{"report_id":"262ebcf3-43de-4ce4-a75f-cdfb36b4f295","version":0,"status":"done","tags":[],"date":"2026-08-01T18:01:38Z","url":{"schema":"http","addr":"trustwalletaus.com","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"trustwalletaus.com/","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"title":"Landing","dom":{"size":44817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21938)","md5":"e09e2e04a46fd0bb8c1fe46fe47dcd1b","sha1":"b8d6c2e8c390a62a59a5b8d36c6bfd0d76787de7","sha256":"b630ab33cbe40b617f00f97950dbb2dd0fb04051bcfdb674de1436dd3f4fe0f9","sha512":"0ab96520478f91b4d19f68d5dd67cda649972b7c9bb61d79be465ef81e46295ca9b745b4ff7b2c97f97389323c2e6a35bb9688394945be0ea298d70fb4a3d912","ssdeep":"768:2FXPXtXX30Q2WslfApjpKh18dmob2OrezoN5/cNUf/mS1uIvPUdal+GO8diHb2mJ:20nVR/Drs1I","tlshash":"a813753161502517929f3c61b3a23f4b77a6920a493655a122bc7f22efffca04645fcb","dom_hash":"domhashf7bbfdb6b853f145c7de746933dfa9fa","first_seen":"2026-08-01T18:01:47.022991Z","last_seen":"2026-08-01T18:01:47.022991Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwalletaus.com","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T18:01:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwalletaus.com","ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":16501937,"sent_data":3759,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwalletaus.com/_expo/static/js/web/index-fb672a71b9b0a458a9e110ca9873b518.js","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb672a71b9b0a458a9e110ca9873b518","sha1":"c846978ab3eed0e56c2eee5a0cb7dacef32b9c43","sha256":"cd9e8c35244381c1c87d4d7d006844bd4d5030dcd0eb15dc1da8cbbcc173420f","sha512":"efcf2c19db550f720cd6443898c679085ba22b27de94b35d8c8b1b2976daf357366faf50f7ada129ac5174e038e30aaff4adb68089b760c2d9faa903dfa1e0c1","ssdeep":"12288:OxgDd/IPWd6ifm4snNBqkI1oJRNxqDeImrfwOioCxjHh3cplYxeV4h5aD3:OxgDlI+InN+1mXxqKIky2poeChMD3","tlshash":"9c8539b675d0f5a192c784eb803b4100f22b2a77201a69d0f7a9ddddb9d548d70a3f2b","size":1824384,"data":"","first_seen":"2026-08-01T18:01:47.043259Z","last_seen":"2026-08-01T18:03:29.222311Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Animated: `useNativeDriver` is not supported because the native animated module is missing. Falling back to JS-based animation. To resolve this, add `RCTAnimation` module to this app, or remove `useNativeDriver`. Make sure to run `bundle exec pod install` first. Read more about autolinking: https://github.com/react-native-community/cli/blob/master/docs/autolinking.md","filename":"https://trustwalletaus.com/_expo/static/js/web/index-fb672a71b9b0a458a9e110ca9873b518.js","line_number":521,"column_number":6877}]},"http":[{"url":{"schema":"https","addr":"trustwalletaus.com/assets/assets/trustwallet-unified-finance.b15a04e5b49198b6e4b89fd2e2482936.mp4","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:10.848Z","timestamp":1785607270848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /assets/assets/trustwallet-unified-finance.b15a04e5b49198b6e4b89fd2e2482936.mp4 HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletaus.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-length: 9477562\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-9477561/9477562\r\nlast-modified: Fri, 31 Jul 2026 17:11:26 GMT\r\naccept-ranges: bytes\r\netag: \"1dd210f9e08eeba\"\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":9477562,"size_decoded":9477889,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5021dffb2da5da8747bfef154899bd78","sha1":"ddd2c9467fe8524d9f3f2d67131226d98855fa4d","sha256":"90c1fcf6e591bb475b121c0995fa951921dba99dc80b13a529fa3f35bbe883f7","sha512":"f76836a813da61d93ba81d769bee92108885c262d70da1c23e8f6471ff0bd613dc04085bd309f76bf7c55a3560238ed37ece27c0fa96e5b591e8b5d51ea3cf73","ssdeep":"24576:RmZcLXMyb3vRJ1WR1IuPpHD32+GvhLlW7uwvp0YbWFYokrJiG88W7:RmZqXMmRWRLPNDiCuwiYoY3ib77","tlshash":"a825332923607d21ffccaabc4a544fa975aa1143c739df0e8182fcc76d75e4096e24e9","first_seen":"2026-08-01T18:01:47.027081Z","last_seen":"2026-08-01T18:03:29.214335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1663,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T18:01:08.519Z","timestamp":1785607268519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1268,"size_decoded":1452,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e54d8b9e426356cb7f77014cb08e3d13","sha1":"9abc8d976c806222ce916f6e93be3c339fa22710","sha256":"842190d9a1127d73c29e20416ca652ae6d69848983fb514d62fe32320302b9ed","sha512":"23448e5be82e7b10294f4f4ceb1b7321503f45401aea5cd000babbcf1f781c71857aeced042edc88a68c7f6d38c897b50423a7d6199d9630cbd2b917a7e40a8e","ssdeep":"","tlshash":"de214446eff291874551423a1ae4f01a9f42d6cf43c8b86478cd66244f52f149ddf0f4","first_seen":"2026-08-01T18:01:47.030399Z","last_seen":"2026-08-01T18:03:29.217468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":179,"connect":92,"send":0,"wait":93,"receive":0,"ssl":379},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/_expo/static/js/web/index-fb672a71b9b0a458a9e110ca9873b518.js","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:09.464Z","timestamp":1785607269464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /_expo/static/js/web/index-fb672a71b9b0a458a9e110ca9873b518.js HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletaus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 1824384\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 31 Jul 2026 17:11:26 GMT\r\naccept-ranges: bytes\r\netag: \"1dd210f9e83a580\"\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1824384,"size_decoded":1824677,"mime_type":"text/javascript","magic":"React Native minified JavaScript, ASCII text, with very long lines (40267)","md5":"c07982e0859dcd956d447cc61a5aab37","sha1":"1f9525ed86f4b03eb5b2625976ee344a9034f07f","sha256":"263e4fb536b7fbfea60f677db67de4a859e9b102aae0bac9b301ad6f858133f7","sha512":"e3eb5aa6e3c1b318302491b124d662c9b758e2dcc1daa878d251fed5b64b2d9c00a0c1407b3ea376781f102323eb9fb37e2a51598ed9473a758307ffd89d90cb","ssdeep":"12288:OxgDd/IPWd6ifm4snNBqkI1oJRNxqDeImrfwOioCxjHh3r:OxgDlI+InN+1mXxqKIkyp","tlshash":"ca2538a679d1a6b19ae348d3807b5200f22f1377200e49d2f79adddd68d488e7097e1f","first_seen":"2026-08-01T18:01:47.033497Z","last_seen":"2026-08-01T18:03:29.219331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":650,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/assets/node_modules/@expo/vector-icons/build/vendor/react-native-vector-icons/Fonts/MaterialCommunityIcons.6e435534bd35da5fef04168860a9b8fa.ttf","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:10.790Z","timestamp":1785607270790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /assets/node_modules/@expo/vector-icons/build/vendor/react-native-vector-icons/Fonts/MaterialCommunityIcons.6e435534bd35da5fef04168860a9b8fa.ttf HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletaus.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 1307660\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Fri, 31 Jul 2026 17:11:26 GMT\r\naccept-ranges: bytes\r\netag: \"1dd210f9e8b870c\"\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1307660,"size_decoded":1307960,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", name offset 0x11e0c8","md5":"d64026a4598b04a7fbe0cce0d1452ad7","sha1":"17e293a6d9c9cb1b738a412f3e58c182144fb3a1","sha256":"4459bb11177e508d0ff5ac55ba7dcfbe4de87dab3d6cbfa14ffd20f1ea3675ef","sha512":"de672ba29a5339eafc5ee38e71c3a834fd0a3a2acdf46878d504097f9dace37a8313000357e48420e2fbc0716276ca4c183fd286c81eb37a70d1d013bdba17fe","ssdeep":"24576:szYBDYLDSOjaJZA7sj/N1ALFUDxdpr1AdqEdS5091JqPuePAituydp82S:eWHRAibS","tlshash":"f0254b09a3bfcf67d24be7bd48d1316671795810270763a38a8c6925a81ffe88cf4758","first_seen":"2025-07-29T09:15:12.424085Z","last_seen":"2026-08-02T15:09:48.71183Z","times_seen":181,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/api/client/me","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:10.843Z","timestamp":1785607270843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /api/client/me HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwalletaus.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":144,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/api/staff/session","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:10.845Z","timestamp":1785607270845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /api/staff/session HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwalletaus.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":39,"size_decoded":230,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5774a1176f1cfd7fbbee2e6606bc7950","sha1":"730d2dd979ba9b1e601b3c864335cf81ebe46635","sha256":"0a258353be79b78270e1032f699994577cf757d2c8523eecb52bf550b46676b0","sha512":"4f4d6bf415ff7be383ac4dc30defc9ea09ebe125969360afc167d8178505a83f2fbef1170d66c2c6b872a7154c8edbf1880e66ea901e540e032ab613936c4bb1","ssdeep":"","tlshash":"fc900434c1410c05d7040550c1001045034c5d3550501c4440111f1015cf05445750c7","first_seen":"2026-03-28T07:21:25.803401Z","last_seen":"2026-08-01T18:03:29.210375Z","times_seen":9,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletaus.com/assets/assets/trustwallet-finance-network.5998ff63ebe37c76023236f01a0d911d.mp4","fqdn":"trustwalletaus.com","domain":"trustwalletaus.com","tld":"com"},"ip":{"addr":"167.114.211.103","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwalletaus.com/","date":"2026-08-01T18:01:10.847Z","timestamp":1785607270847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletaus.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:44:20 GMT","end":"Thu, 29 Oct 2026 16:44:19 GMT"},"fingerprint":{"sha1":"6B:64:6A:19:99:09:52:F4:DC:6C:24:F1:96:53:24:82:F6:B3:8E:57","sha256":"81:2E:F0:13:2C:89:33:4B:C7:F0:42:CB:76:DB:DC:C1:A9:38:2C:95:75:45:64:CB:C0:61:55:14:0A:69:72:C4"}}},"request":{"raw":"GET /assets/assets/trustwallet-finance-network.5998ff63ebe37c76023236f01a0d911d.mp4 HTTP/1.1\r\nHost: trustwalletaus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletaus.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-length: 3889258\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-3889257/3889258\r\nlast-modified: Fri, 31 Jul 2026 17:11:26 GMT\r\naccept-ranges: bytes\r\netag: \"1dd210f9ea32b6a\"\r\nserver: Microsoft-IIS/10.0\r\nstrict-transport-security: max-age=2592000\r\ndate: Sat, 01 Aug 2026 18:01:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":3889258,"size_decoded":3889585,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6adf38e136ccaa292e835c2f31888c1c","sha1":"7ef4dc19354f7a6ec324ac9807d9ec304043a974","sha256":"0d7bb1e37537d27f41d94faf5409ce5b1ee7fd56e95ba69c0a05db39d6817cae","sha512":"3642b3ec8e42a0b0019c72cbf1e3cb6dd1b695e89e2a3d605847ee4af7a4c0858cc2a00b5883ba01a3aafb930a4072ddbfcff5da2f21bfab754eb19a88926b30","ssdeep":"24576:xOc2qRlNC5dp+qvQ78xABtMUyICp446Z1GfcOAims9:xOc2qRlNCXp+q4IxAMUcp4/1I7Hp9","tlshash":"91253372d730da21c112c17516985b46eacebbf0adead11bd1f3900c2a0968dd36b7f6","first_seen":"2026-08-01T18:01:47.040949Z","last_seen":"2026-08-01T18:03:29.212249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"trustwalletaus.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}