2e0d5ee7b3feb3dde27f6436fd2425f92e7eaf9862b90b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js/form-submission-handler.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1a2398e59f8a53b7548a0f5349059312"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHSp6sSGsmLsEpwKVKVW%2Bfqk4Z%2FUsFze4pGxpfOpjiwODna8GFoYmuw%2BpfXNgnvvXdXo%2FxssbBDhPyZxpBc9EwbBic2J5EHKhR5MXzJG5w6NAEvByRxbQp4mLs0cL45DE9mnhM8hsfB3BF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf89569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| appsweb-server.pages.dev/wallet/js2w.js | 188.114.97.1 | 200 OK | 5.0 kB |
URL GET HTTP/3appsweb-server.pages.dev/wallet/js2w.js IP188.114.97.1:443
Requested byhttps://appsweb-server.pages.dev/wallet/inputs CertificateIssuerLet's Encrypt Subjectappsweb-server.pages.dev Fingerprint2D:7F:90:5B:2A:FF:B8:BE:43:B7:7C:3B:D2:87:10:F0:F9:6D:D1:B1 ValidityMon, 11 Mar 2024 17:06:21 GMT - Sun, 09 Jun 2024 17:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (5237), with no line terminators Hasha4f3682f91e05055cd198823b5127cfc 85b66bb9435175156d938e8bae9553f0b148deec c10227c28bc4446faa129644b5420861ed4864a85aa3c050af088fa6f49aeeec
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wallet/js2w.js HTTP/1.1
Host: appsweb-server.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appsweb-server.pages.dev/wallet/inputs
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 20 Apr 2024 16:30:35 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"eff735b4a642f92fdb97f8ba0406ca96"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2BIe291GWqc5b9Ardd84u2SuSsTznHWV%2FX5teU1ItqqMUjypMXMTS8IRBQgcIx%2Bi45nEPumG%2F5NEcN9WEBTOrW8AersXIrixXCpWYlrjZIezpm1m3pgP%2Bk0aogpfxH%2Fju3BSfT3%2Fn19lqdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8776850cdf96569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|