{"report_id":"151e6e66-71d1-49e5-9126-053f64537765","version":0,"status":"done","tags":[],"date":"2026-07-18T17:42:07Z","url":{"schema":"http","addr":"cardt-trust.com","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cardt-trust.com/","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"title":"Trust Digital Card","dom":{"size":32524,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30491)","md5":"3880f5445e393d5c7ee5715895c7293f","sha1":"534a11c2f316a5bae4c064ea1820ed9bdf45c0ad","sha256":"93a55fca4d0802f1dde3292458c46ff5a8b00a5a80b95be14ba66bb33467b5cf","sha512":"3d8325283eab8c6d0f352fc38ef643cc8a343c188387cded5c7a07aa210e79fdcc2632b8951c36885b3b45cd874efaf069477483ca11f31fa3841c8586c69292","ssdeep":"768:GmTOpkqZC+McpyhbWaw1oB8txBaiCijJN1A4HtZ7IIu:/TipyhbWamoIIIu","tlshash":"89e2853412111d3f27134ae4f7e1bb7951ade35aca27895cb3bc01b32fcacd8895a685","dom_hash":"domhashe3e2c9a554f758bfc61dd00ed8c782ba","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cardt-trust.com","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:42:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cardt-trust.com","ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-07-18T17:42:10.579996Z","last_seen":"2026-07-18T17:42:10.579996Z","alert_count":24,"request_count":24,"received_data":7728650,"sent_data":11914,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2870,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cardt-trust.com/","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"395eba7d86cc9bf5175f74410dd79703","sha1":"8421fc1ecd0245286b605639aea7cbf7b25c66f0","sha256":"140ba189225337f0837b096f0411cf2533cf40b11699ee584a5065757accfdb5","sha512":"7c7607441796631577f68cb075106a4a6e6f073019a1b4d53c3ffdd5eb3d92c861bda76b7325ddce6ad2d0398081b2f8afc0fd371594539eb2a546a4e9e9c6c0","ssdeep":"","tlshash":"b4f0dc4e2c43a0eb33fd3639d333965a3b1603416882d409ba1ec4902f659962c96c8e","size":475,"data":"","first_seen":"2026-07-18T17:42:15.266546Z","last_seen":"2026-07-18T17:42:15.266546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/sweep-flow.js?v=44","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60b4b24fad01c660c66ddd2b0b1a5e1c","sha1":"16b07bd27c684bc06816828b6f58d959288bbad1","sha256":"33c1258cce809ba43ee8f1852dc0df04d0f1dff96e943b5e1e0c85a0566b961b","sha512":"fd44e1b5680b5171c94c92776f5775c1138b6b30018447b55973bb027af9b4a9e85189b14f9ce7ce38628097cae07a232612daa35a944fe84d9c8c986a77fcb6","ssdeep":"192:W9QNp5oJ2cVIm5dWmeWMH+WqUcVinNhae4Si7JYsiML1r67bqnCswwnm68EF/JlD:X5oJ2L1TcJYb7q1Lma2gAlwQbPaJB","tlshash":"d962635d78e720694667703d8b8fa0183a319857288ecb107d4cc661aff4b78db72adc","size":15055,"data":"","first_seen":"2026-07-18T17:42:15.241895Z","last_seen":"2026-07-18T17:49:20.678711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/assets/index-zXMmog4c.js","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b484f61927e78aba3735996548ff254","sha1":"3872cba4f3e8acac1005fae423616db141b4f9ac","sha256":"2cb0cf06b1e9dfedda7b0b80af2bef8f31d7e8de9fdde5e72ff84dc0874fcb05","sha512":"3e878076c6a82206e86f4265b445764702554bb9519e15edb6819a5c87c3797c3f00173d67528eb484d233fb16fdd92c9a94e80f0fbaa60ecb8611ba87db7451","ssdeep":"6144:WEihW/M95vsNaXfo8P+QeDrygt50cRoqfyCjaMHnUZg2YF:Kh1FuDrygt50cRosyCaMHUBYF","tlshash":"8da48ee83290b161579342a6805f0a0a733955b5ac4ec538b560feef35f0489d1bbfbe","size":480814,"data":"","first_seen":"2026-07-18T17:42:15.233502Z","last_seen":"2026-07-18T17:49:20.691362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.373Z","timestamp":1784396498373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-19T05:19:04.026211Z","times_seen":239244,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/trust-3d.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.353Z","timestamp":1784396498353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /trust-3d.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQPd5pCHRyjSALG9fmfDuRa2eAmzBwwob1dwzaVRQshiYdRb0xB8uMG31Q9HojnBY4M%2BcyBx69FQMjf%2Fw9OKBVD%2FpY4M27YV9XhvSJp%2B3auRZOew5bARqMBEhAtaggMLXqM%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"308d4-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af41b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":198868,"size_decoded":150213,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6b416e21b6eb6802ef0eb49df77e2a3","sha1":"702da2208a3c46ab97e56c090aac208174054631","sha256":"f3406c7d3b9ec1ae7b41f49533d2986658c0d9a9e139e10fa57135501e613c38","sha512":"bc61f6172655197df8de1d9693e786ef36daf50c424598f4bbd6d3f19f3c0b849ddd010168c75cd343159090bbf8ecaea0dfa656fd51b7a83aa6130e8c814586","ssdeep":"6144:X7wj0Hgf5ocXCDli9Smpr/JpVDs98mVhTaiTo:Mj0w5ox40CpVDs9Fa","tlshash":"8e1412889faa999ec1cc203583ea0596bc2d20c33ec7dbeef63570d492cca555294d72","first_seen":"2026-02-11T15:17:55.603515Z","last_seen":"2026-07-18T17:49:20.689298Z","times_seen":70,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/css/wc.css","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:37.399Z","timestamp":1784396497399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /css/wc.css HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:37 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqlL6lCCWzsfEbaU4cIGXSXrKoFQJR%2FHOrL3n68MCMS1m0FDiytlc%2FpAqZXdtPoRCmcMDlxHUtDDLsGa7uM3g4%2B5vKGQ8eyaqpMx2JejyU6WmxZmBmzHkYYfNvZdf3E%2Fhy8%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 16 Jul 2026 17:39:13 GMT\r\netag: W/\"788-19f6c02d5e8\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d3473cbe2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1928,"size_decoded":1591,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"60a9f3abd602c3ef5a66e021a55f1994","sha1":"4a0f0d134ec7045bc69514537563a0f2dbe5e772","sha256":"f262512ef3e1ae76ac23c4d53b2e0b0eb340bb7237b2e0e95dc44d392b584bca","sha512":"1546bb2d4755ce8bdcf28659b88dbfcb7cf7a1be96316fd182d9057cadabf7d556d400b35909948f1eaec40d6d55f9d6d39db5827f412401c9e4dac8b4725664","ssdeep":"","tlshash":"8b41a6863b2a0410362384a435e25f58233d9602971bdffd6be1305cdec41e8f2b7398","first_seen":"2026-07-18T17:42:15.177912Z","last_seen":"2026-07-18T17:49:20.689976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/coin-2.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.336Z","timestamp":1784396498336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /coin-2.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jpL94SNsn1ANVaSb1ZBKli19LehB6goSW1b466GcRjYcphoJ2s7elzo%2BemfE20A8QX%2F5uVPUC3GeQOrGayB1SE2KKwLLy94511PWraLH10mpmKShKDw77hkst54kepv2pk%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"1b5dee-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f32b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793518,"size_decoded":1333569,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"679dcc59d1ea87802e916859080e6aba","sha1":"5af66ce9537d54796c53a52f689d7e93881f83b9","sha256":"a116d33afa3d2361896caa270db16978e68ead2bed979e0b5cdc6834421ee203","sha512":"6f457c81a67d1fa297759a25e6a630816ba5a51bc85ddd637d78163665a50cb6f0fca73e336c0542d5b725daabda216788fb8ecb1716d7846f876c22bb46fda5","ssdeep":"24576:J3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:VfuyyP8FgFhB","tlshash":"b1252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.590228Z","last_seen":"2026-07-18T17:49:20.682159Z","times_seen":65,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":721,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit4.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.344Z","timestamp":1784396498344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit4.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGaGRMV%2Bhu5NlbNBAcC5mMeUs%2BmDFoGS13cPZFdIeTnNDMIPPN4%2BQ3asG85ITihJQKBENyLtD3yp7qninPYdBkHjRjlsdta0YROIfj%2BDlgP5oDsD74pnPlFmqSQlHX%2BpTt8%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"1e7e-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af37b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7806,"size_decoded":3572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ce1bf382bdf03988579a134d40f3921","sha1":"e1ff829a2f0d8f5321d84d908e3cb93dab905bea","sha256":"127bdc6794f588cdc3bf94ab39138ed933ff68a8befe013421ec234002b351f0","sha512":"485bc45d14c71c02ece687f12b949a4636f09a2f5849e3f5834b86ad5a12d1f56b5f737ea56e8e402807c51777801598d9043fc352cc76b4f01e7ec3983e9886","ssdeep":"192:7o1T487sgBAXx+o1T48caSJkfVOBgHMLM:k1TNSXN1TCEYBBM","tlshash":"2cf185dd376856f5f85ac2e2ef12a038301b44bb56d0d620c6666e7c342a04dccbf6d5","first_seen":"2026-02-11T15:17:55.648367Z","last_seen":"2026-07-18T17:49:20.694774Z","times_seen":68,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit1.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.345Z","timestamp":1784396498345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit1.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2DhvdBoh%2BnnkmaZ71Vkb9sh0Si3E%2BASswA6yI8ZRU6BIlx0MJXOd2i31c7GL0LjFZp1BQo4QO0r%2Bu5LaypC8a3JVYShp4QnPWASmB4cLpp026YVBpYNJGNDlOHNeALH0SM%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"70fc-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28924,"size_decoded":9955,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2b45b63af2e789e308494b1c39eb30b","sha1":"a515a2b4874b574c8b8867806098e4f9911e4f11","sha256":"c4db6bb328ef78023c9182449c928af831feb01021d4bccd650b6d0c354c12d6","sha512":"bbdc3a13ac7aaa13973bac44c15f9e33b8a381ee94405a669b4069dd61649a7f94d92d6714555f7d52daf70b6576bdc93d93d439f3ad0dc0598310acb63b2d08","ssdeep":"384:C4qAlAemnXq21Ig9JX5k5Z0XLeeUUUoULEsfqEqklflsKcPez:C4qxemLPDGCMhN","tlshash":"60d2c7ee37140cbafc16d3eaeb0220bd502b54bb6ac55720c6299b29344685dde7fdc1","first_seen":"2026-02-11T15:17:55.635436Z","last_seen":"2026-07-18T17:49:20.695276Z","times_seen":74,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit5.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.351Z","timestamp":1784396498351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit5.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrQYGUukHjgaqkwNfDIIc6%2BGj1PWcO5B%2FhD9AUs9B9jxohdccCLe3ipZIv5NOhNendPXMffjCfX%2FCGG4pECKMCsqLdNaj6NJwRLQH%2F0OC7c152L3clxQ9ryBaU%2FWovev2BM%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"3417-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af3fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13335,"size_decoded":5448,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59713ef77a363413e687273f3c145458","sha1":"c85e8654571a7cd077a5e1b33776ae5d12289298","sha256":"70ab05b92fc860eadd89931c47f692666948dd7c27717968c09661f534791e96","sha512":"78a5ac9cb055867ac0399a25cff36de30a53b14a3ff3a69973cce6d2aac5ebbedb66fc48bc997414b907f4d00df0a49407da83246199803bbfb4ceade5fff0d4","ssdeep":"192:W9KM8HsKM8HmHna3jP7U0KSq0cS0XVcBqhdqvrXqVNdxn8DD1SHSfWnznyH:kintzjUTRXV4q3RxnUD162WnQ","tlshash":"9052b6dd33a44ab8f42287e1d703a1b5205e60f7aa95a370cb656f7a245615ecc7bcc0","first_seen":"2026-02-11T15:17:55.650976Z","last_seen":"2026-07-18T17:49:20.687493Z","times_seen":68,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.056Z","timestamp":1784396498056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-19T05:19:04.026211Z","times_seen":239244,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/phone-4.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.332Z","timestamp":1784396498332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /phone-4.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAqIuAfEJNP5X2keBhVwWZMp3AkdZnU5BKyq3eW61swDIrLUTKEmsexVuIbBJHNqZB8s7WQwIEj4ileDl1T1xlCPYszv8AuQYdpQ6zKbd%2BT6o3DudX81nDY03aRWTKDDFPk%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"51c11-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347428f2fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334865,"size_decoded":249876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbbd3aab77cb5df884cf3a3b4aaa4c21","sha1":"c9442ec1d483e4e76b4506b5f23d9b15f1474656","sha256":"715103f9615c025f8758f7b2a514a93effc6b6ad62e508de1b6177e91d1a8763","sha512":"ff89024db537159b90d260d70735c193bd49b0b98c92352c146709198e895932cdb4ea72dd707d6b04c336590c70c34c37893fcac92f1ecca6ec96b6d76d0911","ssdeep":"6144:GUiwM0ajDICgS5J6B/oZ0+FtnK7DpyWFGLdDdPr+3CBmwvQ2tcD:GVYeZVOBQu+FoXpyW0ZrQWIX","tlshash":"3d642352de434d1ea5705d8e402ca4dcfbb809dca68064f89bd4b993c1cae62c769c7f","first_seen":"2026-02-11T15:17:55.607976Z","last_seen":"2026-07-18T17:49:20.680602Z","times_seen":62,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/coin-3.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.339Z","timestamp":1784396498339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /coin-3.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu3IOLGrBEYeG%2BBwfzPh6FmEfim2oDz%2Bb4GkdxjMn5WUjw%2B1A3s7fzvB1lU2g%2B8oqBk3J%2B4IVDL62OMLQJewQvwz%2B4RxmpkU9hlr%2Fd3V65m4jP9N5hPay0N8PaqYK2UOh%2Fw%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"17442e-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f34b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524782,"size_decoded":1123339,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"154b07812705f948c5f0fb9ea7f8a647","sha1":"3cd47cba0a9b1890832a8b005da438d713b6b7d5","sha256":"f7e34ebffd3f342aa7980e55ddafc647d3b5f8b3eedac37f07c27884d96bf73b","sha512":"8e9c5b98c1bd4af6e12eefaa780b7961d1b6e4c790fa9f1a989674ad01aa482e578cd629d3c48f34d8fc6006068a68a03d59446653ae82e0ddff48fc17c1dd12","ssdeep":"24576:wBF3Y6bvUpI8a4tHdGwxErQ92Y7DicZQismJ8hut2f7vH:wBF3ZO9kwxd7tsjH","tlshash":"512501726ecaac8f1f889828f1df8ed65f6c573784096eb114133f475a5860a53dc88e","first_seen":"2026-02-11T15:17:55.579705Z","last_seen":"2026-07-18T17:49:20.693302Z","times_seen":61,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":705,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.371Z","timestamp":1784396498371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-19T05:19:04.026211Z","times_seen":239244,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/api/landing","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.063Z","timestamp":1784396498063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /api/landing HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cardt-trust.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW2xC4kEr%2BbBy0llNC0%2FiMZvceUlxpRD7%2B2XAxWWSFHTXd0Qdfl3Fl%2B8Y2x%2FZBgeSfpTQLTs6CEG3GEPtty3tVhDgS4GENeDqynYHn6a6ip2szcUdp4%2FODL31qe6zmMobCU%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"10d-wsY8owluufIFVxzTZRYa6y+dEZg\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1d34740def2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":269,"size_decoded":862,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"436ce2a058b4aeeb0928f9704f2de515","sha1":"c2c63ca3096eb9f205571cd365161aeb2f9d1198","sha256":"c3e79eebc25002b409098909d2166004a5ba93beed7052063751960e6c83ea74","sha512":"b7ce27454a4376eaa28fd6a1ce2ce9fed3c5d2ee61f9941e004c1afc25d7255c86161d8ae9daca6a334961cab6ad2701e1cbc45d8ce49efd030b51c291678d15","ssdeep":"","tlshash":"86d02b3521106ab68bc8a69d6c83bb1390684433530149ec51cea7ec41936c1306544f","first_seen":"2026-07-18T17:42:15.202025Z","last_seen":"2026-07-18T17:49:20.685615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/assets/trust-logo-BFahXSns.png","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.326Z","timestamp":1784396498326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /assets/trust-logo-BFahXSns.png HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"1231f-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaP%2FTgJHTkXM6F%2FfaU9OwB4Y6m6ZylUh%2FWt3S0j4IEdORxreRGGqYa%2FsXkYNcGZexfbLJx1x2o33aCivUCZyXFeWLP48c%2FDI6o3f0l9anf6FiD49lNZMoMu9QdBdZS1XFOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d347428f2cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74527\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74527,"size_decoded":75273,"mime_type":"image/png","magic":"PNG image data, 1026 x 291, 8-bit/color RGBA, non-interlaced","md5":"9a969ea9c3dcc8038aefe69162a40b2e","sha1":"781c9a8d74702911ffc34de0831b8b88cb3d212f","sha256":"dfa7fca3bcc8a996cf626bb2f1ad89c47ef918affb0b26e391e1634319b1ec41","sha512":"02ad1e96b18b6fe08f9a6c143b1fb4f90cf3351824f455f36fe9e6f267c9cd4bf15ccc4d5287e5b3d1576f6417976b6feada815cd3dd4f1cb59dc45da323cd9f","ssdeep":"1536:lM2rjbPNeQUjWFiGVFO21LHOSHhhxSWWMsgp7QbGyYQD02TaBQRjM5h:lM2rN2sbsSLuSH5xWbbGyY802e+M","tlshash":"1173f18ce6b2a45c9ed0745b87860660db2d11f663d2b9a4b0d1e7085cdb93fdc21e8f","first_seen":"2026-07-18T17:42:15.204265Z","last_seen":"2026-07-18T17:49:20.692656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/coin-1.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.337Z","timestamp":1784396498337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /coin-1.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i22gULEZjwfWw5aKoeUmSp8tz%2BUDEJOzkt1w97AuEiia9%2BfmoWaDctzLgA17DyTziNKZDZY1IK9r1LXGN09I01ghsRMR6ksTnhzS1NIFvOCzvyQdDNiN2wj34YWNhUNODuI%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"1b5dee-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f33b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793518,"size_decoded":1333945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8010fb3f37959329af30771296fa662","sha1":"58713455d38aee27a070785f50376c4a8c9e721e","sha256":"01c8a476cfadf19e594674877e4d7f97d72138b773bf9c5d26e2ed751ede6989","sha512":"a6dab64d93a1b02d9f0a45482786a8777e2d39a765d11901c6f92a53a8ffc4b40e2bee0df5007c60a8f8fc39e44fed9eae17bf40b31cb2e34e881215fa363fcc","ssdeep":"24576:D3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:bfuyyP8FgFhB","tlshash":"0f252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.647458Z","last_seen":"2026-07-18T17:49:20.684651Z","times_seen":59,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":692,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit2.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.349Z","timestamp":1784396498349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit2.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EL91%2Ba6ezWV13SWLrLnFmoSF5yZxsV53rKCp8t22pA8iM8%2Fj3s4z6j0WG8nH2wl68Af1VM4OB0oD%2FW8GJmDPaK9QoryBM%2FVlnVDNY1fPPv9Xym04hos%2FpN0q8GryIcChNu8%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"346b-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13419,"size_decoded":4488,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a4bf8d0dd48561b2b531f16994573da","sha1":"9e5547a87fcf112dfb398bfb61ebc00e7025558b","sha256":"5884f2c20f92ec8866d09edda61027e0ce2e6666e0bf45b6ecad192bfde48f1d","sha512":"dd50bd6762d7dcb5290f02d8dadd26426d47dc6820979ed38a4ff0e7122fb6ceaf1318792ec2666d6d5f35d414e8fcd83eaeb6eccb19023556e1489870d8a1e0","ssdeep":"192:35nvZrCCypp07LmxZRkaVuVefXg9NT4X4w3RM7GKcmxZnefXgykaVut8:3pxr2pO/m6aAm2eX4wh4GfmE2aA2","tlshash":"665294ce33188dfcf95297d6d30371a9316680f75a8192a4ca361e3e244648edd6bec1","first_seen":"2026-02-11T15:17:55.632619Z","last_seen":"2026-07-18T17:49:20.686918Z","times_seen":74,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit6.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.352Z","timestamp":1784396498352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit6.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOCatr6HbkejEpULG2iGEJ3zMcyZIJOy9%2Fifp4AygXOpdDWLQ0TnQ77trpg3mDUNkdgF3X8pvn0OxDBVmlH3ofhmf55fNPMg61UooXOQUaZmT2QYP8K02MhEfr8wfjoJLYI%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"1bce-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af40b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7118,"size_decoded":2786,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09a9977bfe977ac4e405eb0ba43f07d2","sha1":"90d4b8bb58683e2076e248a67759331f883befbf","sha256":"278edfd8be3da161082664057cfb31bf4f2c416238b9380f47427495c9d69db3","sha512":"52020259721f5b96b18870d0ec8710418ea7798a64b3a2aff1956f8daa105a0fd3dc60a951d81122c1a456f6413911bd9feb8d24b65f02f21a81af60c5983ab0","ssdeep":"96:cqhVKlr2fNV0338FAFfIDzIZrCfhUYa44VHH5ObSGmEOQa44VdbJQXiCKX9V4id1:BZNqnUmNJ5Ob3RuZ5jvqW","tlshash":"83e10cca3758497cbd369382eb02b27a606a44e317c4e630cb32593d285191e9dbfed5","first_seen":"2026-02-11T15:17:55.588479Z","last_seen":"2026-07-18T17:49:20.693805Z","times_seen":68,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/favicon.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:39.307Z","timestamp":1784396499307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:39 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IboXA9JxIR%2BSY8M%2BZou7jYh2j7xvqDZW9eKboO0X5Rl3JFtxY9al45A2FjY3%2BFDyqlWTxLYus7JfPQr5tl9C%2Bfow2e4VcR2RdlJZyongI%2FyQRPkWafMqnOtAYu30hz%2FtZoc%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"233-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34748a825b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":563,"size_decoded":1080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71a2218c0d48600e55058479ec72b9c8","sha1":"52c864350eb73388205d3248a1ae9bfd3bf023e2","sha256":"4219b150d961bd4e335a2aa44fa775c475ee32706730d52e791e1217015ef735","sha512":"a481519453d14a0045121ec177b76a057bf8e2ab73d26fcf3bba2afd61f2d1e75c3f7fb958269b732559c55f538565bf88f3f6d8aa3becdf5a87fc3b98403056","ssdeep":"","tlshash":"35f0c06dd47cc617d64dc1a8c64868f82815e4db2ec0c281b1769f2da776386097e6f4","first_seen":"2026-07-18T17:42:15.225274Z","last_seen":"2026-07-18T17:49:20.696599Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/assets/index-zXMmog4c.js","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:37.406Z","timestamp":1784396497406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /assets/index-zXMmog4c.js HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sae98CgJE%2FXtEDXZArnA6Iw3oPJi5bJE9GJIMXc7zP3LGRs0AeO39NOjoc2w9d36dSulF8mOsq4Yd%2BYEjGi6wM6wUaoypI1cHKSCawZ1R4cP%2FYuuoAlZ8565iVOiYwMcZvU%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"7562e-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d3473cce2cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":480814,"size_decoded":159463,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (43071)","md5":"8b484f61927e78aba3735996548ff254","sha1":"3872cba4f3e8acac1005fae423616db141b4f9ac","sha256":"2cb0cf06b1e9dfedda7b0b80af2bef8f31d7e8de9fdde5e72ff84dc0874fcb05","sha512":"3e878076c6a82206e86f4265b445764702554bb9519e15edb6819a5c87c3797c3f00173d67528eb484d233fb16fdd92c9a94e80f0fbaa60ecb8611ba87db7451","ssdeep":"6144:WEihW/M95vsNaXfo8P+QeDrygt50cRoqfyCjaMHnUZg2YF:Kh1FuDrygt50cRosyCaMHUBYF","tlshash":"8da48ee83290b161579342a6805f0a0a733955b5ac4ec538b560feef35f0489d1bbfbe","first_seen":"2026-07-18T17:42:15.233502Z","last_seen":"2026-07-18T17:49:20.691362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.058Z","timestamp":1784396498058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-19T05:19:04.026211Z","times_seen":239244,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":33,"dns":1,"connect":0,"send":0,"wait":21,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/phone-5.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.334Z","timestamp":1784396498334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /phone-5.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGgm0ETGfh2cBtthj5KL1JTZHraHxZi0jGXNwLfKOMXKdL%2Bp7cTULKH6IgDNl2xJ5vjjUmMSKL%2BeYUP9Ai2yHIHTbbLVdn6r3R8z6%2FFNRWLp1kHEAkfAgqYD%2BhWxNAeq3TM%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"33a0e-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f30b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211470,"size_decoded":146183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3868b22ca7f77068f2edba51cb879f5d","sha1":"fe91e29b99959eb88558f4e78bece76ce23bd0fe","sha256":"4e58e1a299c1ce83b1695fe172ef5ffe3196da11e66ba6a2c28c79ce0451235f","sha512":"6b25bd1312de3bfa16ea450f081e27a0167c46cf4ff73cbfd5e5401875213dadb431d69c81d431b87e08ce9128b330cb1f6579ab2e322ee597325b95a101496f","ssdeep":"6144:7W7gNT/WbJNlDDxTtYOGwj4WYIUZVbeucmj:isJ/WbNxZYOmn6s","tlshash":"1324d0334547fdefbb278dd8e11a62209dddba93d684d24caf8458c126fb428cc615b8","first_seen":"2026-02-11T15:17:55.63009Z","last_seen":"2026-07-18T17:49:20.681509Z","times_seen":76,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/api/events/visit","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.407Z","timestamp":1784396498407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"POST /api/events/visit HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cardt-trust.com/\r\nContent-Type: application/json\r\nContent-Length: 300\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":300,"data":"{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"platform\":\"Linux x86_64\",\"pageUrl\":\"https://cardt-trust.com/\",\"hasTronWeb\":false,\"fbp\":null,\"fbc\":null,\"eventId\":\"c3846ad2-70be-46f1-a431-0684f9ba4edd\",\"sessionId\":\"bab61562-15c4-4aa5-81c0-e891275f7d81\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50KN%2BdWHl5%2B5vNg8aDhcj5drNrsYdyjka7hQcMuLXMyDsvCVuX90atrMcsJCvhal8wyqtPhzQWX2Ah7aaSK5qRAvlAPRhGEBSBhbMkl1MPxhykOr%2FbAC6PgW5Fv9Hd2fGbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d347430f4bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11,"size_decoded":668,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-19T04:45:40.84949Z","times_seen":16090,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:41:36.830Z","timestamp":1784396496830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgbs6AgZcgjVPkLJWmbJlZjr5yc2H4oWuLcF4Pu34Tx14rae8Kyb%2BF6e06tNk%2Bt%2FzFgI3IEojqeXPlIjmrEUgEkILxLWRnASyfXKUreSEE%2FUOEBxnN6OhY2iJZDgxPNwAMM%3D\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nlast-modified: Sat, 18 Jul 2026 13:23:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1d347396d7cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1985,"size_decoded":1753,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"eb9ce883b7c303a3cb57d2097b0f131f","sha1":"39f4251dbbb3f2c766f2445a000f17563f7509f7","sha256":"51d97cb9b0840c31e029491016c3a1d05d7d21586b6962dc960dbdeb8299d559","sha512":"e3c5ed2c3fb677ef61907d6f353639cb87417345c7cff620b8a0e38f49a4d377b685fd73b7d8b4d2c49a99659678ae55a7a7481820053750af05e987b47a2455","ssdeep":"","tlshash":"2c41544189f6883b13759744b9f2f7296d91830b8b82844c3b9d41b41f87ec1cc5758f","first_seen":"2026-07-18T17:42:15.236631Z","last_seen":"2026-07-18T17:49:20.688011Z","times_seen":2,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":10,"connect":20,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:37.934Z","timestamp":1784396497934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 17:41:38 GMT\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-07-19T05:22:09.675054Z","times_seen":3880,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/phone-6.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.342Z","timestamp":1784396498342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /phone-6.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHaecPjnnOoUbtvA32rRHDZ8MdddYilqiscOxbHPyS5Q6sNZDeaSedaLNm9sSwthMGttCdY5IjNLcZjiif3AU5aVPJI%2B6pCnw%2BmQRdvgb4Rcvm%2BZqYb0aDuHlGmobYXYHYA%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"7bcbd-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f36b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507069,"size_decoded":372477,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d98f60d0f1e584c5a31a48e2771e2ff9","sha1":"64986489ae3eee8af3180db20370fd3a512d93c8","sha256":"ef154187de3d627f4596396bac0c41502996cdf2273959b3b583c06ba24a69e4","sha512":"7054312977ae826d988fb9976759d3868bafb2ab6c02174ccb4ae7800f41af83b9d188c586df09218ce3883d894fa96756bd16bab2dcd103657c04e0d1990e23","ssdeep":"12288:eFFFFF2YsSm6y+9xyzwisudXPg7aj51G/5YKn9nTJ6oQjPYtF:eFFFFF2YsSm6y1M9uRBG/5T9TukF","tlshash":"6eb41330bbb29ed958014b3435688707ece4798926dcc9d48b9dcacb66ef73d8c5182d","first_seen":"2026-02-11T15:17:55.594612Z","last_seen":"2026-07-18T17:49:20.688749Z","times_seen":58,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/assets/index-BLG9OfPR.css","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:37.409Z","timestamp":1784396497409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /assets/index-BLG9OfPR.css HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:37 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJZDSDkRpqoftHF2iTARJzZHbxBUBSocQgAxxJ65bCPtF0hwA0WOcQcEa4i3Anzjsyb7l76xvesRAVbGXWSVRvBJf%2BNDWeozXDds9rfyiR8YzOFu98vUitL9EODuEuvBx9Y%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"7dd1-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d3473cce2eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32209,"size_decoded":7759,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32208)","md5":"c53f4a3d7359a23a959e9215a82da572","sha1":"62691e1f4bf6c9f48dd2133f628d5d3672be52cd","sha256":"20c45569f9b13be4607f2021538fe7045329b44d81b77ad2d231a7b1a5395356","sha512":"5349df05917fb69e7f6a73923e2a2b508a7972f623bf69eae921f88f591a9fcd2c009c4d5e93dbc27e76f52b5d3a262cae5e6e7dcf61536107d6b689e10ac4f4","ssdeep":"768:QhlmPhDu0+GD8Vfr+0o+XvfrFLFuY0Xj6Si1K:/g0+GD8oeXpLFcmSik","tlshash":"94e271a4b326c87fac2364f6e76c788cb6197181de7556e4fe42221266d73f00d8ab14","first_seen":"2026-07-18T17:42:15.23983Z","last_seen":"2026-07-18T17:49:20.691944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/sweep-flow.js?v=44","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:37.411Z","timestamp":1784396497411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /sweep-flow.js?v=44 HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEbwdCllo8I3VQ5A7gWkpoB8%2FlKTBvIu4FqhMOj5OWpakg3A%2B3Ez60b201btSKMqfN4OZxiO929i6Cctn0SOPPdGmy0L6izr4mGmT79%2F%2FPe%2BLROxGj9nWVDoRPr%2Fl%2B34EIQ%3D\"}]}\r\nlast-modified: Sat, 18 Jul 2026 13:22:32 GMT\r\netag: W/\"3acf-19f75648dc0\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d3473cce30b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15055,"size_decoded":5494,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"60b4b24fad01c660c66ddd2b0b1a5e1c","sha1":"16b07bd27c684bc06816828b6f58d959288bbad1","sha256":"33c1258cce809ba43ee8f1852dc0df04d0f1dff96e943b5e1e0c85a0566b961b","sha512":"fd44e1b5680b5171c94c92776f5775c1138b6b30018447b55973bb027af9b4a9e85189b14f9ce7ce38628097cae07a232612daa35a944fe84d9c8c986a77fcb6","ssdeep":"192:W9QNp5oJ2cVIm5dWmeWMH+WqUcVinNhae4Si7JYsiML1r67bqnCswwnm68EF/JlD:X5oJ2L1TcJYb7q1Lma2gAlwQbPaJB","tlshash":"d962635d78e720694667703d8b8fa0183a319857288ecb107d4cc661aff4b78db72adc","first_seen":"2026-07-18T17:42:15.241895Z","last_seen":"2026-07-18T17:49:20.678711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/benefit3.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.347Z","timestamp":1784396498347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /benefit3.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkXJq4Sv4PZfXLa0ywZqJ1J1v7HAupUjdupeJ%2Fd%2FNOpVL3W7IrqlF9oGmmsdB6klbqc37nkxfLx6MR0SgeVYhbg8%2BM2GgcrgVlq6WBJBYPA2bpxefSqtyBqjEl2ycJEG4Bo%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"171a-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742af3db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5914,"size_decoded":2167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf29f6b43683fa8462f27d6b643cc872","sha1":"0ca16d391a77d59bebad3d80ad8392d714b16465","sha256":"0cd370c7deeb7481811226d092c3854796df2a5fb58390f5298483bb22f8aede","sha512":"f44ca85002088eaf763b07480166e2593ba5485223000ee566104f5591cb18088d45696cccf9a7182dfd53582d7ca7f5e757de252a9ae452b28fc3ef182ce1ea","ssdeep":"48:bx0B6A+Ld2JJZdLXj3fALg3XLRDYL/atJJZUYb0ENQ+F5HgUBVJAohL8SLbFX88t:qBJJZpDFTJJZhBlGCZfvcUmckJiUcBcQ","tlshash":"c8c121aebb68dc37f559d3eeca01e139115641ab7580c260c1a8ef1f14164e6ae2fac4","first_seen":"2026-02-11T15:17:55.633592Z","last_seen":"2026-07-18T17:49:20.68359Z","times_seen":74,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/cta-banner.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.354Z","timestamp":1784396498354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /cta-banner.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpzGpwq2cbF5LQFHfDu5cKKVxZK2a%2B0i4Bl7rnn5s8PvMjXI9EX63601nbTRjK11bqpo%2BYIczt7PxoKVh%2FHW08akHBo01gbrI2Bn%2Brm2jUxh3k2NhHUXr1gH%2BkyMBEx30yo%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"2906-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d34742bf43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10502,"size_decoded":3982,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e34a0d2ddecc4eca36af15326e3ef4cc","sha1":"27158ef8abf4724643ad911ed1091688e6d2ba40","sha256":"1fe123414ca02e7118d90c20c5ef90f15d45ce6dbeb6820a44d89498319a20de","sha512":"90db61f4078563bf7f118b99c3927ca8410b4062f977ffaa49f72c2733e67b1fe0c0b570030fb4133d92ceef7888ce08242e72495fe3beea03ad413df2944edb","ssdeep":"192:sXxy6K0CCGDMdkLeLEIwy5HpYpE72KPJesp:MxtXQIwepfJesp","tlshash":"e1221dde33148cbcfd268ba2eb03737822275ab30a996780cd371a79155551ea93fdc4","first_seen":"2026-02-11T15:17:55.649184Z","last_seen":"2026-07-18T17:49:20.696085Z","times_seen":52,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardt-trust.com/coin-5.svg","fqdn":"cardt-trust.com","domain":"cardt-trust.com","tld":"com"},"ip":{"addr":"104.21.86.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.340Z","timestamp":1784396498340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardt-trust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:11:14 GMT","end":"Thu, 15 Oct 2026 17:09:47 GMT"},"fingerprint":{"sha1":"12:3F:0C:55:99:5B:76:6D:C2:3B:33:A1:CB:68:BA:9E:11:85:89:87","sha256":"CA:61:C5:11:CC:68:A2:EF:31:31:4A:20:E8:91:69:4E:8C:86:64:C8:8C:64:CA:63:CB:97:54:96:A1:20:51:0F"}}},"request":{"raw":"GET /coin-5.svg HTTP/1.1\r\nHost: cardt-trust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cardt-trust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:41:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTADzHxhdXhOFmixqdRMfDRyRBkSvhwuqANwUBTwIuSl%2FO5%2FS%2BJ9Bqw4YjVub3wHQe4WE6toDu8PTxr5nZc5HhTwmt29b0S2A9UuAqQ7%2Fmrc%2Bn9Ioh0OR17qhJXInUlxnp4%3D\"}]}\r\nlast-modified: Thu, 16 Jul 2026 17:39:07 GMT\r\netag: W/\"9f5f1-19f6c02be78\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1d347429f35b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652785,"size_decoded":490717,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1acce58393b8d5f1c6385c697a24ce06","sha1":"0b48578d14a22345b3940aa0b2d29ccbc546167a","sha256":"f1dbf46ff029294134b06f60fd4eddad1137d2c942abff449e62fa6bb060eb19","sha512":"96b9ec645765af648719350ef4ef6fd9bbce0e29714ce80d50b25c5ae2c34da320900f340b2cc27967d4fc481cd55e9f9cd36d4e1912f843581679dffce30478","ssdeep":"12288:2EL4JuXNMFrS0Ghr7LF1uB2IyTA84fNCuLEJ20IFbvsXsMHFQ:uJudwhs7LF1uB2X141eJJIFbvsXsi2","tlshash":"cfd423218ca71e3f46e5424960db0f4a524187f2c0b2ddc869ebaa679bbbf074447df0","first_seen":"2026-02-11T15:17:55.591499Z","last_seen":"2026-07-18T17:49:20.683047Z","times_seen":61,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cardt-trust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardt-trust.com/","date":"2026-07-18T17:41:38.369Z","timestamp":1784396498369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cardt-trust.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-19T05:19:04.026211Z","times_seen":239244,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}