{"report_id":"001cb6a7-2e14-4136-b812-409715ffc50b","version":0,"status":"done","tags":[],"date":"2026-10-09T17:27:27Z","url":{"schema":"http","addr":"deduct-trustwallet.com/","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"172.67.153.244","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"deduct-trustwallet.com/app/","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"title":"StableX","dom":{"size":2089,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (693)","md5":"b70d3b7ef97bba2346c7f5697eb114ac","sha1":"742424b67f77fcbfb2980c42c38d9a568bcf63d6","sha256":"16df13f1c698efa120842879320a7ab7c866d387bc9da6a30165f75c3c9aca0a","sha512":"6800f7f687438680b56fedd91011722da8617adb67ae5dd87173bb4f2e512d66c129913f9a4626d89acc30484b58fa4113c395bba72927efec73244732902d77","ssdeep":"","tlshash":"7441531256b7b8137123c4d60ae2ae0429cdc10bd201cc18bffc369d8fa8dc26c92b9d","dom_hash":"domhash802bc07f79d69fe9bd20bca4b6bd148b","first_seen":"2026-10-09T17:21:50.38678Z","last_seen":"2026-10-09T17:27:29.890651Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"deduct-trustwallet.com/","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"172.67.153.244","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:27:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"deduct-trustwallet.com","ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-08","domain_rank":0,"first_seen":"2026-10-09T17:21:46.007897Z","last_seen":"2026-10-09T17:21:46.007897Z","alert_count":6,"request_count":6,"received_data":1691996,"sent_data":2996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-10-08T16:02:24.615802Z","alert_count":0,"request_count":1,"received_data":120062,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"deduct-trustwallet.com/app/assets/index-BuyYH3TU.js","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b76b0c329561690c78b31a8201057ba","sha1":"b2802278f57a2aa56ebb3bb92be3bac1e305ce4c","sha256":"2c38242f5b00ceb359a6876340564b164d1cd2e23cbd12e77ad446dfd98cd52f","sha512":"f60e5e349d28eb69986bfe6f6e675c5ab3342422427222cd1019773f7157fe184e967be84183e7bb63234e6eac3c17b5c79bd3df696ff837213c2590df4e009d","ssdeep":"3072:t1mzmIMJ3IlkKxwkYstgvDNZ7+ahU91CFq/fBhy:CmbSfx5Yso4y","tlshash":"82241be8717ebb566eb345e2109f1507726d28336c0c4c70e121eda936b844661bbfee","size":217909,"data":"","first_seen":"2026-10-09T17:21:50.39539Z","last_seen":"2026-10-09T17:27:29.896405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca4a8297c04185dcabadf889be3e89f9","sha1":"4b834315fb35f05b82e744159c6ad18d6e29d513","sha256":"124bdff7ba3fe86c8ba5143467afec21e020405e74abdb92cfdda6c0ee3b5908","sha512":"a2a2e6820fe904d6c5a86f50c5947c3782398d3e670b2a0a4f1bd47689b942eb2a4969e7063c46be13b426dc60615f97bce41ec4c143baa2e7a51358c318bead","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYlb7p/xHK8IT:TpTpRdfcKFy7Rxgv","tlshash":"07c33d4d6cb3612285b3b1bf8b5f9251b2719883305def20794d5b606f80e7c53eaad8","size":119731,"data":"","first_seen":"2026-10-06T10:22:47.792071Z","last_seen":"2026-10-11T12:10:42.977863Z","times_seen":1122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher16.process8//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher16.process8//obj22 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":769,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Background color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":825,"column_number":15},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":769,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Background color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":825,"column_number":15},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"deduct-trustwallet.com/landing-stablex/icon.png","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deduct-trustwallet.com/app/","date":"2026-10-09T17:26:49.158Z","timestamp":1791566809158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET /landing-stablex/icon.png HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://deduct-trustwallet.com/app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:26:49 GMT\r\netag: \"6ac7c723-1635e8\"\r\nlast-modified: Thu, 08 Oct 2026 16:38:59 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 335\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVjddppXtfkqck5mvgFaUnHtVABn1N1Y2IRnxz8Fs6ZGz4eCru4iqoyCwJOASihZM%2F36mhURHVZ0jCfGjPqD85cMnUnNfeMeQxfLtFwPQw9BUXokf%2B9kcc0whyWiwidrdTmgHOUG2kM4\"}]}\r\ncf-ray: a47f17ad3ac3568e-OSL\r\ncontent-length: 1455592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1455592,"size_decoded":1456484,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"9832f487380c3f4a59a22716d66555fb","sha1":"dc470273efec557ccf859d63b8482cb2f17faa30","sha256":"845114c73aba1244fabdb4a1333b8d1d5e845e07f4374e7752a4dbea9f736f4e","sha512":"49605edc0c911cca7d0de9823097357b459531833564c758335e0f5076fc62db451b78fb2f0314d52ce668c294438857c989acc1049250692cbb3c026727162e","ssdeep":"24576:Q6hn4g/db14Ont01B5gfky+jbTGcXhl2SWKmJ/0dbR:xWQ28v+j1X4Kk0dF","tlshash":"45253355993bfac3f946253bc534b35538f222673050242fe786065ad2b312efa4e93e","first_seen":"2026-10-09T17:21:50.398583Z","last_seen":"2026-10-09T17:27:29.891902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deduct-trustwallet.com/favicon.ico","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deduct-trustwallet.com/app/","date":"2026-10-09T17:26:49.366Z","timestamp":1791566809366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://deduct-trustwallet.com/app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=86400\r\ncontent-type: image/png\r\ndate: Fri, 09 Oct 2026 17:26:49 GMT\r\netag: \"6ac7c723-a76\"\r\nlast-modified: Thu, 08 Oct 2026 16:38:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aupA0pdgk5G%2BPSIaGBJ%2Frb2n2EfSsbhmwYlNVKfS76K6LnhtvBKxEsW9D7M7jB4kf5ri6%2FSouOkCSXq1W8MjZgfKzA2OzNs3BDzPGSCo%2BF9M5dJ96oWj4e%2FxCrn3TMTvpb2eqHCmBRPx\"}]}\r\ncf-ray: a47f17ae8af6568e-OSL\r\ncontent-length: 2678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2678,"size_decoded":3508,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"56b299ec42515cf26e97a2ee05041106","sha1":"3aee7c71c1afd2cca576c8c82253299c7f0b35f1","sha256":"a3cccd69a016beea6c821161d8cc668d8d86e409e9a9cc8c7740d5a261d36fb9","sha512":"04e60a14ecba78fc4ac117ea2b7708baef159329c2f5b6e90dc1e51d6d176d054b6beb542863d20bf3623cad31cb11d795c7232b7b9f789913b4d035a1c296ba","ssdeep":"","tlshash":"c25119e00bdcdd66ff20b11b827acd7462f3a0aa18156b14f2d0bf75398c8a669d6411","first_seen":"2026-10-09T17:21:50.399783Z","last_seen":"2026-10-09T17:27:29.893387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deduct-trustwallet.com/","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:26:47.618Z","timestamp":1791566807618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: text/html\r\ndate: Fri, 09 Oct 2026 17:26:48 GMT\r\nlocation: /app/\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYbSmyTudlav374Hw6DQTSdxcRgsP5bKQMHrzIxjISe3w%2Botfud%2Bp7kDScjxp8NUCSntCsPcjfmE3RtCMlxIENQbb0eAorDTkNvBu5QWZpr%2B9N8JgR2bolQaVzdYbAGp1ZwPsSv6tOd2\"}]}\r\npriority: u=0,i\r\ncf-ray: a47f17a3c90c568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T12:43:34.847605Z","times_seen":19027197,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":9,"connect":23,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deduct-trustwallet.com/app/","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:26:48.328Z","timestamp":1791566808328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptxO%2BBDFlI4uHFa67H8LdfkuNPT%2FOqEWOSoI%2Blusa8Eybc17mMyoE8KvUhCXbP7ykqJiuJCXAdtYSKgyR4m0h22PPoTxEgropXOHclANdbrBTQ%2Bd5tRM0rq4v8iGck3YhgOB3zZhXlej\"}]}\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors *; base-uri 'self'; form-action 'self';\r\ncontent-type: text/html\r\ndate: Fri, 09 Oct 2026 17:26:48 GMT\r\npriority: u=0,i\r\nlast-modified: Thu, 08 Oct 2026 16:36:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f17a809d3568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1605,"size_decoded":1789,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"3866b4650e421bce5f876e0b79a22dfc","sha1":"82b651e4f11ead843cdc844880f30b0c7add2e7c","sha256":"426df6721d2b4319f6822ff0bee042a25f3228659344a4e3826414018f87441b","sha512":"420572d547fc83f4ec0c89206f3ec0eb57f983070c262faf40782ea0f4bc4154a9d5857bbf6165f328bc0257ee96d11ae4afdef3a26c0c3084d4320b5b28cfa8","ssdeep":"","tlshash":"be311105d6f3a6467221c0a60fa2fa041b55e183d246cd587fec35a9cf489c2dce7bac","first_seen":"2026-10-09T17:21:50.392282Z","last_seen":"2026-10-09T17:27:29.89492Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deduct-trustwallet.com/app/","date":"2026-10-09T17:26:49.145Z","timestamp":1791566809145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://deduct-trustwallet.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 09 Oct 2026 17:26:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:27:17 GMT\r\netag: W/\"6ac4bef5-1d3b3\"\r\nexpires: Tue, 13 Oct 2026 17:26:49 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119731,"size_decoded":24966,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"ca4a8297c04185dcabadf889be3e89f9","sha1":"4b834315fb35f05b82e744159c6ad18d6e29d513","sha256":"124bdff7ba3fe86c8ba5143467afec21e020405e74abdb92cfdda6c0ee3b5908","sha512":"a2a2e6820fe904d6c5a86f50c5947c3782398d3e670b2a0a4f1bd47689b942eb2a4969e7063c46be13b426dc60615f97bce41ec4c143baa2e7a51358c318bead","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYlb7p/xHK8IT:TpTpRdfcKFy7Rxgv","tlshash":"07c33d4d6cb3612285b3b1bf8b5f9251b2719883305def20794d5b606f80e7c53eaad8","first_seen":"2026-10-06T10:22:47.792071Z","last_seen":"2026-10-11T12:10:42.977863Z","times_seen":1122,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":43,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deduct-trustwallet.com/app/assets/index-BuyYH3TU.js","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deduct-trustwallet.com/app/","date":"2026-10-09T17:26:49.148Z","timestamp":1791566809148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET /app/assets/index-BuyYH3TU.js HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://deduct-trustwallet.com/app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors *; base-uri 'self'; form-action 'self';\r\ncontent-type: application/javascript\r\ndate: Fri, 09 Oct 2026 17:26:49 GMT\r\netag: \"6ac7c6a8-35335-gzip\"\r\nlast-modified: Thu, 08 Oct 2026 16:36:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nage: 336\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8R3dUSW5K0%2FzSKjSlz4%2F7l0vt1xvA2XbteqMTXAR8X3IffUEin6GJJkuT7t%2BV3%2BoHsnJU%2B6FQV3LEfgOilUt%2Fomlxqhvz%2FRbAu%2B3azjhLmGAoqI4V%2FxUZeRPsCL9hgY4rzUV88YF0AtS\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47f17ad2ac0568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217909,"size_decoded":72378,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41540)","md5":"6b76b0c329561690c78b31a8201057ba","sha1":"b2802278f57a2aa56ebb3bb92be3bac1e305ce4c","sha256":"2c38242f5b00ceb359a6876340564b164d1cd2e23cbd12e77ad446dfd98cd52f","sha512":"f60e5e349d28eb69986bfe6f6e675c5ab3342422427222cd1019773f7157fe184e967be84183e7bb63234e6eac3c17b5c79bd3df696ff837213c2590df4e009d","ssdeep":"3072:t1mzmIMJ3IlkKxwkYstgvDNZ7+ahU91CFq/fBhy:CmbSfx5Yso4y","tlshash":"82241be8717ebb566eb345e2109f1507726d28336c0c4c70e121eda936b844661bbfee","first_seen":"2026-10-09T17:21:50.39539Z","last_seen":"2026-10-09T17:27:29.896405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deduct-trustwallet.com/app/assets/index-CE7rozHn.css","fqdn":"deduct-trustwallet.com","domain":"deduct-trustwallet.com","tld":"com"},"ip":{"addr":"104.21.12.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deduct-trustwallet.com/app/","date":"2026-10-09T17:26:49.149Z","timestamp":1791566809149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deduct-trustwallet.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:44:16 GMT","end":"Wed, 06 Jan 2027 11:44:15 GMT"},"fingerprint":{"sha1":"ED:A3:29:8B:9C:A6:26:00:42:E7:F8:82:F3:3F:48:95:EA:AD:F1:8F","sha256":"A0:B0:B9:4F:4B:48:22:BC:71:D8:6B:44:79:D0:E2:54:28:3E:AF:0D:75:EF:46:D2:85:93:28:17:64:41:D0:40"}}},"request":{"raw":"GET /app/assets/index-CE7rozHn.css HTTP/1.1\r\nHost: deduct-trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://deduct-trustwallet.com/app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors *; base-uri 'self'; form-action 'self';\r\ncontent-type: text/css\r\ndate: Fri, 09 Oct 2026 17:26:49 GMT\r\netag: \"6ac7c6a8-2113-gzip\"\r\nlast-modified: Thu, 08 Oct 2026 16:36:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\nage: 335\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6I0Rgl48YVbuSL5NHCKwk6G0lWZKCvXoPQJjC%2BhgM3umeb9sqyp%2FWVp0EnpJuooerfPin4dvRwp7Hbti50UrE6ytI83IuMe1E0eQzNODj5nuKLWWJHdagLLUcUf%2FUVhY1zbVuVZZdbvy\"}]}\r\ncf-ray: a47f17ad2ac1568e-OSL\r\ncontent-length: 2601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8467,"size_decoded":3739,"mime_type":"text/css","magic":"ASCII text, with very long lines (8466)","md5":"94b07a786758920cb2a6165cc60f8cd7","sha1":"11e7531a240666eaa00462604153652906544c22","sha256":"4e959243ba2fae0647c4abb860bd33d239320a61e8d64774e9a423ff5a70881d","sha512":"bde36d3deac6fed5824d6e865507a5bda212d93a5b4151abfc3015493c8069a31a61955fac172a5d8bb9559ce6578a5e42bcad8beeb45ed7928a0f4349daba91","ssdeep":"96:etaVbSnoqLMhpxkYxHnKG47otXLp9CbdYdwdrMCmWLvVp1jrNsaxjPYQZfHbmo:e0bSnxLMfxkqHO7QjCMqhpfqo","tlshash":"ee0283b171207638fe6bd98667c459de3124ba63e433c7ede8439164c4cb2f35b66a01","first_seen":"2026-10-09T17:21:50.397003Z","last_seen":"2026-10-09T17:27:29.897149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"deduct-trustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}