{"report_id":"1b416670-8c71-4add-8318-0bf8285ae131","version":6,"status":"done","tags":[],"date":"2026-04-30T14:24:42Z","url":{"schema":"https","addr":"secure-help-trustwallet.pages.dev","fqdn":"secure-help-trustwallet.pages.dev","domain":"secure-help-trustwallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"secure-help-trustwallet.pages.dev/","fqdn":"secure-help-trustwallet.pages.dev","domain":"secure-help-trustwallet.pages.dev","tld":"pages.dev"},"title":"Trust Wallet: Your Secure Gateway to the Crypto*","dom":{"size":10368,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909)","md5":"4bd0b52d196f5103fef4aa812c74e938","sha1":"a24f02a1764865a96317eee33804b1466c48a23b","sha256":"f4f23c822cedd54d5dbdc81b4a091d15f9aa3d09137059eacd30e8b8d0cc54b1","sha512":"b157d111663bd4ec926f91723b6923000fce2739fa1850aec2ce6a1ad1390930631e619d058ae598446fb233c6802c6bb0ab25357aeff00ee2e968f32080d77a","ssdeep":"192:updj3F/EaTZy2Cv+5bE1J6QXIqrj+LGJLdsGVYQ69PXcRS5CdHt/Whlf7chRwRog:+hh8YqraLGJLdsFQ69PXcRS5CdHhW/7R","tlshash":"dd22d51bf75421a06a6b44d68776b3ba13309c8be20545943a8c10b8ef4174afe7b38e","dom_hash":"domhash6802b977b774660df1530d2b39e62db1","first_seen":"2026-04-30T14:24:44.822937Z","last_seen":"2026-04-30T14:24:44.822937Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"secure-help-trustwallet.pages.dev","fqdn":"secure-help-trustwallet.pages.dev","domain":"secure-help-trustwallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T14:24:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"secure-help-trustwallet.pages.dev","ip":{"addr":"172.66.47.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-30T14:24:42.77887Z","last_seen":"2026-04-30T14:24:42.77887Z","alert_count":4,"request_count":2,"received_data":22511,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"secure-help-trustwallet.pages.dev/","fqdn":"secure-help-trustwallet.pages.dev","domain":"secure-help-trustwallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T14:24:21.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure-help-trustwallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 06:39:56 GMT","end":"Fri, 24 Jul 2026 07:38:35 GMT"},"fingerprint":{"sha1":"2F:93:FC:1D:2A:12:26:1D:4B:88:EF:00:1F:A2:1F:08:95:C7:ED:FE","sha256":"EA:BC:82:40:6C:94:35:62:AD:16:76:29:F7:C3:F5:D3:E0:FD:76:51:58:13:A1:27:42:3E:08:FA:E0:D4:F1:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: secure-help-trustwallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 14:24:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emDC1hsFtcGrSGBeK9r9z5o%2F%2F1R%2B7XTTJwqzo0uf8T50X5RPthHIuvTzcNPUxTkmETdkf%2Be8lCgbqM5fDjqJbw0YGkPHYCO2Idz7w7jb2rvgCT1Ho3Du055sNhzR85Mk6aq87bLU6CCLmclMbCyr4f%2FpmVA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4735a3fb7bb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10510,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909), with CRLF line terminators","md5":"f19067f43af33d9062c579265510f62a","sha1":"26c83d182169625e9e7d438e67fb117403bf4264","sha256":"af734c1291b779c208a878984f9e08a60969766c6f999028c9d31c1b80a68c4b","sha512":"57ac5df12d21390ca3b847cfba9d490184dbfdd32a90732b07b9bed58ee571c5a8bba0055a66eb8105973959d1fdcb4a69a460fc706671e4541160fab62c850f","ssdeep":"192:GiGA1BgQXIqrc+LEEeuWsGVYQ69Puc2SmOvHt/W6lf7ohy8RovcgS:Tb1vYqrPLEZuWsFQ69Puc2SmOvHhWa7i","tlshash":"7a22b41ae74430a15a7701da8b72b3bad3319c8be20101a5398c11b5ef71749fe7bb8d","first_seen":"2026-04-30T14:24:44.826497Z","last_seen":"2026-04-30T14:24:44.826497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":46,"dns":29,"connect":1,"send":0,"wait":241,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure-help-trustwallet.pages.dev/favicon.ico","fqdn":"secure-help-trustwallet.pages.dev","domain":"secure-help-trustwallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure-help-trustwallet.pages.dev/","date":"2026-04-30T14:24:21.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secure-help-trustwallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 06:39:56 GMT","end":"Fri, 24 Jul 2026 07:38:35 GMT"},"fingerprint":{"sha1":"2F:93:FC:1D:2A:12:26:1D:4B:88:EF:00:1F:A2:1F:08:95:C7:ED:FE","sha256":"EA:BC:82:40:6C:94:35:62:AD:16:76:29:F7:C3:F5:D3:E0:FD:76:51:58:13:A1:27:42:3E:08:FA:E0:D4:F1:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: secure-help-trustwallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://secure-help-trustwallet.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 14:24:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwgY1q9BcvRaYZi%2FTOkLIgcQCgj3peR5kvLqwnQQTWYFh6bq5WrWOYZmEr%2B9fHUpjD0G1tJUvzgH6hpf9Xv7XWCHvKeE1tG1ue%2BcFeuuC9lOOW5ekPC3ZvUCST7PTbgDY%2FP4L%2FhujNlQ3OqiamxqjBkm9NE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4735a6a88a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10510,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909), with CRLF line terminators","md5":"f19067f43af33d9062c579265510f62a","sha1":"26c83d182169625e9e7d438e67fb117403bf4264","sha256":"af734c1291b779c208a878984f9e08a60969766c6f999028c9d31c1b80a68c4b","sha512":"57ac5df12d21390ca3b847cfba9d490184dbfdd32a90732b07b9bed58ee571c5a8bba0055a66eb8105973959d1fdcb4a69a460fc706671e4541160fab62c850f","ssdeep":"192:GiGA1BgQXIqrc+LEEeuWsGVYQ69Puc2SmOvHt/W6lf7ohy8RovcgS:Tb1vYqrPLEZuWsFQ69Puc2SmOvHhWa7i","tlshash":"7a22b41ae74430a15a7701da8b72b3bad3319c8be20101a5398c11b5ef71749fe7bb8d","first_seen":"2026-04-30T14:24:44.826497Z","last_seen":"2026-04-30T14:24:44.826497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"secure-help-trustwallet.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}