{"report_id":"005422ee-ce69-45ce-82c6-7ef6fce75621","version":0,"status":"done","tags":[],"date":"2026-08-07T08:55:35Z","url":{"schema":"http","addr":"trustchain.cards/","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"trustchain.cards/","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"title":"Spend your crypto anywhere · TrustChain","dom":{"size":41196,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28898)","md5":"0f3c36af5a3b9c15cc2e853663b9aacc","sha1":"a8b4e02a1756f4a29cdcbaf55f7487e56419949b","sha256":"e50e1c2bec922e7849a3e71000a8b338ebbb2ffa939fa1e91626de79a26eeb51","sha512":"372a6df6db8bcbbe792f7a07dbc617699782ce53bf007b36ac34b0fb68b6c210110889ba0f068ef47c8289c620ac75b76ad6d4ffb6a85201627c1301e3ff4f15","ssdeep":"768:TQo4o9SD3sjpNWN3N3AZBXO0QfHJWlJH4Q4TXnpNja3OVuo8eV8f:T7FNWN3N3AZBeHHJWl94zXpZa3OVuon8","tlshash":"67035161b175642e33330bc8629b7766b0b9d30cdac92494a7b847b44feac53ba1711f","dom_hash":"domhash140dac5fb04b107a97127cefbe8daa00","first_seen":"2026-08-07T08:42:51.340102Z","last_seen":"2026-08-07T08:55:37.283053Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustchain.cards/","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T08:55:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"api.trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustchain.cards","ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T08:42:45.994394Z","last_seen":"2026-08-07T08:42:45.994394Z","alert_count":17,"request_count":17,"received_data":1332197,"sent_data":8304,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.trustchain.cards","ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T08:42:45.995503Z","last_seen":"2026-08-07T08:42:45.995503Z","alert_count":3,"request_count":3,"received_data":4120,"sent_data":1497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustchain.cards/assets/walletConnectDiagnostics-VuOoHRUZ.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"26addf8a2cf29435d369f8438a244648","sha1":"3ce067c96a879c01eecb8af1d199c794de73d2e3","sha256":"ffa72f05e33d37b1689cfac18fb92f8351a28ca7471312f80038bfe01843ab06","sha512":"c9c6c3a5d11313f5aac2a5cd9ca255144f8dc40258e542b974158039c89ab5ddd93e5fd3ef0d97ea2faac6e0b7d83484c31ff0bf1ded3bb93a68295080bf7cac","ssdeep":"96:090wsNnpLBnuZ0YNzOC0agI9m1kOE1ftHnEZ2/v4DaG9k68AQkG9:0fNPQbELf4Daz68AzG9","tlshash":"5ec183c9bbc0706942b7d26581b71108e33585912c1f5008b33459fa76b8f9ec7aaf9f","size":5875,"data":"","first_seen":"2026-08-07T08:42:51.351113Z","last_seen":"2026-08-07T08:55:37.285496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/remoteDiagnostics-CNEu1TQ0.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"821a435b8c9f7a1b2fd3cf12209c69e9","sha1":"21c80e4e5536870fd422931bced25e10781e4d6c","sha256":"ebfc3f667edd0f21b8984674a9f94fd7803f641af194971ddbcc1814d8553878","sha512":"c91b13c6adb5cce0f680a982edbf2121817b95aca37cb4efb89a4dd07a5e6d8ae05f5f5d7d8c0b06c311485b57cf9ffc5042f90bd580e52a76a03b9c696a662b","ssdeep":"","tlshash":"312111da3582305513eb5377526e1180e233d9b6f98e9154a2d859602da683fc2b3f8d","size":1376,"data":"","first_seen":"2026-08-07T08:42:51.344792Z","last_seen":"2026-08-07T08:55:37.294309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/walletPresentation-mV7qJY60.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a98b5dda4ff4483878d80dfcbae8c8","sha1":"6e9711f12bd5e7eae96394fda5f8732cf01139cc","sha256":"1112526acd1f5a4647b3fcfcc08164dafe83169c598ab1314e22c6203a95ce32","sha512":"71146ada2dd712612da5206e990ccb463167c5c599bcd58e2c62049b57522ca1ca80b8a925bc93f0b4c91d356fc09695545a1c03a2b0bdf5b96cce05bb3aa4df","ssdeep":"","tlshash":"c8012b249614221167c307a85c13c4f9d3e960e1cb9459f88bc1c1b89b2a3e2e9effc7","size":665,"data":"","first_seen":"2026-08-07T08:42:51.345719Z","last_seen":"2026-08-07T08:55:37.286473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/supportedNetworks-fy0bpwSr.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"34669190b9e8e8c9009a0bea8ffb18fb","sha1":"306bcc36bf5e41252c88241228f9fff969d4189d","sha256":"b394b01abe049d18ffbc8e49eb9e836f8efbd6b920e58d56f5649566e97b4d7a","sha512":"a18189b600cafc59ec54c1f90f413a34e78f3ede6838a9f781648d368dcc3d4594707a082213b6bfaa18f03b9a5e6eca00c1b021c8c6b22d7db12f3fb26e3879","ssdeep":"","tlshash":"582111e7b0c7f4fc123b50c584eeb4aff32ea205d4680018d94959a956761fb9355ecc","size":1301,"data":"","first_seen":"2026-08-07T08:42:51.35688Z","last_seen":"2026-08-07T08:55:37.28947Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/useAuth-BvUADsHC.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba0bb767ae5db05786902cd7c162b7d7","sha1":"20d00c22f5c6d1a6047965963c42531045331c39","sha256":"a284fc1147c4a57d40583e376ab462db16af0548847fde82fb0ed429d24a5749","sha512":"cd7806594c8759c31743e7d585ef0a1d029c1dbeb31f4daaef2d6224027576baf3afe8288c52cbbf435f1415227baa199ee297c9b515596b8ec12408242f8153","ssdeep":"1536:Y1Cl7s4NJ6dK1m8wTC4BP0bLqQFjCdeB3Y1ixN7mtzCU06QZ:VBNJ6dK1m8wTHGLFjCdeB3Y1ixYtzClZ","tlshash":"69531aea72c5b1ed835b45a9002f801af37e9094780e4538f66ce8f539718d4e367fa9","size":65571,"data":"","first_seen":"2026-08-07T08:42:51.350117Z","last_seen":"2026-08-07T08:55:37.288698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/wallet-3TygQoRw.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa76d18c4a417645f5ba6407ea4664e","sha1":"78649390dda6e9c055c27026fe7a0053cd8db312","sha256":"7b5652aa9060856c517aac9ed63c936fdce2e977a342524316fe6c3343a85663","sha512":"e312f40df238e281fb62fa6a523e3dff913f81ce7ce7facd23c41f13369bcd96bb319ebd23f6d2d63d59fc12cd20c8f01a5a6a59222556d2ae26aa3db73cbd63","ssdeep":"1536:rVPFNg46USXFuQ5M1ulXb/6VIoo8E/tIkFD4fmqBi:rVP/g4iD52fEF0fmqU","tlshash":"c133fad573e0f6a1e72b0264106b441df33d4c90981e0534f6f1e99a3a30a79abb7f5a","size":53329,"data":"","first_seen":"2026-08-07T08:42:51.352203Z","last_seen":"2026-08-07T08:55:37.297572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/index-C19jjaAi.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"342d34c296909ab7e79dc7e9c9b48b42","sha1":"1d802d60e6f0bbb5aaed9bdc7bb07ce9350686da","sha256":"3016e231974eef3186d1a24ffbb4552c109567ec0728fea4f6dc85c319e6c884","sha512":"0562a5333b07b4d84a8fd99d85d6ffa09a0c7143e5b1f2880365e44fb31426c462b223deb468e1651e72d59435bda2b3049ef03c7d463f910ea7d3555648b4b2","ssdeep":"6144:RXavS0aqSdlPE0VKCJWbO++tcnTJjjPA5Iv3wK8E0MO4Z/tdDszzTKwRIEvZg:FiSuRh+AJYIv3wKC4szWwRIEe","tlshash":"63944bd5b2a47674a663066a001f411f723e9412dc1e08b4bab0fddd26744c4ba7bfee","size":444687,"data":"","first_seen":"2026-08-07T08:42:51.355291Z","last_seen":"2026-08-07T08:55:37.292744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/rolldown-runtime-C_JxhDyB.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2bd778e0b6e0e86da72d5f23d98cf50","sha1":"53b6ecb5f482b2c1cca8af56f19dc42c0305ced6","sha256":"2e53498fbfc06bd1406482f18384288e9eb2123f1c2a754cf783414fda150bc6","sha512":"8d428919988ee150e1995071b13e814d1ee965815f41e7d4f124ab391e833db487e7f763b15d1dae8a249dd1179126310ca6e2e8f70be92d299bf481da780f4b","ssdeep":"","tlshash":"2d1110ef6990f6f30346a786da380081e674687da97c70d4f7a88df2b4810c110d4e76","size":936,"data":"","first_seen":"2026-07-03T05:21:16.144734Z","last_seen":"2026-08-07T08:55:37.293693Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustchain.cards/favicon.svg","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.284Z","timestamp":1786092908284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-1f4\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500,"size_decoded":1385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e5b2397cbed728d755eed215706d7e","sha1":"c1db491b45c6a0b2551cf59c1882954c14d7dcc1","sha256":"bb7ac2dd642cd924eb5cb2f0123eea0d9cd7e5a728d3cf643ac9ce8bf7ce3b77","sha512":"53d00d1107426b1db56437c6861dc5382964367cab0f7f8763085ef5047ad42a6eb05f1c03504e091f7d06f5b12f972963862d0339e212da9a8095ed75e63098","ssdeep":"","tlshash":"4bf02e15fb194dace5bd0966df197160401bb263478e1105b83fd0719b1448d792e6ed","first_seen":"2026-08-07T08:42:51.348194Z","last_seen":"2026-08-07T08:55:37.284444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/favicon.svg","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.285Z","timestamp":1786092908285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-1f4\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500,"size_decoded":1385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e5b2397cbed728d755eed215706d7e","sha1":"c1db491b45c6a0b2551cf59c1882954c14d7dcc1","sha256":"bb7ac2dd642cd924eb5cb2f0123eea0d9cd7e5a728d3cf643ac9ce8bf7ce3b77","sha512":"53d00d1107426b1db56437c6861dc5382964367cab0f7f8763085ef5047ad42a6eb05f1c03504e091f7d06f5b12f972963862d0339e212da9a8095ed75e63098","ssdeep":"","tlshash":"4bf02e15fb194dace5bd0966df197160401bb263478e1105b83fd0719b1448d792e6ed","first_seen":"2026-08-07T08:42:51.348194Z","last_seen":"2026-08-07T08:55:37.284444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/walletConnectDiagnostics-VuOoHRUZ.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.477Z","timestamp":1786092907477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/walletConnectDiagnostics-VuOoHRUZ.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-16f3\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5875,"size_decoded":3567,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5095)","md5":"26addf8a2cf29435d369f8438a244648","sha1":"3ce067c96a879c01eecb8af1d199c794de73d2e3","sha256":"ffa72f05e33d37b1689cfac18fb92f8351a28ca7471312f80038bfe01843ab06","sha512":"c9c6c3a5d11313f5aac2a5cd9ca255144f8dc40258e542b974158039c89ab5ddd93e5fd3ef0d97ea2faac6e0b7d83484c31ff0bf1ded3bb93a68295080bf7cac","ssdeep":"96:090wsNnpLBnuZ0YNzOC0agI9m1kOE1ftHnEZ2/v4DaG9k68AQkG9:0fNPQbELf4Daz68AzG9","tlshash":"5ec183c9bbc0706942b7d26581b71108e33585912c1f5008b33459fa76b8f9ec7aaf9f","first_seen":"2026-08-07T08:42:51.351113Z","last_seen":"2026-08-07T08:55:37.285496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/walletPresentation-mV7qJY60.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.478Z","timestamp":1786092907478,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/walletPresentation-mV7qJY60.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-299\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":665,"size_decoded":1513,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (665), with no line terminators","md5":"08a98b5dda4ff4483878d80dfcbae8c8","sha1":"6e9711f12bd5e7eae96394fda5f8732cf01139cc","sha256":"1112526acd1f5a4647b3fcfcc08164dafe83169c598ab1314e22c6203a95ce32","sha512":"71146ada2dd712612da5206e990ccb463167c5c599bcd58e2c62049b57522ca1ca80b8a925bc93f0b4c91d356fc09695545a1c03a2b0bdf5b96cce05bb3aa4df","ssdeep":"","tlshash":"c8012b249614221167c307a85c13c4f9d3e960e1cb9459f88bc1c1b89b2a3e2e9effc7","first_seen":"2026-08-07T08:42:51.345719Z","last_seen":"2026-08-07T08:55:37.286473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.trustchain.cards/ready","fqdn":"api.trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.053Z","timestamp":1786092908053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /ready HTTP/1.1\r\nHost: api.trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nOrigin: https://trustchain.cards\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Request-Id: 27ac033a-97c6-4e45-b0a5-ffd5f48ffc27\r\nContent-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'\r\nCross-Origin-Resource-Policy: same-origin\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nAccess-Control-Allow-Origin: https://trustchain.cards\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\nAccess-Control-Allow-Headers: Authorization,Content-Type,X-Request-Id,Idempotency-Key\r\nAccess-Control-Max-Age: 600\r\nVary: Accept-Encoding, Origin\r\nETag: W/\"678-tkVvVtYQ4Gnh7YHtSr+vEVNkLYo\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1656,"size_decoded":1378,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf865fdc7fd98bf1ccf2611634132dc9","sha1":"b6456f56d610e069e1ed81ed4abfaf1153642d8a","sha256":"fde8d61b2fd2a7fb13a47277e16bf9da9467cdf762210cb078cf0592fa6045b0","sha512":"d538803e8e86f3e6984468f60f61940fcde212254f253647a1e44312d154ef07f7a04e67c2839817b796de8e9e078b18bded5ffad10ec31a6cdcb1685bd97c46","ssdeep":"","tlshash":"c531284a47432cffac8acf18a62837975525b57321c78d28159ccdbc509fc6ad206a2f","first_seen":"2026-08-07T08:55:37.287438Z","last_seen":"2026-08-07T08:55:37.287438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":611,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"api.trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/useAuth-BvUADsHC.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.474Z","timestamp":1786092907474,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/useAuth-BvUADsHC.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-10023\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65571,"size_decoded":24293,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30797)","md5":"ba0bb767ae5db05786902cd7c162b7d7","sha1":"20d00c22f5c6d1a6047965963c42531045331c39","sha256":"a284fc1147c4a57d40583e376ab462db16af0548847fde82fb0ed429d24a5749","sha512":"cd7806594c8759c31743e7d585ef0a1d029c1dbeb31f4daaef2d6224027576baf3afe8288c52cbbf435f1415227baa199ee297c9b515596b8ec12408242f8153","ssdeep":"1536:Y1Cl7s4NJ6dK1m8wTC4BP0bLqQFjCdeB3Y1ixN7mtzCU06QZ:VBNJ6dK1m8wTHGLFjCdeB3Y1ixYtzClZ","tlshash":"69531aea72c5b1ed835b45a9002f801af37e9094780e4538f66ce8f539718d4e367fa9","first_seen":"2026-08-07T08:42:51.350117Z","last_seen":"2026-08-07T08:55:37.288698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":111,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/supportedNetworks-fy0bpwSr.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.479Z","timestamp":1786092907479,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/supportedNetworks-fy0bpwSr.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-515\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1301,"size_decoded":1838,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1301), with no line terminators","md5":"34669190b9e8e8c9009a0bea8ffb18fb","sha1":"306bcc36bf5e41252c88241228f9fff969d4189d","sha256":"b394b01abe049d18ffbc8e49eb9e836f8efbd6b920e58d56f5649566e97b4d7a","sha512":"a18189b600cafc59ec54c1f90f413a34e78f3ede6838a9f781648d368dcc3d4594707a082213b6bfaa18f03b9a5e6eca00c1b021c8c6b22d7db12f3fb26e3879","ssdeep":"","tlshash":"582111e7b0c7f4fc123b50c584eeb4aff32ea205d4680018d94959a956761fb9355ecc","first_seen":"2026-08-07T08:42:51.35688Z","last_seen":"2026-08-07T08:55:37.28947Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.trustchain.cards/analytics/events","fqdn":"api.trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.006Z","timestamp":1786092908006,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"OPTIONS /analytics/events HTTP/1.1\r\nHost: api.trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://trustchain.cards/\r\nOrigin: https://trustchain.cards\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nConnection: keep-alive\r\nX-Request-Id: 846f3138-4925-4835-b6dd-ac4472c7ee6a\r\nContent-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'\r\nCross-Origin-Resource-Policy: same-origin\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nAccess-Control-Allow-Origin: https://trustchain.cards\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\nAccess-Control-Allow-Headers: Authorization,Content-Type,X-Request-Id,Idempotency-Key\r\nAccess-Control-Max-Age: 600\r\nVary: Origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":704,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":29,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"api.trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:55:07.122Z","timestamp":1786092907122,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-f31\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3889,"size_decoded":2540,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"9dea4bb9a5ca093b62661ba1a5ffccc5","sha1":"da6c985ff960730474bd49028d464f1c1a871c6e","sha256":"2b452c3a0e6cd54ea8c1f7b10d819d5494d779ae7eb2e0c0b6d3c1803938c812","sha512":"dd40579793fc491a8d40d5e9641c0726ae16242ac3ca4ba8beb51da5d01e8a41331e75c45121a2c43f4d1af01f145738a2dd011dba1170039a0b571ed4d3c1dd","ssdeep":"","tlshash":"4c81730373a0895412700b24bac6f4a4ce22e1874759b8a8b6ed117c0f81fe54af37f7","first_seen":"2026-08-07T08:42:51.34242Z","last_seen":"2026-08-07T08:55:37.290822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":5,"connect":25,"send":0,"wait":27,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/fonts/trust-wallet/inter-latin.woff2","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.468Z","timestamp":1786092907468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /fonts/trust-wallet/inter-latin.woff2 HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: font/woff2\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-bd30\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":49628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-07T19:16:56.029447Z","times_seen":87814,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/fonts/trust-wallet/wix-madefor-display-latin.woff2","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.470Z","timestamp":1786092907470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /fonts/trust-wallet/wix-madefor-display-latin.woff2 HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: font/woff2\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-4eb0\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20144,"size_decoded":21360,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-08-07T09:03:18.06654Z","times_seen":187,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":58,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/index-C19jjaAi.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.471Z","timestamp":1786092907471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/index-C19jjaAi.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-6c90f\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":444687,"size_decoded":129274,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49780)","md5":"342d34c296909ab7e79dc7e9c9b48b42","sha1":"1d802d60e6f0bbb5aaed9bdc7bb07ce9350686da","sha256":"3016e231974eef3186d1a24ffbb4552c109567ec0728fea4f6dc85c319e6c884","sha512":"0562a5333b07b4d84a8fd99d85d6ffa09a0c7143e5b1f2880365e44fb31426c462b223deb468e1651e72d59435bda2b3049ef03c7d463f910ea7d3555648b4b2","ssdeep":"6144:RXavS0aqSdlPE0VKCJWbO++tcnTJjjPA5Iv3wK8E0MO4Z/tdDszzTKwRIEvZg:FiSuRh+AJYIv3wKC4szWwRIEe","tlshash":"63944bd5b2a47674a663066a001f411f723e9412dc1e08b4bab0fddd26744c4ba7bfee","first_seen":"2026-08-07T08:42:51.355291Z","last_seen":"2026-08-07T08:55:37.292744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":70,"receive":56,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/rolldown-runtime-C_JxhDyB.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.472Z","timestamp":1786092907472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/rolldown-runtime-C_JxhDyB.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-3a8\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":936,"size_decoded":1723,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (936), with no line terminators","md5":"b2bd778e0b6e0e86da72d5f23d98cf50","sha1":"53b6ecb5f482b2c1cca8af56f19dc42c0305ced6","sha256":"2e53498fbfc06bd1406482f18384288e9eb2123f1c2a754cf783414fda150bc6","sha512":"8d428919988ee150e1995071b13e814d1ee965815f41e7d4f124ab391e833db487e7f763b15d1dae8a249dd1179126310ca6e2e8f70be92d299bf481da780f4b","ssdeep":"","tlshash":"2d1110ef6990f6f30346a786da380081e674687da97c70d4f7a88df2b4810c110d4e76","first_seen":"2026-07-03T05:21:16.144734Z","last_seen":"2026-08-07T08:55:37.293693Z","times_seen":14,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":29,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/remoteDiagnostics-CNEu1TQ0.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.475Z","timestamp":1786092907475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/remoteDiagnostics-CNEu1TQ0.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-560\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1376,"size_decoded":1906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1376), with no line terminators","md5":"821a435b8c9f7a1b2fd3cf12209c69e9","sha1":"21c80e4e5536870fd422931bced25e10781e4d6c","sha256":"ebfc3f667edd0f21b8984674a9f94fd7803f641af194971ddbcc1814d8553878","sha512":"c91b13c6adb5cce0f680a982edbf2121817b95aca37cb4efb89a4dd07a5e6d8ae05f5f5d7d8c0b06c311485b57cf9ffc5042f90bd580e52a76a03b9c696a662b","ssdeep":"","tlshash":"312111da3582305513eb5377526e1180e233d9b6f98e9154a2d859602da683fc2b3f8d","first_seen":"2026-08-07T08:42:51.344792Z","last_seen":"2026-08-07T08:55:37.294309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":84,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/index-BFIsT9pi.css","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.483Z","timestamp":1786092907483,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/index-BFIsT9pi.css HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-50d62\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331106,"size_decoded":49990,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"897315cd486b58cfd94a536813ca3096","sha1":"66be0ec7e87708364d911fbb4e391dee8ec0ccf9","sha256":"6323ed03da9d84ac95abfab7d2cb5b57f253a87fee23cc1df68da6f8216489ef","sha512":"6b673c411d476da70ca08a18e4ec1d4c16abeaf92db8f3b770cbc2d81d2038139e3bd20dfb6d22224f9c2e174fda516ba726649acf45ad11df6fd8145a7e1cd6","ssdeep":"6144:Aal9XRvToSheC4YBSDKbd+qU3w6fzYKDbj2NKs1SjhYfGzgiTuz2abXn6LOKUGJ+:jvToShDHBSwd+qYEKDbj2ss1SjhYfGzO","tlshash":"816454a9fed0ee3dbc3be5796788ebbd6044e865982306e8e544bd1048c37f3192161d","first_seen":"2026-08-07T08:42:51.353845Z","last_seen":"2026-08-07T08:55:37.295191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":78,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/images/svg/trust-logo-full.svg","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.055Z","timestamp":1786092908055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /images/svg/trust-logo-full.svg HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-9e7\"\r\nExpires: Sun, 06 Sep 2026 08:55:08 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2535,"size_decoded":2288,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ae4b9939eb7a19214c6c400954f08e7","sha1":"ac314420d49bb5a155946308920a9433faefa7f4","sha256":"1eb8a0beb579dcfae69047004119cee70d0165f866d21dced6bab2ed8efa332a","sha512":"334b49fa9dce874721240b733453e1919ed64e2faae5abe2f4928f361480f92f9214150ec67b9e0e8d65ee395bee1c1361e995d86d22bfa07ead0d0b4aad6a9e","ssdeep":"","tlshash":"db51748fab6ce1b6edc843adf64491b2220591dbbac7ef04f5580b8e584411b9c0dec2","first_seen":"2026-08-07T08:42:51.357796Z","last_seen":"2026-08-07T08:55:37.296203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/assets/wallet-3TygQoRw.js","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:07.482Z","timestamp":1786092907482,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /assets/wallet-3TygQoRw.js HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a74d678-d053\"\r\nExpires: Sat, 07 Aug 2027 08:55:07 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=31536000, public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53331,"size_decoded":17642,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32013)","md5":"8fa76d18c4a417645f5ba6407ea4664e","sha1":"78649390dda6e9c055c27026fe7a0053cd8db312","sha256":"7b5652aa9060856c517aac9ed63c936fdce2e977a342524316fe6c3343a85663","sha512":"e312f40df238e281fb62fa6a523e3dff913f81ce7ce7facd23c41f13369bcd96bb319ebd23f6d2d63d59fc12cd20c8f01a5a6a59222556d2ae26aa3db73cbd63","ssdeep":"1536:rVPFNg46USXFuQ5M1ulXb/6VIoo8E/tIkFD4fmqBi:rVP/g4iD52fEF0fmqU","tlshash":"c133fad573e0f6a1e72b0264106b441df33d4c90981e0534f6f1e99a3a30a79abb7f5a","first_seen":"2026-08-07T08:42:51.352203Z","last_seen":"2026-08-07T08:55:37.297572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.trustchain.cards/analytics/events","fqdn":"api.trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.004Z","timestamp":1786092908004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"POST /analytics/events HTTP/1.1\r\nHost: api.trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://trustchain.cards/\r\nContent-Length: 281\r\nOrigin: https://trustchain.cards\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":281,"data":"{\"attribution\":{\"capturedAt\":\"2026-08-07T08:55:07.786Z\",\"landingUrl\":\"https://trustchain.cards/\"},\"customData\":{},\"eventId\":\"page_view:26369820-cecc-4126-b0e4-40acf4cb1192\",\"eventName\":\"page_view\",\"eventSourceUrl\":\"https://trustchain.cards/\",\"eventTime\":\"2026-08-07T08:55:07.787Z\"}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nConnection: keep-alive\r\nX-Request-Id: 1f763916-77ad-4536-b162-0af4d41d2293\r\nContent-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'\r\nCross-Origin-Resource-Policy: same-origin\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nAccess-Control-Allow-Origin: https://trustchain.cards\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,DELETE,OPTIONS\r\nAccess-Control-Allow-Headers: Authorization,Content-Type,X-Request-Id,Idempotency-Key\r\nAccess-Control-Max-Age: 600\r\nVary: Origin\r\nETag: W/\"5e-l2QmNLEFCE9/CXuB1trVXI82t4w\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94,"size_decoded":905,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"51fee75058e0a09e417cda539a2fc47a","sha1":"97642634b105084f7f097b81d6dad55c8f36b78c","sha256":"a648154c68843016b4de29f709132d03d5e13ae87210ce9be7ff975f5d56d41b","sha512":"28af2245c8934b563d3a0d49d3ae267e52383a6e3b6a96231408df4a0c2d8c78ddfe345ffeea85adf479a686ec261880bed6298bd2c845bf0300663f064552b8","ssdeep":"","tlshash":"72b012056b1084da008c1288e0008fd7a4643255a62d3804c0bb0c41f1911d740351aa","first_seen":"2026-08-07T08:55:37.298783Z","last_seen":"2026-08-07T08:55:37.298783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"api.trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/images/hero-card-stack-720.png","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.056Z","timestamp":1786092908056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /images/hero-card-stack-720.png HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 300305\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a74d678-49511\"\r\nExpires: Sun, 06 Sep 2026 08:55:08 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300305,"size_decoded":301449,"mime_type":"image/png","magic":"PNG image data, 720 x 712, 8-bit/color RGBA, non-interlaced","md5":"6495d9aa5a0668f8e0226b37dd616bbb","sha1":"689a2fafc44bf90144df7e659dcbd3e503b21457","sha256":"dbeb79945cf418ce3fb7146b318c02593d876de63be817b034681dc0972cbfb4","sha512":"6d0b5dfa45ee66f94f9e29ffc2f3ac0ef91731ca8e47f7bf3b41e0fa1b713f1c3f844a79b976ad975fcb1701aab50d0123bb8bc8b98ac1e0b2d4ef5b1bf41dbc","ssdeep":"6144:xS054mGJOoc2w4RRodtV7vR1UfZh0e5r9snGhd1OpQtb:xp54m6H/mV7vjUfZh0isnGh/Opmb","tlshash":"f95423959e71df2c74a6ba4e014c1a759203c58ec59cb0b18bfc3111924fee9df26e2e","first_seen":"2026-08-07T08:42:51.347053Z","last_seen":"2026-08-07T08:55:37.300029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustchain.cards/images/privacy-main-shield.png","fqdn":"trustchain.cards","domain":"trustchain.cards","tld":"cards"},"ip":{"addr":"91.92.35.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://trustchain.cards/","date":"2026-08-07T08:55:08.063Z","timestamp":1786092908063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustchain.cards","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 19:55:12 GMT","end":"Thu, 01 Oct 2026 19:55:11 GMT"},"fingerprint":{"sha1":"D2:CC:B2:B2:8E:3F:26:F1:F1:71:A5:F9:F6:72:71:59:86:A0:97:09","sha256":"57:07:EE:F2:8D:2D:2D:6E:9E:21:FF:AE:75:78:AF:CC:DC:CF:CF:48:FA:38:A9:FB:C3:B3:C9:35:77:37:E8:47"}}},"request":{"raw":"GET /images/privacy-main-shield.png HTTP/1.1\r\nHost: trustchain.cards\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustchain.cards/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Aug 2026 08:55:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 31109\r\nLast-Modified: Thu, 06 Aug 2026 18:46:16 GMT\r\nConnection: keep-alive\r\nETag: \"6a74d678-7985\"\r\nExpires: Sun, 06 Sep 2026 08:55:08 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\nContent-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss://relay.walletconnect.org wss://relay.walletconnect.com wss://*.walletconnect.com; frame-src https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.com https://secure.walletconnect.org; manifest-src 'self'; worker-src 'self' blob:\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31109,"size_decoded":32251,"mime_type":"image/png","magic":"PNG image data, 193 x 225, 8-bit/color RGBA, non-interlaced","md5":"dae21fc9715c22fe608455e92083fe12","sha1":"7d15feb311b97cb42590fc31ebe1ee5adf8ada74","sha256":"d9881b1fc8f698695f6cd83a0e9243a59666bfc64b787f980d282dd2934cb60f","sha512":"f35b1dbf5dc95e559da8be5348a6690e1d2cbf2d2fd79df8fe14f3e980d550e115016ceb6b99a7b295478652b9ab63b0cc105fb7534523d28bc158ec0704a021","ssdeep":"768:gmsrbvj2jxpEygHVFLwTBMKYFoYFn6vyFtRdJB9iUtxr14kRY:d3NybHE2KYJQyhd3ztoyY","tlshash":"8ed2f1c14d14da5af4170f3b0aa77910a79ed846bc612e3ee0f86b43dc69a25cd9882c","first_seen":"2026-08-07T08:42:51.341352Z","last_seen":"2026-08-07T08:55:37.300892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"trustchain.cards","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
