{"report_id":"0f016726-7e8e-4f39-8a29-b4f3c4c1417d","version":0,"status":"done","tags":[],"date":"2026-09-04T14:38:33Z","url":{"schema":"http","addr":"trustwallet-recovery.com/","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"92.113.23.75","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"trustwallet-recovery.com/","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"title":"Recupero del \"Trust Wallet\"","dom":{"size":5023,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1466)","md5":"049b301d4a524b913877b9f626dacf41","sha1":"181c1fff672a6885ec39bdea21c6175208617646","sha256":"b6e577cee684ed3773d2fd09b46dc1eb25d2fbe15b86288baaeabddbaccff8a5","sha512":"6dda3406e7142ce9efb7f46c2e21489950559b3faa69baf943d388433a38cf2d15cc024693c64a3cc1e90248a2a471fb3c0ad6e63e80f4c996b2229e18e59267","ssdeep":"48:nBNqO+ccAyvxrQcglnL4Wnoj5IybmQS8dKTQR3BQ3TKRgv4jnjKPXj4sKWcsY+G9:nB4A8xCln7+IUQdlKD29jcMsb","tlshash":"39a122716076a433414716f0b2f5c32eba968217de87aa1176ec06d45fc2d429bbae88","dom_hash":"domhash4bedf0804dd4d3c7b26bd96b0cd815fa","first_seen":"2026-09-04T14:38:37.1776Z","last_seen":"2026-09-04T14:38:37.1776Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwallet-recovery.com/","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"92.113.23.75","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:38:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwallet-recovery.com","ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"domain_registered":"2026-09-03","domain_rank":0,"first_seen":"2026-09-04T14:38:33.785352Z","last_seen":"2026-09-04T14:38:33.785352Z","alert_count":12,"request_count":6,"received_data":49646,"sent_data":3088,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwallet-recovery.com/","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86c285d57715a7eec0bcb5d20e8c4874","sha1":"5095b66ab580fa59fb3ab0833dfc8ab5bd5cd76a","sha256":"9df3238068b778485b2f2b94437b984f6220c8798e5b8b54a0038bb5be1f2fe9","sha512":"c7a398fb00235d27d0161f24ac2f1b6cc1943c62553a207c4ea9a8c3870d558c15ff0160f4ef3ba4caae6111e72ced0788b69fbd8e530bb1e03ef4e29dfc0e93","ssdeep":"","tlshash":"b431ddad24b2943484ab22b777ffd5027414003bb845ca55b9ac49056fa1f0267f6fed","size":1589,"data":"","first_seen":"2026-09-04T14:38:37.198561Z","last_seen":"2026-09-04T14:38:37.198561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwallet-recovery.com/res/img/icoin.png","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-recovery.com/","date":"2026-09-04T14:38:05.583Z","timestamp":1788532685583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET /res/img/icoin.png HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwallet-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 682\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 28ae3ff0cf8ef7b8c5e0ae02118d703c-dus-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.005\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":1079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"106784a122e3c5945f01f176d2d203ae","sha1":"92a8c2f22b52cb8012a8cc683addf7bc2efd5209","sha256":"e7628dac7ba30b83175415494ffabaf6fa1852b1663088b8dddff4ca279356dd","sha512":"4b40a7e711976d5ea9ea214bd5bb0141b46adb3feb6674e45fec887248d5e4c708922daf1a9ab3de0ddaa59d356c7cf02fa434b484b2ced22026678a803a56e1","ssdeep":"","tlshash":"3701b7476e655b11c0e51db9fe1273491812bda1b10ce0bb5a0a0e665d93184fe74dc5","first_seen":"2026-09-04T14:38:37.181808Z","last_seen":"2026-09-04T14:38:37.181808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-recovery.com/res/img/m.png","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-recovery.com/","date":"2026-09-04T14:38:05.642Z","timestamp":1788532685642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET /res/img/m.png HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwallet-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3828\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nage: 0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1c3404be3aca95d8a43de81da55d5e73-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3828,"size_decoded":4206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5f54ef7b2a5c73ca44b28cef6e6e258","sha1":"81dd27893239e224e1ef52de58df59b0d6a14f68","sha256":"2ee308a24dbbf28e6b2c1841a8f90eaafb8a2dca76421ec23c2dd0136ce542f7","sha512":"7c10cb703acc1299f7da9043c070be60b85f0afbb0ead03aa898f8665cad2b2a6de0bb14742f4bb2775ea96bde26aafbcb2e9d2ad944539800e9db0a4ea629df","ssdeep":"","tlshash":"b7813c6b66e35ecac11930fcd560170c316795644e1886bc00fea247bf5f6a04e9b7f5","first_seen":"2026-09-04T14:38:37.185633Z","last_seen":"2026-09-04T14:38:37.185633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-recovery.com/","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:38:05.221Z","timestamp":1788532685221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.4.23\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cdb3e4363256e3380d2ba10f0596a225-dus-edge2\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.4.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3790,"size_decoded":2098,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ec8692c9a143e4407859bf7f4aee44a4","sha1":"7d6ae629df8d926eff20b64c2fa6d036c86da32f","sha256":"2c9c3b54b8a7b70cbc127b72645953c57331faabe8e72192dd1e544955e9c72c","sha512":"18083c24a07bd0b27db69968b5f40e41cc3279e23aafe985931b4e1c8fbea93cd644c11b083fe988358d176d0a7518b4cfafcc322e415b00da4311da3982e73d","ssdeep":"","tlshash":"5b71405560a3982541b763b57bf28a09fb6941238a030700b9dc1a972fb2e01cbb7fdc","first_seen":"2026-09-04T14:38:37.18917Z","last_seen":"2026-09-04T14:38:37.18917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":79,"connect":22,"send":0,"wait":26,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-recovery.com/res/app.css","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwallet-recovery.com/","date":"2026-09-04T14:38:05.571Z","timestamp":1788532685571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET /res/app.css HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwallet-recovery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 928\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 11 Sep 2026 11:11:45 GMT\r\nlast-modified: Thu, 03 Sep 2026 19:24:14 GMT\r\netag: \"1605-6a99c95e-647754dab9b6d025;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 12380\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 489077e2f5e83f2291a6e8daf9dd857d-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5637,"size_decoded":1470,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"791f78b16ab3316f1232ca531cbdd058","sha1":"e2356494fd2fb384b9cad0acd8d1bff46eed8350","sha256":"1acec7ffee24835b4f20b198d7d3297c4438050ef948906597f0e450c2dc6040","sha512":"f667fc2c012e46adeca676f8911d41e3ca2a7d51088afeee7d6e6389c10542b5789bad26ef1d41a5b4763dccf57ec141363202f650fbe83d4465217706ab0944","ssdeep":"96:svUPQQPcdMvJS/8YgkQ+ktYPQroHd5Jdk/PYg7+h:sv8cdMvgExkQHx2d5wHx74","tlshash":"87c19f5cd90601466333db74af628a84eb814017db4756aa7fec62a4dfb052d8731fcc","first_seen":"2026-09-04T14:38:37.192723Z","last_seen":"2026-09-04T14:38:37.192723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-recovery.com/res/img/shish.webp","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-recovery.com/","date":"2026-09-04T14:38:05.575Z","timestamp":1788532685575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET /res/img/shish.webp HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwallet-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29230\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 19:24:50 GMT\r\nlast-modified: Thu, 03 Sep 2026 19:24:14 GMT\r\netag: \"722e-6a99c95e-758000e60a75cf4b;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 69195\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 95fdde21afe88dfb8c120385786d6f55-dus-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":29230,"size_decoded":29754,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0486995e09273e2d815ee80feeefec81","sha1":"b5e5383817d8db6a736d649e1858858b935afd34","sha256":"f8f277ff7ae935e22e6b9767341672696ea6a112ee164f2625666264a6778678","sha512":"a1ee353adae8e71715e6a7ffadca96a0d13310b079131a335ce3dd15062274e21b696539fe2db07a134cf891a5bcb3707b9405390fe983f2b80307a754d83338","ssdeep":"768:s+jOlDnhVBoUobUVnNDT1U5QB8wse3ihaS2m:F4nNoUiktTiU2","tlshash":"4dd2f1ca8209bf441b6eb5b2fd5a8a34dd969664740ecb049cc1190b0c069663173feb","first_seen":"2026-09-04T14:38:37.195713Z","last_seen":"2026-09-04T14:38:37.195713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-recovery.com/res/img/m.png","fqdn":"trustwallet-recovery.com","domain":"trustwallet-recovery.com","tld":"com"},"ip":{"addr":"2.57.91.255","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-recovery.com/","date":"2026-09-04T14:38:05.582Z","timestamp":1788532685582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-recovery.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:43:35 GMT","end":"Wed, 02 Dec 2026 16:43:34 GMT"},"fingerprint":{"sha1":"71:46:E2:F4:3C:E8:AE:DF:02:3C:2E:1A:33:B0:65:FD:64:50:69:37","sha256":"6F:AE:3D:86:BE:37:7F:D4:90:8A:03:8F:D0:1F:F7:12:02:BF:91:74:F1:77:62:B0:4B:F4:D6:98:06:87:4D:C9"}}},"request":{"raw":"GET /res/img/m.png HTTP/1.1\r\nHost: trustwallet-recovery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwallet-recovery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 04 Sep 2026 14:38:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3828\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a0fb041385f87796cab2b64146bdfded-dus-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3828,"size_decoded":4226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5f54ef7b2a5c73ca44b28cef6e6e258","sha1":"81dd27893239e224e1ef52de58df59b0d6a14f68","sha256":"2ee308a24dbbf28e6b2c1841a8f90eaafb8a2dca76421ec23c2dd0136ce542f7","sha512":"7c10cb703acc1299f7da9043c070be60b85f0afbb0ead03aa898f8665cad2b2a6de0bb14742f4bb2775ea96bde26aafbcb2e9d2ad944539800e9db0a4ea629df","ssdeep":"","tlshash":"b7813c6b66e35ecac11930fcd560170c316795644e1886bc00fea247bf5f6a04e9b7f5","first_seen":"2026-09-04T14:38:37.185633Z","last_seen":"2026-09-04T14:38:37.185633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"trustwallet-recovery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}