{"report_id":"28d67477-1735-4a29-83dd-a9eb74d50898","version":6,"status":"done","tags":[],"date":"2026-03-28T06:02:45Z","url":{"schema":"http","addr":"twalletcard.icu","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"twalletcard.icu/","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"title":"Trust Cards — Crypto Card for Everyday Life","dom":{"size":47397,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28508)","md5":"4f342c0d2434d7c074b2b68bbb646cd0","sha1":"921285040da8c57f7f89bbf0ad4e3c65650f2582","sha256":"86479c996a01f3fc4c55b23a8fb430a78ed0480163287a64ef22539ed9b4c607","sha512":"13feec031506915cb58c55d2e41262e307e015424d8a886a4a1f3122a9f7683c4f6cddf30fe56211b21bbb2bf8ed33749009f3b20add18ab4fc0bc60bc108cc7","ssdeep":"768:KyQYYsnB7cxksc64Jysq7vrm+CiBdYwMTYgIYRc09YwfsyYWYTYYGOgiYY/H:KyQ9Xx/c64Jysq7vrtMpnc0hbEG54P","tlshash":"7023d9113048163d792b86e4f7d4b73ca039f141da63881df29d04abbbc2fe4696abd4","dom_hash":"domhash599736717196a32c8b7f458bf0fc1ec1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"twalletcard.icu","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T06:02:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T06:02:23Z","timestamp":1774677743,"ip_dst":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":52192,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-28T06:02:23.722177+0000\",\"flow_id\":1952567008371686,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":52192,\"dest_ip\":\"144.31.157.98\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"twalletcard.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3975,\"start\":\"2026-03-28T06:02:23.664550+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"twalletcard.icu","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-03-28T06:02:50.994568Z","last_seen":"2026-03-28T06:02:50.994568Z","alert_count":42,"request_count":42,"received_data":9593137,"sent_data":19273,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":5,"received_data":140350,"sent_data":2820,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":9206,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"drun.bigpopeye.lol","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-16","domain_rank":0,"first_seen":"2026-03-19T20:30:22.316646Z","last_seen":"2026-03-19T20:30:22.316646Z","alert_count":0,"request_count":1,"received_data":626382,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"twalletcard.icu/","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"41e4fa52b0399806be9f7a2258d98345","sha1":"c2b87dbe730f712d91076b71be4eb21b45d87339","sha256":"2fb460be88d53b333659747779098754eeb3568f2bf5c4d3d7e3948790ef231c","sha512":"6339a92670ae7eb7620a4d75dde3ebc401f91d5a12bc7ab822f502332075f18a1efd4938089fa4534327538db356b79de905d0843136f9661e4f2cc20b608023","ssdeep":"","tlshash":"1cf0a39d3c66f0a737fd3675c633966f37650b0074c35524c645cc2468645961886d4d","size":444,"data":"","first_seen":"2026-03-14T23:06:22.704458Z","last_seen":"2026-04-13T12:03:47.854878Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d3d1b4e9b9952e770397296c14741a2","sha1":"549e6cfaf267e124c50b593d5469da33946e74bf","sha256":"71300d673f688a3899e7974234394eca2ddc22acc3aef0b83b0fa3a99d99c357","sha512":"9d8fd11c03f178a86a998d44397009e079909cc3b705236f14610624105037e3927842371e346bd7fcc5eec243f496d67d843247463c51639c475468e6af183a","ssdeep":"","tlshash":"ed11efaab4a37db6067fdc7a539fbf80376440031409da11784c800d8fc8b5414f99da","size":1080,"data":"","first_seen":"2026-03-28T06:02:56.770906Z","last_seen":"2026-03-28T06:07:50.613654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drun.bigpopeye.lol/sdk/040e4d602d674ba5","fqdn":"drun.bigpopeye.lol","domain":"bigpopeye.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"615d1e3fb8eae1544739d663c7d57b40","sha1":"4cdd42f8dc99f95d4eb9a916c902c998e5273d28","sha256":"3fd2bd2b854c2a0fcd7cfa35b0798d169274cfbdca094a66085502c8170dceb1","sha512":"5a4cbada214db05b63cf013fa30392ebd0ec689bc301bf6298788aabc8f1b9bc489309b2f6d1cb5c84d5b353dc65aa32d16f08cca7a8660be652620410449207","ssdeep":"12288:uyTqKewUlQwyXsDWvpHmyFKnFTyHX5m35buSMqM540nwhFl592x:ugqKlmQw/DWv2TyHX5uvMqMtGYx","tlshash":"b1d45b9073a1b07643d755e994371101f239a824701d80acfbacedef7da598a867bf38","size":625762,"data":"","first_seen":"2026-03-19T20:29:18.605799Z","last_seen":"2026-03-28T06:07:50.598775Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/js/main.ab03b56e.js","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb4f806e2ab4b3167629ca2045e95ace","sha1":"a96f523a4a2f9f5c28b1532ddb334673fbdae1b9","sha256":"cda5a12cd48e94a29b768b0ab6cdbdcadb6e10ec14766d892040781d41d32064","sha512":"a4cf7129e03063b82bcd627f1dbd924b646eeb54d2f9950462db6725896dbfe5c4587c8a33a5311b2104de8734fbd422ef7300db60625ba0a4ff7dd463f7f602","ssdeep":"","tlshash":"c4115ee9baea656373e72134057e850be0345b32184ca0e079376995392448abf66df8","size":1000,"data":"","first_seen":"2026-03-28T06:02:56.773446Z","last_seen":"2026-03-28T06:02:56.773446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit2.ef47dbcb.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit2.ef47dbcb.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-3.bb607f00.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-3.bb607f00.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-17442e\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1524782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"154b07812705f948c5f0fb9ea7f8a647","sha1":"3cd47cba0a9b1890832a8b005da438d713b6b7d5","sha256":"f7e34ebffd3f342aa7980e55ddafc647d3b5f8b3eedac37f07c27884d96bf73b","sha512":"8e9c5b98c1bd4af6e12eefaa780b7961d1b6e4c790fa9f1a989674ad01aa482e578cd629d3c48f34d8fc6006068a68a03d59446653ae82e0ddff48fc17c1dd12","ssdeep":"24576:wBF3Y6bvUpI8a4tHdGwxErQ92Y7DicZQismJ8hut2f7vH:wBF3ZO9kwxd7tsjH","tlshash":"512501726ecaac8f1f889828f1df8ed65f6c573784096eb114133f475a5860a53dc88e","first_seen":"2026-02-11T15:17:55.579705Z","last_seen":"2026-04-13T12:03:47.84097Z","times_seen":22,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit2.ef47dbcb.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit2.ef47dbcb.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-346b\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a4bf8d0dd48561b2b531f16994573da","sha1":"9e5547a87fcf112dfb398bfb61ebc00e7025558b","sha256":"5884f2c20f92ec8866d09edda61027e0ce2e6666e0bf45b6ecad192bfde48f1d","sha512":"dd50bd6762d7dcb5290f02d8dadd26426d47dc6820979ed38a4ff0e7122fb6ceaf1318792ec2666d6d5f35d414e8fcd83eaeb6eccb19023556e1489870d8a1e0","ssdeep":"192:35nvZrCCypp07LmxZRkaVuVefXg9NT4X4w3RM7GKcmxZnefXgykaVut8:3pxr2pO/m6aAm2eX4wh4GfmE2aA2","tlshash":"665294ce33188dfcf95297d6d30371a9316680f75a8192a4ca361e3e244648edd6bec1","first_seen":"2026-02-11T15:17:55.632619Z","last_seen":"2026-04-13T12:03:47.84609Z","times_seen":26,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-atm.a814be3c.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-atm.a814be3c.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit6.3b405dd0.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit6.3b405dd0.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-1.43fc2769.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-1.43fc2769.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-1b5dee\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1793518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8010fb3f37959329af30771296fa662","sha1":"58713455d38aee27a070785f50376c4a8c9e721e","sha256":"01c8a476cfadf19e594674877e4d7f97d72138b773bf9c5d26e2ed751ede6989","sha512":"a6dab64d93a1b02d9f0a45482786a8777e2d39a765d11901c6f92a53a8ffc4b40e2bee0df5007c60a8f8fc39e44fed9eae17bf40b31cb2e34e881215fa363fcc","ssdeep":"24576:D3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:bfuyyP8FgFhB","tlshash":"0f252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.647458Z","last_seen":"2026-04-13T07:57:42.28613Z","times_seen":20,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-2.e47554c0.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-2.e47554c0.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-1b5dee\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1793518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"679dcc59d1ea87802e916859080e6aba","sha1":"5af66ce9537d54796c53a52f689d7e93881f83b9","sha256":"a116d33afa3d2361896caa270db16978e68ead2bed979e0b5cdc6834421ee203","sha512":"6f457c81a67d1fa297759a25e6a630816ba5a51bc85ddd637d78163665a50cb6f0fca73e336c0542d5b725daabda216788fb8ecb1716d7846f876c22bb46fda5","ssdeep":"24576:J3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:VfuyyP8FgFhB","tlshash":"b1252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.590228Z","last_seen":"2026-04-13T12:03:47.8352Z","times_seen":26,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://twalletcard.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 24656\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T19:55:53.598728Z","times_seen":9207,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":121,"dns":0,"connect":15,"send":0,"wait":11,"receive":3,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://twalletcard.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 24656\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T19:55:53.598728Z","times_seen":9207,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":127,"dns":1,"connect":32,"send":0,"wait":8,"receive":2,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://twalletcard.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 24656\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T19:55:53.598728Z","times_seen":9207,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":129,"dns":14,"connect":11,"send":0,"wait":8,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 06:02:24 GMT\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-04-22T19:53:27.397533Z","times_seen":569,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/trust-3d.12ace292.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/trust-3d.12ace292.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-1.43fc2769.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-1.43fc2769.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit3.ab8ba3f5.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit3.ab8ba3f5.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit5.c3a92c69.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit5.c3a92c69.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/trust-3d.12ace292.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/trust-3d.12ace292.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-308d4\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6b416e21b6eb6802ef0eb49df77e2a3","sha1":"702da2208a3c46ab97e56c090aac208174054631","sha256":"f3406c7d3b9ec1ae7b41f49533d2986658c0d9a9e139e10fa57135501e613c38","sha512":"bc61f6172655197df8de1d9693e786ef36daf50c424598f4bbd6d3f19f3c0b849ddd010168c75cd343159090bbf8ecaea0dfa656fd51b7a83aa6130e8c814586","ssdeep":"6144:X7wj0Hgf5ocXCDli9Smpr/JpVDs98mVhTaiTo:Mj0w5ox40CpVDs9Fa","tlshash":"8e1412889faa999ec1cc203583ea0596bc2d20c33ec7dbeef63570d492cca555294d72","first_seen":"2026-02-11T15:17:55.603515Z","last_seen":"2026-04-13T12:03:47.8374Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-applepay.6751f94f.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-applepay.6751f94f.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-c31\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3121,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53879fef3094056b88c848a90c691f97","sha1":"0c8ba50f490d8ad17a27628b3aed7b2772663dea","sha256":"7bf6c3f39e34e80923a1d7c20a70907d5095278a3833ca022b1fee0930435eda","sha512":"855803c8ccb427e59a4017f59373d3cd4ab66b1463f1f60c2b637e94d7f3417f81334c94adde9095f3d38a7b0104fd11584f8a57d912fc438b9eea7161ab4c78","ssdeep":"","tlshash":"3f51b351a3a9c22cf100daa5c35aac34311725cb6d19c01cc7f06f1bc9a486e0ebe9cb","first_seen":"2026-02-11T15:17:55.598026Z","last_seen":"2026-04-13T12:03:47.844387Z","times_seen":26,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-6.3a7ec7b1.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-6.3a7ec7b1.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-7bcbd\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d98f60d0f1e584c5a31a48e2771e2ff9","sha1":"64986489ae3eee8af3180db20370fd3a512d93c8","sha256":"ef154187de3d627f4596396bac0c41502996cdf2273959b3b583c06ba24a69e4","sha512":"7054312977ae826d988fb9976759d3868bafb2ab6c02174ccb4ae7800f41af83b9d188c586df09218ce3883d894fa96756bd16bab2dcd103657c04e0d1990e23","ssdeep":"12288:eFFFFF2YsSm6y+9xyzwisudXPg7aj51G/5YKn9nTJ6oQjPYtF:eFFFFF2YsSm6y1M9uRBG/5T9TukF","tlshash":"6eb41330bbb29ed958014b3435688707ece4798926dcc9d48b9dcacb66ef73d8c5182d","first_seen":"2026-02-11T15:17:55.594612Z","last_seen":"2026-04-13T12:03:47.845214Z","times_seen":24,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/js/main.ab03b56e.js","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:23.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/js/main.ab03b56e.js HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 28 Mar 2026 06:02:23 GMT\r\netag: W/\"69c68fb3-80d86\"\r\nexpires: Sun, 28 Mar 2027 06:02:23 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":527750,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"11fe1b6a8d8988a712aea57a1b0502e1","sha1":"39a9434d2032c4020ca54c9f9604833068723593","sha256":"d52a14e39536d10900289aeefc73903ac160d3c652ce5bc08ce3a26549533c01","sha512":"1f6d3ab8d15e8520abc5e235e0f89c962d760a330f34bf36ffd2e6f00ddcfe5d72bebca9f76e79b1980e465a7294d15d776662f8e185196114e65fa9600a4454","ssdeep":"12288:YKa/g+H62aBjCVYvCi96Zhft8kD806ZKKvtkdba06U6ZaN:gz7VXRKvedba06U6ZaN","tlshash":"1fb46bc47192b064abb701e3906f2615733e5a09340d8864b23cedde7875a89b17bfbd","first_seen":"2026-03-28T06:02:56.741863Z","last_seen":"2026-03-28T06:02:56.741863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drun.bigpopeye.lol/sdk/040e4d602d674ba5","fqdn":"drun.bigpopeye.lol","domain":"bigpopeye.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:23.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigpopeye.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 15:45:26 GMT","end":"Sun, 14 Jun 2026 15:45:25 GMT"},"fingerprint":{"sha1":"91:26:06:5A:C8:3F:CE:DF:CA:2E:C5:3B:AA:6A:39:68:4C:A4:4C:F9","sha256":"CA:D6:F0:3F:C1:1B:FA:C6:66:1B:DA:21:D4:1D:7A:4C:2B:1C:4A:C6:ED:13:4D:D1:C9:81:18:25:19:C7:F2:28"}}},"request":{"raw":"GET /sdk/040e4d602d674ba5 HTTP/1.1\r\nHost: drun.bigpopeye.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nge%2BeFrNsGDYD1AGIarZEcoPN17cFTgFRAE9nvx57bBGlwFa1cBCey50BaK5NZ1vsMXySEP1nrft6%2B64LyKJ6ElEezdGjiHDunzsU59HzCoZJZ57%2FxehF3wZD%2FoCs3Uac6t0CzU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e346cfc2d2956bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":625762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65293)","md5":"615d1e3fb8eae1544739d663c7d57b40","sha1":"4cdd42f8dc99f95d4eb9a916c902c998e5273d28","sha256":"3fd2bd2b854c2a0fcd7cfa35b0798d169274cfbdca094a66085502c8170dceb1","sha512":"5a4cbada214db05b63cf013fa30392ebd0ec689bc301bf6298788aabc8f1b9bc489309b2f6d1cb5c84d5b353dc65aa32d16f08cca7a8660be652620410449207","ssdeep":"12288:uyTqKewUlQwyXsDWvpHmyFKnFTyHX5m35buSMqM540nwhFl592x:ugqKlmQw/DWv2TyHX5uvMqMtGYx","tlshash":"b1d45b9073a1b07643d755e994371101f239a824701d80acfbacedef7da598a867bf38","first_seen":"2026-03-19T20:29:18.605799Z","last_seen":"2026-03-28T06:07:50.598775Z","times_seen":6,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":102,"dns":91,"connect":1,"send":0,"wait":185,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/css/main.ea17d832.css","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/css/main.ea17d832.css HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 28 Mar 2026 06:02:23 GMT\r\netag: W/\"69c68fb3-1358f\"\r\nexpires: Sun, 28 Mar 2027 06:02:23 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"20a25685e5eaac5fa9d7036db5e12f0b","sha1":"da27501a168ddf83532e32cebd5240cfd771d836","sha256":"2cf3fd80e3194aa169b8b2e1fe7c9d3a0a50017e1b190f29717a244fbc77f017","sha512":"535e3c1d667e21125976d48077a36496cff1e996f44edffd906da43428624eeb181a8619307a5e1e97c1be29c1d9d6ba5ad37365844daa54a6e7886d24888430","ssdeep":"384:PBPT9j9Z35AQFOjY/ICMRuyd72lkduXpKUL6GaIbH7Cb5SgrlgDv6F4+oreR:PBPT935ZFOjY/UuodiKIbHWb55gDv6Fl","tlshash":"a8739504b1b59c3d3c2750f9a28d71ec631e70888c2e69a8bede10255fc23f5eab7645","first_seen":"2026-03-27T10:24:24.529623Z","last_seen":"2026-03-28T06:07:50.594657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/hero-card.eba158cd.png","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/hero-card.eba158cd.png HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-type: image/png\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: \"69c68fb3-3df94\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\ncontent-length: 253844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 495 x 430, 8-bit/color RGBA, non-interlaced","md5":"482395fc74bdf962782f213be6381fe1","sha1":"97bfa4c6753a928fd9098d04ac2cb99d6a2ef600","sha256":"59f1130a4f98e4076c2d934ae61513635295e0c92fa6c01295567b1d17196911","sha512":"b88b49a6d2409564dd130cf828fecdf6ed2f0a3df5e16c5c859afdd319840d14f246e34772cdeb42f20a4cea256bc4a96808a6875164fc983ba6789a2541cf41","ssdeep":"6144:eg9eXyLTOSmu0TfSaw31ymejiokpKrYDejAMYW:EXiPYfwlFeJkjDsAE","tlshash":"c54412007d78e11213c97ed11ae36022668f4d07f8af1dadb5ad91622f49fa02ff585b","first_seen":"2026-03-14T23:06:22.684114Z","last_seen":"2026-04-13T12:03:47.833703Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-4.43307d96.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-4.43307d96.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-51c11\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334865,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbbd3aab77cb5df884cf3a3b4aaa4c21","sha1":"c9442ec1d483e4e76b4506b5f23d9b15f1474656","sha256":"715103f9615c025f8758f7b2a514a93effc6b6ad62e508de1b6177e91d1a8763","sha512":"ff89024db537159b90d260d70735c193bd49b0b98c92352c146709198e895932cdb4ea72dd707d6b04c336590c70c34c37893fcac92f1ecca6ec96b6d76d0911","ssdeep":"6144:GUiwM0ajDICgS5J6B/oZ0+FtnK7DpyWFGLdDdPr+3CBmwvQ2tcD:GVYeZVOBQu+FoXpyW0ZrQWIX","tlshash":"3d642352de434d1ea5705d8e402ca4dcfbb809dca68064f89bd4b993c1cae62c769c7f","first_seen":"2026-02-11T15:17:55.607976Z","last_seen":"2026-04-13T12:03:47.847007Z","times_seen":28,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-5.723cd9f6.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-5.723cd9f6.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-33a0e\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3868b22ca7f77068f2edba51cb879f5d","sha1":"fe91e29b99959eb88558f4e78bece76ce23bd0fe","sha256":"4e58e1a299c1ce83b1695fe172ef5ffe3196da11e66ba6a2c28c79ce0451235f","sha512":"6b25bd1312de3bfa16ea450f081e27a0167c46cf4ff73cbfd5e5401875213dadb431d69c81d431b87e08ce9128b330cb1f6579ab2e322ee597325b95a101496f","ssdeep":"6144:7W7gNT/WbJNlDDxTtYOGwj4WYIUZVbeucmj:isJ/WbNxZYOmn6s","tlshash":"1324d0334547fdefbb278dd8e11a62209dddba93d684d24caf8458c126fb428cc615b8","first_seen":"2026-02-11T15:17:55.63009Z","last_seen":"2026-04-13T12:03:47.834411Z","times_seen":28,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-5.eda38595.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-5.eda38595.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-9f5f1\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":652785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1acce58393b8d5f1c6385c697a24ce06","sha1":"0b48578d14a22345b3940aa0b2d29ccbc546167a","sha256":"f1dbf46ff029294134b06f60fd4eddad1137d2c942abff449e62fa6bb060eb19","sha512":"96b9ec645765af648719350ef4ef6fd9bbce0e29714ce80d50b25c5ae2c34da320900f340b2cc27967d4fc481cd55e9f9cd36d4e1912f843581679dffce30478","ssdeep":"12288:2EL4JuXNMFrS0Ghr7LF1uB2IyTA84fNCuLEJ20IFbvsXsMHFQ:uJudwhs7LF1uB2X141eJJIFbvsXsi2","tlshash":"cfd423218ca71e3f46e5424960db0f4a524187f2c0b2ddc869ebaa679bbbf074447df0","first_seen":"2026-02-11T15:17:55.591499Z","last_seen":"2026-04-13T12:03:47.841999Z","times_seen":22,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit1.d2320f70.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit1.d2320f70.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-70fc\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28924,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2b45b63af2e789e308494b1c39eb30b","sha1":"a515a2b4874b574c8b8867806098e4f9911e4f11","sha256":"c4db6bb328ef78023c9182449c928af831feb01021d4bccd650b6d0c354c12d6","sha512":"bbdc3a13ac7aaa13973bac44c15f9e33b8a381ee94405a669b4069dd61649a7f94d92d6714555f7d52daf70b6576bdc93d93d439f3ad0dc0598310acb63b2d08","ssdeep":"384:C4qAlAemnXq21Ig9JX5k5Z0XLeeUUUoULEsfqEqklflsKcPez:C4qxemLPDGCMhN","tlshash":"60d2c7ee37140cbafc16d3eaeb0220bd502b54bb6ac55720c6299b29344685dde7fdc1","first_seen":"2026-02-11T15:17:55.635436Z","last_seen":"2026-04-13T12:03:47.843453Z","times_seen":26,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-gpay.74ade32b.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-gpay.74ade32b.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit4.0da0d506.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit4.0da0d506.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-gpay.74ade32b.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-gpay.74ade32b.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-f12\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"144cd7f5e058ae369c19542a08627e7a","sha1":"c7f8d5051e0744b7c01af5dc769487ec50bdb4d7","sha256":"a798f68230bc09009c9a87e0275d3495252a903910eb8556166b334a75841067","sha512":"17f295ffaec8488432a9919472c78e1d8c735a4b621e1a4a99c8d0eab77dcc29e3849a5bae9c8a54d783099bb46ad02c578786cfd48d65310554ae2319c4b200","ssdeep":"","tlshash":"ab81b8187729c6bee040e5e9960bf818248b69c77a10c1adc3a15c0fd4a490d8defecf","first_seen":"2026-02-11T15:17:55.618549Z","last_seen":"2026-04-13T12:03:47.848156Z","times_seen":26,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit6.3b405dd0.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit6.3b405dd0.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-1bce\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09a9977bfe977ac4e405eb0ba43f07d2","sha1":"90d4b8bb58683e2076e248a67759331f883befbf","sha256":"278edfd8be3da161082664057cfb31bf4f2c416238b9380f47427495c9d69db3","sha512":"52020259721f5b96b18870d0ec8710418ea7798a64b3a2aff1956f8daa105a0fd3dc60a951d81122c1a456f6413911bd9feb8d24b65f02f21a81af60c5983ab0","ssdeep":"96:cqhVKlr2fNV0338FAFfIDzIZrCfhUYa44VHH5ObSGmEOQa44VdbJQXiCKX9V4id1:BZNqnUmNJ5Ob3RuZ5jvqW","tlshash":"83e10cca3758497cbd369382eb02b27a606a44e317c4e630cb32593d285191e9dbfed5","first_seen":"2026-02-11T15:17:55.588479Z","last_seen":"2026-04-13T12:03:47.849088Z","times_seen":26,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://twalletcard.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 24656\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T19:55:53.598728Z","times_seen":9207,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":117,"dns":0,"connect":18,"send":0,"wait":9,"receive":8,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://twalletcard.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 23:11:28 GMT\r\nexpires: Sat, 27 Mar 2027 23:11:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 24656\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-22T19:55:53.598728Z","times_seen":9207,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":162,"dns":1,"connect":14,"send":0,"wait":8,"receive":3,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-4.43307d96.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-4.43307d96.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-2.e47554c0.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-2.e47554c0.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-6.3a7ec7b1.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-6.3a7ec7b1.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-atm.a814be3c.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-atm.a814be3c.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-c44\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ce6117830392d3c28b39a1d804fc91","sha1":"41b99e63a780f8c82ed2df7e0c580a160d854fff","sha256":"421076356a41c30f90b1c534c96f8722d7162b39cf0dc3f8219aa59060f72065","sha512":"e986578de58f51fd06671fb74f8853c8811b4d2b8902c925796198a609bf8cd742683b7fa17d82fcc47b23379e312c05a83d97c15a62e5cd12328ced6377a2df","ssdeep":"","tlshash":"6751a56477d8d235e000eabcc30fd07839068dcaa516c0d09be22d4add2549e8cbdde7","first_seen":"2026-02-11T15:17:55.585193Z","last_seen":"2026-04-13T12:03:47.838111Z","times_seen":26,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit3.ab8ba3f5.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit3.ab8ba3f5.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-171a\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5914,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf29f6b43683fa8462f27d6b643cc872","sha1":"0ca16d391a77d59bebad3d80ad8392d714b16465","sha256":"0cd370c7deeb7481811226d092c3854796df2a5fb58390f5298483bb22f8aede","sha512":"f44ca85002088eaf763b07480166e2593ba5485223000ee566104f5591cb18088d45696cccf9a7182dfd53582d7ca7f5e757de252a9ae452b28fc3ef182ce1ea","ssdeep":"48:bx0B6A+Ld2JJZdLXj3fALg3XLRDYL/atJJZUYb0ENQ+F5HgUBVJAohL8SLbFX88t:qBJJZpDFTJJZhBlGCZfvcUmckJiUcBcQ","tlshash":"c8c121aebb68dc37f559d3eeca01e139115641ab7580c260c1a8ef1f14164e6ae2fac4","first_seen":"2026-02-11T15:17:55.633592Z","last_seen":"2026-04-13T12:03:47.835903Z","times_seen":26,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit4.0da0d506.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit4.0da0d506.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-1e7e\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ce1bf382bdf03988579a134d40f3921","sha1":"e1ff829a2f0d8f5321d84d908e3cb93dab905bea","sha256":"127bdc6794f588cdc3bf94ab39138ed933ff68a8befe013421ec234002b351f0","sha512":"485bc45d14c71c02ece687f12b949a4636f09a2f5849e3f5834b86ad5a12d1f56b5f737ea56e8e402807c51777801598d9043fc352cc76b4f01e7ec3983e9886","ssdeep":"192:7o1T487sgBAXx+o1T48caSJkfVOBgHMLM:k1TNSXN1TCEYBBM","tlshash":"2cf185dd376856f5f85ac2e2ef12a038301b44bb56d0d620c6666e7c342a04dccbf6d5","first_seen":"2026-02-11T15:17:55.648367Z","last_seen":"2026-04-13T12:03:47.828398Z","times_seen":26,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/favicon.ico","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:25.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\nserver: nginx/1.29.7\r\ncontent-length: 153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e5ce34eaf229aa17afb04be7e217fc72","sha1":"53045799ab307eade6c83f67f90e2c242624961a","sha256":"3622fb3d7f5e0e4dd356f0484bdbf8f38616e102b85bcdd7935b4d0095e7aac8","sha512":"3856b6a3e14299e56a5107ae23476807862e1bf82d34dd88af94f40b01fabb74255a7b8cc379517dba32161d67edf0a116dbce059ebc034cb11fa4b85cee1d3f","ssdeep":"","tlshash":"b2c02b3d35137c4cc573317422c37490d0c6833764ba81228400800331cf2998ac33db","first_seen":"2026-03-26T07:36:05.089682Z","last_seen":"2026-04-19T21:42:41.220943Z","times_seen":26,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/hero-card.eba158cd.png","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/hero-card.eba158cd.png HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-type: image/png\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: \"69c68fb3-3df94\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\ncontent-length: 253844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 495 x 430, 8-bit/color RGBA, non-interlaced","md5":"e88c7be2591d782d112c76548af679d4","sha1":"d584de6a5ffe509f678b6e826dc330340aa3d0fd","sha256":"b2918eb243180c1e8b5035ed96669a385f957f77cfbce200fe553c8f677841d7","sha512":"2608ce956a63ff2c5b947dd4adc016dd24afc3d448473c57f69d112c246600744d7c40e73488a0fbdfd4aec540b1d86580182d884dee6d79b3e3ccdc2f37c677","ssdeep":"96:2SokEWR7UxNXrN3oBsc5ymWxD3r2CohkWj0Mgi:2Sokt7q5GuVKpj0c","tlshash":"6f7218247ef070517aa6ea321de63842ada25743c6c1ecc9b7ed0c164f02baa4c1f681","first_seen":"2026-03-28T06:02:56.765914Z","last_seen":"2026-03-28T06:02:56.765914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-3.bb607f00.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-3.bb607f00.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit1.d2320f70.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit1.d2320f70.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-4.36ad5464.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-4.36ad5464.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:24 GMT\r\netag: W/\"69c68fb3-186a32\"\r\nexpires: Sun, 28 Mar 2027 06:02:24 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1600050,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adc5f2dd7b9ccfc4d80f6d7ed41001d2","sha1":"c61416c26200b090ae3effff15962ffa54a61b66","sha256":"965dd02b6c2eab2627192c84cec836092a58005b40dbfb720143dcca17158475","sha512":"ff73fa662f487f0d063a335de1964a17e1ccad04bf0bd01ff43f3e6fd3e4cb904ee697e43ce9c5aba0f67e5e9445f81a6f8a1b54e02c23573e96d481fcac8df0","ssdeep":"24576:9t8lL6KOKa8OA3PUjlSI6FkSzXB16RhBdynoC:h+MCUC","tlshash":"942512933b17ec2f421c84b470efdc135a8174bb85294df29253b7879a52a8f457eac2","first_seen":"2026-02-11T15:17:55.609398Z","last_seen":"2026-04-13T12:03:47.82754Z","times_seen":22,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/benefit5.c3a92c69.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/benefit5.c3a92c69.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sat, 28 Mar 2026 06:02:25 GMT\r\netag: W/\"69c68fb3-3417\"\r\nexpires: Sun, 28 Mar 2027 06:02:25 GMT\r\nlast-modified: Fri, 27 Mar 2026 14:09:55 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59713ef77a363413e687273f3c145458","sha1":"c85e8654571a7cd077a5e1b33776ae5d12289298","sha256":"70ab05b92fc860eadd89931c47f692666948dd7c27717968c09661f534791e96","sha512":"78a5ac9cb055867ac0399a25cff36de30a53b14a3ff3a69973cce6d2aac5ebbedb66fc48bc997414b907f4d00df0a49407da83246199803bbfb4ceade5fff0d4","ssdeep":"192:W9KM8HsKM8HmHna3jP7U0KSq0cS0XVcBqhdqvrXqVNdxn8DD1SHSfWnznyH:kintzjUTRXV4q3RxnUD162WnQ","tlshash":"9052b6dd33a44ab8f42287e1d703a1b5205e60f7aa95a370cb656f7a245615ecc7bcc0","first_seen":"2026-02-11T15:17:55.650976Z","last_seen":"2026-04-13T12:03:47.838878Z","times_seen":26,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"144.31.157.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T06:02:23.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Sat, 28 Mar 2026 06:02:23 GMT\r\netag: W/\"69c6df60-1155\"\r\nlast-modified: Fri, 27 Mar 2026 19:49:52 GMT\r\nserver: nginx/1.29.7\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.7","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4437,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1174)","md5":"b61681dfc0397af31ca7d39abb925a16","sha1":"b78d3175f59b8ea2d80b9823efc0c036baf47aa9","sha256":"cb28ce60d601cba41447281c4eded7d09403fe4f8d2349bebaab4a23ac7d7cd7","sha512":"7f68db889ace5d5c3739b7c4de5cfd6a533be49da7bb2c7bdba127af9bcb3412d2446edff83ea6818dc9369167c8bd10d1a9c83533fcdc6f781a233b83d4f779","ssdeep":"96:zdzfNpDHFEpXpMp9Jwx4CA4jaAiwKRaB110gWkgCVsRuxJP6:xTNpjFFJwx4CA4jaAiwKRaB0OuExJP6","tlshash":"7e91945bac1788b42237d634ab77fb4923a881039545dd2a7ecc011d9fc8bc49ca178d","first_seen":"2026-03-28T06:02:56.768347Z","last_seen":"2026-03-28T06:07:50.585849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":264,"dns":201,"connect":24,"send":0,"wait":25,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/phone-5.723cd9f6.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/phone-5.723cd9f6.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/badge-applepay.6751f94f.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/badge-applepay.6751f94f.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-4.36ad5464.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-4.36ad5464.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twalletcard.icu/assets/media/coin-5.eda38595.svg","fqdn":"twalletcard.icu","domain":"twalletcard.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twalletcard.icu/","date":"2026-03-28T06:02:24.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twalletcard.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 22:08:45 GMT","end":"Thu, 25 Jun 2026 22:08:44 GMT"},"fingerprint":{"sha1":"05:BD:34:89:CF:8C:22:AB:CC:C3:1A:92:62:B1:CF:24:8B:63:62:11","sha256":"71:B6:78:36:FC:2C:D9:77:BA:86:B3:65:9B:A8:8B:18:9E:E2:58:23:53:7D:1A:76:EC:F4:D4:25:C4:41:C2:1B"}}},"request":{"raw":"GET /assets/media/coin-5.eda38595.svg HTTP/1.1\r\nHost: twalletcard.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://twalletcard.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"twalletcard.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}