{"report_id":"2cf43765-a840-44d5-bb34-2712da8c3bf6","version":6,"status":"done","tags":[],"date":"2026-02-09T01:07:23Z","url":{"schema":"http","addr":"user7525.cardstrust.com","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"104.21.58.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"title":"Trust | Your Private Crypto Card","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"user7525.cardstrust.com","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"104.21.58.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-16T01:07:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user8884.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user8884.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user8884.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":209792,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":102684,"sent_data":2172,"comment":"","tags":null,"fingerprints":null},{"fqdn":"user7525.cardstrust.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-02-09T00:38:58.077177Z","last_seen":"2026-02-09T00:38:58.077177Z","alert_count":96,"request_count":32,"received_data":3793033,"sent_data":15013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-02-07T04:58:07.925962Z","alert_count":0,"request_count":1,"received_data":761,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":13550,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"user8884.cardstrust.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-02-09T01:07:26.015317Z","last_seen":"2026-02-09T01:07:26.015317Z","alert_count":3,"request_count":1,"received_data":1027,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/app/page-8a9219ce47171f16.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b41cb8bee169e04d3551cce3c78d19a","sha1":"a354739f8e4d93b5e93251be9050fde78a4a0d3c","sha256":"bb4d41a9bd6158528436c0f3e9c5cbcf746db53cf5159f8a5d318b6943d654bb","sha512":"1f8931a4bb3750d9642e1191371ec6c2155cf25dde92b75b7dadc0b152b033793e60fac689d49c3c25885f9a325c00759b19791be3dba459f64e5cef530066bf","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urcm:wLHGHq3XAqd","tlshash":"7a422855e494ebfdf92b19c459af504c712aaf84cb0a48f0b8bd78240b054f97627bcb","size":12823,"data":"","first_seen":"2026-02-03T00:54:46.491732Z","last_seen":"2026-02-09T01:07:28.129508Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/255-596a00806980443d.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb12f22d3ee41a590bd625af00a23d41","sha1":"2b7cf514eb3687ecbd99371012b0585477c2d1be","sha256":"0a743db7133b2a6d8bd8c230bb8b3160fbe76d47284fcbef956b5c80bef3ca1c","sha512":"6f1e0cbfd7143dff9f9cac780931fc89d97567e4343347273869f71f14d47237b5c9298bd35955375c22cd8bf926ccc5dc3a96550aa56b25528ca2690986f374","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXa7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNIrky/Sz:e79LmA+6y4r904Aj44RN0z/Sz","tlshash":"34f3dab636d0f8d107a780e5843b400af3291c3b146f74a0a3e6dcd975645dea1b3faa","size":173010,"data":"","first_seen":"2026-02-01T05:25:46.928781Z","last_seen":"2026-02-19T00:53:21.371537Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325456,"data":"","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-07T13:07:41.218432Z","times_seen":216841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fb776b9b61830f4a3006099327690fd","sha1":"56a74f6934c7a3d77d76ccf16ba3efc44967df6d","sha256":"689bcf03435df9e789eab9000183a1bbe59e0003ddda8c6223f3672b88160bb7","sha512":"58f587dd5c2f12b47f2060c3a5021b4c978f381f26c801f157ace690d330ddd00bb0b10454cd06b782499489a6608e88c1226931eb2852d4eaccedfbd7fe0596","ssdeep":"","tlshash":"a941d41f3044fa50bdb2cd57457b1e728889dc371238e27dae8eda2e583143f936a912","size":2256,"data":"","first_seen":"2026-02-07T00:47:07.881334Z","last_seen":"2026-02-09T01:07:28.132662Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42b9b574a43c6c3a4a2d3bb134478fc5","sha1":"a41dc28bbcff59a31e19b0ad7bad8a5251fb47d0","sha256":"cd96434fa65bed8e41d6deef38df916a296fc0ac07d1f63f2d5926ec5ff4fc1b","sha512":"1c0d9e40a7cd0116515ca70420879ea931fa7edf47649a0cb22267f8ab5ec947ddcfc42e5dc9b81cf57650995e12f286670206dc3e15597f0a2d216d19323b29","ssdeep":"","tlshash":"93d0129cd649e8559534445b107f0e19e0ccc96d43d9c4dc73e8cdd7c211d7c0384c82","size":272,"data":"","first_seen":"2026-01-22T00:09:05.874187Z","last_seen":"2026-02-14T16:42:11.28313Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/main-app-509a99aecfd543be.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"727d869b87bebcf3736f2b0b07ea3f4a","sha1":"e594dcba28637ce7afea29fd1db5a075b4842cf0","sha256":"f274111d77efcfee07cc6518d496952e139a719bc08fe22696e3e9344aa71e17","sha512":"ea4597bc53641a65c2e05aac2849c89b0b8b5a8d015c9f529839c37ecac790a5691020077c710275fb0125d5892a55a2e14d3bbc3164125f16b1eeaeb1166b23","ssdeep":"","tlshash":"3ff0d09a4f1cf92f5c26ad65fe97ace2285f4179202b4e616901de713c23f6dd2b0408","size":569,"data":"","first_seen":"2026-02-03T00:54:46.47205Z","last_seen":"2026-02-09T01:07:28.102784Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","size":168266,"data":"","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/app/layout-8daf250c46134e18.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc6ffa2f31070a3a5ff1835fc89f38f","sha1":"820cfb42438801bfc73e6fad24287cbb7e18a470","sha256":"e119107a149d8b789eaebe7dfff632f6f01e4c4a8533e67d20127f46066f6def","sha512":"4435cb7a027d712cbb102a718302fe1f7b04b211a02b4b37531b275a2fb9c36ae81aea94723e9e055620e980a0fd4670615d149860abd9af32388b84804d78a4","ssdeep":"192:q3A4ny5iGTiQOTiYdK8xWYT0JbJAvpfaigAOpLIecEEn6gyxyrbB6:q3T+TiPTiYdrVTSJATlVCz","tlshash":"7a22d9d2f285fda8a53905c4d42b491c321a1f61d62e8c60bab9fc9b2095dc8b1b1fcd","size":10543,"data":"","first_seen":"2026-02-03T00:54:46.48038Z","last_seen":"2026-02-09T01:07:28.128905Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48aee6a15db79ea057d4e341c6ed5d91","sha1":"8e753d144d760caea03cf3f4ae7bfa7cff833f24","sha256":"514be39206a8c450e93957489b3dcbdcc3a8ced46c4dbaccb6191fdda399c535","sha512":"caa4394bf7f3414770c005c191d01fd062bc39a75eabb6480d40c463d888f963e7916405ef7fb9e80df5e03dd2c5ba31b8012b40c1581ba30d8ccca4b043a8ed","ssdeep":"","tlshash":"b2d04c88211b4c7156a72a454f6fb604b056621294919b217d1e63485f21e17d754854","size":224,"data":"","first_seen":"2026-01-10T14:02:29.698224Z","last_seen":"2026-08-05T11:33:34.350947Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"729d0e16b8d5c844c18c7a836c291a21","sha1":"a7be6683d92ee9a7299e8ef3f6f8c140d16b80da","sha256":"33c04aae98e22c3375f798f6eb483eb25063b4489dfa04cc59696e310b988b8e","sha512":"3076cc7ad12226da5d881e4a3eb4a86d99e35793a52a768f3907f0a9284230da915772294a4c13879cf63623fba1c96c75aa9dfd78bb758108d22fe129137da8","ssdeep":"96:Lm+X9uhN6Bte7mWte7cg1xqzc/xmW4Ytap3EZz9C:FX4hN6npWhgnqzcpm/YtaF","tlshash":"caa1fd6e6409cd5bec6d3d69027ead3a20cd456b42d1def8baccce040b4247a3796dc0","size":4994,"data":"","first_seen":"2026-02-09T01:07:28.134327Z","last_seen":"2026-02-09T01:07:28.134327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8afcb6eddb3445bd548549b72ff844","sha1":"b8d618412912d76e21b58a10804a3c732f2bde4d","sha256":"3d6f3712674ae3b1aed160e028b177d34de2edca1a4b2bf2762581573ef84e4e","sha512":"f0e9109310d17a58e2847f9605f29ff6f5aa18a36c159b3e00418cadcc3dbb04040174169ba3a190df441c8d6418111e8a329e646c02ddff2011a93e2d0f5e57","ssdeep":"","tlshash":"ceb01278e011fea114b620726139f0c6325f504d196410601223a28c02443182703fc0","size":91,"data":"","first_seen":"2025-08-19T15:40:34.902526Z","last_seen":"2026-07-29T11:23:51.506106Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/276-dce618de7ee1b3a4.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc0a6331aafdbd115f2f63f031e9738a","sha1":"3d93c906dc365a78dcdd03eb0295a33f8627f62e","sha256":"3c062bd1fb8698e46d54e29894560a909497744871bc7f58c2724056c8353a4b","sha512":"48083e2d473b942360375f4b3cda4882f7191b383548329eb866c5face1ccc95581497c68a1f669852efc048fe7208ae37bae7e41fbb8aef1064027fbc0b41cc","ssdeep":"1536:7ueZ8HFH1pYWmyPvrb8ZANE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxD69x0sx:7uzFDP308LfGWfDbu8JO","tlshash":"60a34ab0277bb93c619a104d591a3208b1be9f98d90d4874b6bd2c3b565ccc0eae3fd5","size":107328,"data":"","first_seen":"2026-02-07T00:47:07.856068Z","last_seen":"2026-02-09T01:07:28.121062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/29-949739d660b8375b.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7647ae332021a09da3976015182ace9","sha1":"76622f20041d60733038b383d4d703f52bd20685","sha256":"155b8e013d48822ebfba6a66fcc3a768805093d908498cbb89b18b25009f96da","sha512":"d12ea3248263463fb144c89b13a8777af86317760e99e1fadb23b36462b568c516b76bc98c1f04f31779ab50fa151c33018f94401a5a4b78d608bf1536bf0917","ssdeep":"6144:YclbuCQV2S1dgNp7zF34OIWdjt02/dApvI+MYdDPSzzDQnb2RDbt1IcbOOo5jz/5:YclZQV2w+h7/d5YdDqTQCRDbt1IcbuN3","tlshash":"b4e40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","size":659247,"data":"","first_seen":"2026-02-01T05:25:46.932635Z","last_seen":"2026-02-19T00:53:21.400371Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/342-796d8f4ab871a48b.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15fcca91143f2591b55c1075cadffa44","sha1":"f154ff11f42f644d680118675b3d2a6da07e85c2","sha256":"a679021ad5d7b7df3537c48ddeac32fc681c36ed51dcf1eaaf4c45c2b96d6d51","sha512":"c6e87a7fdff06f5a4e43958f8a550f92f97245a91927ac510d6ca37de4030b921da3332835ee31217e27bd2b225d67fc19e4bc3e5dd9908d8910877131f0363f","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+ShpRnlmqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5hpRNyty3VZCRJjVsB","tlshash":"a1253a897752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","size":967451,"data":"","first_seen":"2026-02-01T05:25:46.945496Z","last_seen":"2026-02-20T08:01:05.504977Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ee5d1c0b4431a8f771c26358852afcd","sha1":"c313a7d7891ca36afc2bd09972aa3ec3337149d8","sha256":"590164a2b39633e0085e5646980220bb3ffc23febc9c777deba6496b2956f061","sha512":"e62f54aa21f0bfa19e10e1b43929f860882b950a4019f687d8264a9cc0f82825add1a85efbd61aee3ddc95cee3624edae329711b340feecdff0faae4edd10686","ssdeep":"","tlshash":"3cf0d45e2c53a45637fe357dc32b6a6b2752070374c2d805ba0dc4542fd49961c51ade","size":575,"data":"","first_seen":"2026-02-03T00:54:46.507128Z","last_seen":"2026-02-09T01:07:28.135973Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"067dab6ee593961c65e21ea30fa21d07","sha1":"80f6d01b4694eba2af6efe0e08d033cfd2ad2646","sha256":"fa68f9b6e048af728edb6e4dce32cf7fa952f9c11c66d67f4f8f25a67e77ffc1","sha512":"6aae4a1ed05e001bb9005c22a3be287ea23582fc768bdf9d72888f9d3c23885ee7b8a25bd9ce1c003126aa162d7f08f4b5ef2d67807db0c3ba6978494f92f844","ssdeep":"","tlshash":"38c0c090dc02cc1cc3b74f321c3b0c3921ccc5a503054146dcc9cd2819c1b3005b0dc9","size":186,"data":"","first_seen":"2025-07-22T07:14:20.941197Z","last_seen":"2026-08-06T12:32:48.397977Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d32f2f7249a03993ae19d14801b1aac","sha1":"382aa428c9dbc271f2779ac4123211d0301521c2","sha256":"1b63cf766747e68985a6f2813ec779a17a0d2a1432b2153df87874c538a11def","sha512":"d51b80591aaa2c041c33ddfc3ccd1f6d617d7ee247e7bdae35b382a0c754385faa3f55663b78f3f2e4250f4ebbe8204a35361b018463e70b6332360345d1e536","ssdeep":"","tlshash":"4b01dd416c7acc26ca26ecb68e7d7cf240cdca4d4b859d7605c0cc8a0672df0aea2f11","size":674,"data":"","first_seen":"2026-01-24T01:16:32.159401Z","last_seen":"2026-02-14T16:42:11.287675Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/webpack-30e6a7124fed3c34.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c136c12f640bd5c0654d069ae042a8e4","sha1":"89259c710bc69ba34c4a95671c8a4f04e9736263","sha256":"3919f0e6732a9754f9d195f1cde4a044f01cedd40e3acc7cd5256e9b31f9753e","sha512":"d0037322325ee9476dc5bdc698d651f424ae683217fecea84e7d2020f37f462c538a573ad46e7ab4bf6dcac50dc5d3b86a6fd46beeeadc1ddcf2b33ba1e4b6d2","ssdeep":"","tlshash":"4371c4a53665eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","size":3587,"data":"","first_seen":"2026-01-27T11:05:27.45443Z","last_seen":"2026-02-14T16:42:11.273256Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695053,"data":"","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e3c29b811c82a9398a1c5cbb11b45b","sha1":"06b9d2c78aa0b354339526441f3ed4d52e7e2eda","sha256":"4a31581ccb05a298032e11db82fb6e0fb3c7af500a71fbcd2b01058d9881de4b","sha512":"0d52863c373a91782be664dc100f3d30bd096272d70ea7415fcdcb130de289a0828a07ba3186a760147c7c37d21c76ca3f5597a1021d5d6db434ad81e90a343a","ssdeep":"","tlshash":"49900470d0410c575133001317fc7501555cd04c04413d401f75544f5451155f715d45","size":46,"data":"","first_seen":"2025-07-22T07:14:20.944135Z","last_seen":"2026-08-06T12:32:48.39996Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69694f58011069df806f7ad2dc049276","sha1":"5c8964f07939f1f6a1392176e34b46741febb9a6","sha256":"b967da77a9f3b3f708815a3d9d5049e4305bc4cdae34d4e484cdae6e1f13715f","sha512":"7dc6cca3cf3f6e88ecfa538246fa16b7e8c0ad877c1fb0fb65345d1e8cfcdeb9438e5020d999dc38cd70da27dfb343eda2fd71d614cc2464a5b0cfce57d35353","ssdeep":"3072:diKw0wG3Fo/r30161Iq0N7yryklQB/NibI+cxGzaxahdZjfrzB4MmqfO00upG:XwkoDIFeA2I++8hXjzB4fqfH0uo","tlshash":"541429c9b7c6706683a37578503f020bb17a7992f84cd8d0e182d8d42e74aaa5277f7d","size":209143,"data":"","first_seen":"2026-02-09T00:39:00.678424Z","last_seen":"2026-02-09T01:07:28.130627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 22:53:36 GMT\r\nexpires: Tue, 02 Feb 2027 22:53:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526405\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T13:12:31.108261Z","times_seen":37172,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":148,"dns":1,"connect":26,"send":0,"wait":24,"receive":6,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/logo.png","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 5903\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:38 GMT\r\netag: W/\"170f-19c0e63f763\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUFLPPC0tSUCvAKBLeZp353ukfF%2BNsGUTk1ukPjwx6yGmEKu%2FEJRsiLLzGfEXXwL%2BQZOaR1f5aWtnLh6cai6Y4GO0jxXb7IJZ2SWHMJdiwssGiIgLc8T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a9286d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 80, 8-bit/color RGBA, non-interlaced","md5":"e46d5731a7cc58448e0a45dd21153660","sha1":"647655a2eb69253c3ecaf2c0bb0fc2fb1ed1365f","sha256":"18a1e6c63d170b5a7ab8c36c347dca14238bb0bf428f42353324c439206fc146","sha512":"238ea78c6c1d1c9342d65e64047c8972029ff1b9fc7558b74fd3f8350fb1596d78d412d412e1e15be92ca47f7a151d75a12bda58e53f7cf63aa9a3c2a9c7c9e7","ssdeep":"96:BSxKB/OKn9O2RznPFIHQKa2peCppDAK10drUho06sMze5xhaaHekx1Zr7ccG:BSAtOYJIHM2pemp710pMo06sMzfGx1x4","tlshash":"6ac19fe22a24b7f83c96a379c360593c50dd363228464f2f6a60516df81e8fb875951b","first_seen":"2026-01-10T14:02:29.677703Z","last_seen":"2026-04-28T13:46:00.717468Z","times_seen":816,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit4.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit4.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:27 GMT\r\netag: W/\"16ba-19c0e610e28\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuEZjN55TDsEgT%2B%2FT7EBKP%2FLt2myrp8%2BG1LSdfXoFzkDLLw9%2BmNYAq1q7MPjL3MG03BPnjfAdmGnWXsKzkyBGv4uh1LkavfKVOltY0ZvEHxIKFTxD34p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a928803181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-08-06T11:27:12.916499Z","times_seen":891,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/css/734e034a887ccfbc.css","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/css/734e034a887ccfbc.css HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0O2Wj9JULRZwvz6nZuOpXyIqEi%2BMhDCdvVGyI1wj3OHxGg9DO8gt2TV6HX%2BS7jiMLmnx2wLTZVmn3ZVm90a%2BGBPGYSWpS7G8Uc%2FzUoOqE8hjMO50Mu8e\"}]}\r\netag: W/\"69832041-13b8\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a9388e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048), with no line terminators","md5":"ba3bdb50993068ec6da8f4018cffc0f4","sha1":"1350ec59a4fe0067e5effadde1fe480d412963c4","sha256":"612e61f371c1748529f786db52db2576aeb57106751725784014912271ac45bc","sha512":"3fea457273c2c8e523ae5935b56c97099bd2335c109065a9f41f0587519a6444c73240a9b90ce58a60c0ef97b28383fd7efaee0d389d39839a9a2c6b2b866421","ssdeep":"96:KKkZPJrxXZWp2KuoP283LkBRh7rKvQEISPhqLtfiQM3hqn:yPJXsDr7LktXKvK8heop3An","tlshash":"a5a1332361083118b127da51f8a15e9e3228b603d2639a9dff86713fc9c73758775e8d","first_seen":"2026-01-10T14:02:29.659232Z","last_seen":"2026-02-20T08:01:05.530055Z","times_seen":797,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/css/ca091db432343524.css","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/css/ca091db432343524.css HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8VlzH%2FED3yX6AWB9R35SSbIJZjhKJPKkx57A0TzoV%2FoEWAiYenDOoTID93wWiK8Qm0XQJit%2BDBR6tHIvPMkq1CZK0%2FqFwbmiBVbz%2Bo0x4Gh92sSK9UE\"}]}\r\netag: W/\"6983203a-1827\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a938913181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5060)","md5":"b7c8861d6ffeede8605c3e2e798a8953","sha1":"6aef66590704d99e0526d3998171dc4f6ae2b639","sha256":"63c155939d0e7e2367172ae4f2abbe606a8fb5e3287b166d0a88ab697e780988","sha512":"b1926d50f33d920cdd204cd44f6f4696ea10114927e4f79f7877480889ce3dbc03e70e3d3fa14cfefeb4e311110ee944bd85ab38a03d66ec35b3086a188f3d32","ssdeep":"192:n7gqzOi1+WT6RkwwDe/9ERSItcHJLVoWD:8k9SIM","tlshash":"7bd10021f657cebbedc4c8d6fb60351aa60a2194ae7915c2ff43270378db160059ed29","first_seen":"2026-01-22T00:09:05.836619Z","last_seen":"2026-02-20T08:01:05.524623Z","times_seen":796,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/main-app-509a99aecfd543be.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/main-app-509a99aecfd543be.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxIAgTvU4amPe7dyBYU3jUPuRrBjz3%2B9eOHBB9Gl8%2BytUbqu0kOjOadTc4%2Fz7UfEzYabKTsh%2FMiqi1BtbAnwtk3Z7okRGEHq1%2BA1Gb4TdjRiYSkpCQbL\"}]}\r\netag: W/\"6983203a-239\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a9489f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"727d869b87bebcf3736f2b0b07ea3f4a","sha1":"e594dcba28637ce7afea29fd1db5a075b4842cf0","sha256":"f274111d77efcfee07cc6518d496952e139a719bc08fe22696e3e9344aa71e17","sha512":"ea4597bc53641a65c2e05aac2849c89b0b8b5a8d015c9f529839c37ecac790a5691020077c710275fb0125d5892a55a2e14d3bbc3164125f16b1eeaeb1166b23","ssdeep":"","tlshash":"3ff0d09a4f1cf92f5c26ad65fe97ace2285f4179202b4e616901de713c23f6dd2b0408","first_seen":"2026-02-03T00:54:46.47205Z","last_seen":"2026-02-09T01:07:28.102784Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/342-796d8f4ab871a48b.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/342-796d8f4ab871a48b.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FndYSAMxya6irfj6A%2Bv8ZlykD9nA4TyGXoGYvmerQVmd7cYMZCFR9UfKUgWw7l7rRN4ukpvDffTJNlJAzyA8VhAXFCiXBmI03e%2BfLoSnCf1zvBrlnZ37\"}]}\r\netag: W/\"69832041-ec31b\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967451,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15fcca91143f2591b55c1075cadffa44","sha1":"f154ff11f42f644d680118675b3d2a6da07e85c2","sha256":"a679021ad5d7b7df3537c48ddeac32fc681c36ed51dcf1eaaf4c45c2b96d6d51","sha512":"c6e87a7fdff06f5a4e43958f8a550f92f97245a91927ac510d6ca37de4030b921da3332835ee31217e27bd2b225d67fc19e4bc3e5dd9908d8910877131f0363f","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+ShpRnlmqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5hpRNyty3VZCRJjVsB","tlshash":"a1253a897752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","first_seen":"2026-02-01T05:25:46.945496Z","last_seen":"2026-02-20T08:01:05.504977Z","times_seen":793,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/159-f9058d3a7fc08582.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSALM8NYuo4U1vLCoBzlPx1wx5%2BjdPI86g55Cr6TzajYWyNQ99tlt6P%2FjZpIdOVQjeQV56GZND6f3SanWf0CUgrY4ZUe%2BYOzlRB7LYXK8NYhmI%2F3KjUA\"}]}\r\netag: W/\"6983203a-2914a\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55784), with no line terminators","md5":"9b48774e437759df326f39d78dbf586f","sha1":"c32ef9d73e91386342b6c9a3a95ce1bd848abf8f","sha256":"ce9b92a6127c9032b4d18359c01619ceaba6b3ded056d4911e621933cfff8a3e","sha512":"b5df156213267203e907c5657d50e8aa86a39e35d49927dd1791a42d35013347f59127c1c1b0968f7301418ea9f8a7f4b476894b61fdf11d8418af2400db724d","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNS9EFxSyHI/3p1gy61Q:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1c3F2","tlshash":"06f31c014bcd29ba034b6387a849ad5e31a986f9778543f14ded987f10e2dacd13b70e","first_seen":"2026-01-24T01:16:32.151329Z","last_seen":"2026-02-14T16:42:11.263547Z","times_seen":16,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/intro-image.avif","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/intro-image.avif HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/avif\r\ncontent-length: 159172\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:38 GMT\r\netag: W/\"26dc4-19c0e63f90f\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BpCg5n%2FmoFQrAYQd3nyRm5aVJH%2B6NX58gwtMmhMYwRx9nO1TXDPoC6k6Ei%2F9zsPv4LjCotl8K22%2FrRwkrpq1Zn%2FWHymOcDuM69jKSI5%2Ft36QVzUdhdK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a9286f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"77e3c9b2f057c85598255546be9321cb","sha1":"fd799462adae9dbd39365b167ce15e391d1f0297","sha256":"efc10220b84b9e87313c50326e21df82f1c61ca6287b7a362624b3cdf87b666c","sha512":"f34e2ba69f6fb78c7804d5c5ec736a67f8f78a70436f08dbab887acb7df14359d3d584b46669d5cc56963e7fe795e4666061fd214f4b3836612c77bb1a1abfe8","ssdeep":"3072:3I4OafgtarybFxqcH+wnsTuNxZe2rYoP3u/Ql5d5CGLbCTnsKOfq:1SVZHdnPPzYo2Yl5ddAGq","tlshash":"38f312bad602cf85f993be3c310948b18e83d63a797f03735a8ca47d54b9e6e0d01695","first_seen":"2025-06-21T11:37:37.70886Z","last_seen":"2026-07-31T14:13:47.049742Z","times_seen":855,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit2.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit2.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:39 GMT\r\netag: W/\"29ee-19c0e63f9ef\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3F04u4Ik0s50ZXe2kMMJPWAJcubtwug6mOgoHmlE1S7Sf%2FCGVFvaihhVaaRxOXjZpdX%2FWXD3eyQix3PfLiLxLxrfwJJU4DSUGGQNwiT7t%2BHQuwPaKmd1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a9287b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-08-06T11:27:12.8992Z","times_seen":921,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit5.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit5.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:27 GMT\r\netag: W/\"2765-19c0e610da4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1o5rYgU0Yi1Z1cGV%2BrJOPM0BMQgHRAduukARoJKCXRCuufXC%2BXItIdKl9skrbHZKj2eONaEq5yhDEfks0XQtCN53YQpN9EHumZeyfeTMfA%2FiYhNA9fdF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a938873181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.73818Z","times_seen":1202,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/255-596a00806980443d.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/255-596a00806980443d.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaiVp79Bh%2F9CeNfaBwbZhqRAdEABQnbWe%2Br7kqGNcudkmS%2FONRDJreonrO9Q6AxT%2ByvVAPYSu7AQMt%2F%2FtSbmPChECwRBdpMW%2BvAichqr2X8dWNvQzrkk\"}]}\r\netag: W/\"6983203a-2a3d2\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a938983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173010,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb12f22d3ee41a590bd625af00a23d41","sha1":"2b7cf514eb3687ecbd99371012b0585477c2d1be","sha256":"0a743db7133b2a6d8bd8c230bb8b3160fbe76d47284fcbef956b5c80bef3ca1c","sha512":"6f1e0cbfd7143dff9f9cac780931fc89d97567e4343347273869f71f14d47237b5c9298bd35955375c22cd8bf926ccc5dc3a96550aa56b25528ca2690986f374","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXa7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNIrky/Sz:e79LmA+6y4r904Aj44RN0z/Sz","tlshash":"34f3dab636d0f8d107a780e5843b400af3291c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2026-02-01T05:25:46.928781Z","last_seen":"2026-02-19T00:53:21.371537Z","times_seen":11,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/aaea2bcf-5976f34e031a4e16.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhL4Q4UKsDqdoL0XCguNS4Ym4TZhXWqHzIswo%2FZijEWQsP5Wtvwzeis00x3FggWEFCP7TGAAQuqHEOd%2FBijSkPbOJLtR1LLsF4WbKo4yLpw50FnEcjMj\"}]}\r\netag: W/\"69832041-4f750\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:08:03 GMT","end":"Tue, 10 Mar 2026 17:08:02 GMT"},"fingerprint":{"sha1":"73:C7:4E:56:88:E5:CF:72:0E:94:F3:06:6D:8A:AF:FC:88:8A:F9:CD","sha256":"B6:54:2C:1C:36:F9:45:9B:A3:52:B9:CE:D7:F8:5D:38:C1:E3:7D:B8:C4:02:10:DD:4F:FE:6B:9C:3B:ED:4F:2A"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user7525.cardstrust.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 09 Feb 2026 01:07:02 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://user7525.cardstrust.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-27\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2c17d91c2fb25c9f99b5109277a3f616","sha1":"b98b4c5bb8f28a753c8193295a0e6e9ce16b50ca","sha256":"40ac4c37111be84c1513834ca25bbed1f2b840c700cba1be912e5b58e5bd90d1","sha512":"0dc037d50c0c508b916b1fc142d38fd94147bd3074e78db85ea8440ba42c426626b6385536638b5a8bb70ad8e8ee40a7e5972c78584ff58409654e5da4590833","ssdeep":"","tlshash":"f6c09b45ecdd50b553015d673cd0f2f9d0444614d7414515e0505f7dddd45dd45cd891","first_seen":"2026-02-09T01:07:28.109866Z","last_seen":"2026-02-09T01:07:28.109866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1437,"timings":{"blocked":92,"dns":20,"connect":18,"send":0,"wait":1252,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-09T01:07:00.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3icRl%2Fos%2BjYL2lSI7gUVbHKK5tldt9RZhRBiE4rmfTFTCGr5Ya%2BquOXH8R4EAEC2pVg%2F95EK9VnerA0KprSQAdkvEwcr28JB9yvvrdOSQS%2BuEIpgLQ%3D%3D\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9caf77a75b2356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":25554,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25531), with no line terminators","md5":"aa9c1187dbe19dce8da30716d02a6660","sha1":"d776494ff9ef6e5dec07591921105e85d9c9dfd5","sha256":"c44fabb763ce9e98acc1e11a9e1b6ff8590d8713ddf1a41a4f4058307c453fec","sha512":"c79e2f3b5b993bc4a105f4fe0e09b309d20d89968a94723d249769b0675ce5bd807fb4d947758efede7e5f92559992b3a7b2eda2a7a98cc7272be7ef54e53e49","ssdeep":"768:hrMsvzO0qJmXnQIIdFwqX7XhXtXhXoXVodIEKXRXgqbtqMH5Bl:dNJnQIIdFwqX7XhXtXhXoXVodtKBwVMF","tlshash":"3fb2db36b804fa23d6235ed9a17baf3620d6c119c65a8478b7dcca5c07d2d75ab32c43","first_seen":"2026-02-09T01:07:28.11224Z","last_seen":"2026-02-09T01:07:28.11224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":31,"dns":12,"connect":1,"send":0,"wait":120,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/flags/us.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /flags/us.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:29 GMT\r\netag: W/\"288-19c0e61145c\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA%2BRih31%2BqvaK2wqX01NAo7kgkFX%2BYhEmBCw3Dn9ANqIbcXnV5VenbncjPbZZBltnkgHn5iR11LcqRgZ1yNQL1Bor%2F6lUHE0QYviHjztqayI5ZyB8ITc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9caf77a9286e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-07T12:27:31.702218Z","times_seen":4356,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/webpack-30e6a7124fed3c34.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/webpack-30e6a7124fed3c34.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 01:07:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwACqSHEunbRe88DSXrdr3V%2FxA7YWSeKr%2BAXUwyLrfFUAq9LRno6ei3Ip%2Bt%2FAUyjJZj9ugAHnPzD8szWIIuxtItdpnJnprNkhygK8Kvb95hSy96ung0Z\"}]}\r\netag: W/\"6983203a-e03\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a938943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3587), with no line terminators","md5":"c136c12f640bd5c0654d069ae042a8e4","sha1":"89259c710bc69ba34c4a95671c8a4f04e9736263","sha256":"3919f0e6732a9754f9d195f1cde4a044f01cedd40e3acc7cd5256e9b31f9753e","sha512":"d0037322325ee9476dc5bdc698d651f424ae683217fecea84e7d2020f37f462c538a573ad46e7ab4bf6dcac50dc5d3b86a6fd46beeeadc1ddcf2b33ba1e4b6d2","ssdeep":"","tlshash":"4371c4a53665eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","first_seen":"2026-01-27T11:05:27.45443Z","last_seen":"2026-02-14T16:42:11.273256Z","times_seen":9,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user7525.cardstrust.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 09 Feb 2026 01:07:00 GMT\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-08-07T10:41:35.535034Z","times_seen":1474,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":110,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 22:53:36 GMT\r\nexpires: Tue, 02 Feb 2027 22:53:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526405\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T13:12:31.108261Z","times_seen":37172,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":153,"dns":3,"connect":27,"send":0,"wait":21,"receive":7,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/api/retrieve_id","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"POST /api/retrieve_id HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nContent-Type: application/json\r\nContent-Length: 161\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":161,"data":"{\"action\":\"retrieve_id\",\"domain\":\"user7525.cardstrust.com\",\"user_id\":null,\"message_ts\":1770599221254,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"18-aqka6m1PIhhggnuxGuUX94+cuBM\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OwF3kClx1qpTNZ7d%2B3Crc2hI51DedxvyNyMWcdM7zUrOmLmjugCUQjamUICStUH2K6hsIKjVledj7kcpvQnsqRGAs%2BaQbBdSQPs320r%2BHvF3MU%2BsCSe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9caf77acec693181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2fc2768b4719951b21d8d42adf80cc78","sha1":"6aa91aea6d4f221860827bb11ae517f78f9cb813","sha256":"b8b3ea982656c6fc875934a15e0aec730a1a1f3b876f0dcb099559b582e1311e","sha512":"1e4ac4d4f9740bfb39aa8c1b0a3c06ebca7cd284982455cf88ce45b8007ef330c50c2c51c8e2352e9ad73bf9fc90380f550877b1606fa64f15f8d6168baf4f2c","ssdeep":"","tlshash":"ad700000280280220c88088000008020abb03a80002e0080008ea82088802a0a88b820","first_seen":"2025-11-29T10:39:40.314123Z","last_seen":"2026-02-19T00:53:21.376666Z","times_seen":28,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/favicon.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:39 GMT\r\netag: W/\"2fa-19c0e63fb9f\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfwP7VOHlDWKKfkHSKrRQsQ9TtzUQMk7B%2B4j779LLQYh%2FHaWtER0yjPIWeueXzHLsgw1cKgn%2B8UrhMExHn0us6FBwD4eSwIDzpl93WRWjaTuFHO4UZfB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9caf77aeae203181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4z5zgjbZQ5sspXeIzDuOjcOVbDq%2BpHR5qA%2BfW4cPvHMAEMAEbqb%2BDR4qqmL9iUO1kQMBTaq%2FAqvtUElUaQsLQtNJKIn9exKy78cWyZUwNGnKseG5I1Pn\"}]}\r\netag: W/\"69832041-2a3e0\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a938953181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-08-06T20:40:59.886597Z","times_seen":1207,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/550ed063-ff1761c4cedc8066.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdQCdv8plAAdPxt2vYRbNY9BmONlPow6u6UwFddv5QLRe1Mi6XPXA6xdnO4g%2Bv9yQQEwf4TxClFzUUkZxv4B4hUYcQYS4hvItCNa1FiQSeSee9GWcy9c\"}]}\r\netag: W/\"69832041-a9b0d\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/276-dce618de7ee1b3a4.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/276-dce618de7ee1b3a4.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbrRLEUr%2BOHTP2O9%2B3Qt9AO%2BX9cEaOFw5mi%2F%2FU5OLztDYTuj4CzVZI5%2BvdkLlqEk000rTaeM6z%2Fl1DlSUkmBz0g7xSA2%2BRJkUm5gv67r1M6nbgKEvOOD\"}]}\r\netag: W/\"6983203a-1a340\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107328,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63951), with no line terminators","md5":"bc0a6331aafdbd115f2f63f031e9738a","sha1":"3d93c906dc365a78dcdd03eb0295a33f8627f62e","sha256":"3c062bd1fb8698e46d54e29894560a909497744871bc7f58c2724056c8353a4b","sha512":"48083e2d473b942360375f4b3cda4882f7191b383548329eb866c5face1ccc95581497c68a1f669852efc048fe7208ae37bae7e41fbb8aef1064027fbc0b41cc","ssdeep":"1536:7ueZ8HFH1pYWmyPvrb8ZANE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxD69x0sx:7uzFDP308LfGWfDbu8JO","tlshash":"60a34ab0277bb93c619a104d591a3208b1be9f98d90d4874b6bd2c3b565ccc0eae3fd5","first_seen":"2026-02-07T00:47:07.856068Z","last_seen":"2026-02-09T01:07:28.121062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/favicon.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:39 GMT\r\netag: W/\"2fa-19c0e63fb9f\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTV%2BLXOmKUrzeMRCwsCtKPCa%2BtTXz2PKOcYvtNCJ3BUkopx0q18amNUPMaY2kPA2aBRr11inF4e8Qb1G97vhue3xDCLkrDzMHushlPGntcto%2BhbZreUZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9caf77aeae1e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/css/4fbad9deea1ef1fa.css","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/css/4fbad9deea1ef1fa.css HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fr8CHlkKqfMFGVETB2yc721VoESinSth%2FSELVPpbbL5CT4WCQdtUhPQHYeNSGGbdC8svOXlZNHmiXpu1294j3yl3AvTAbnJLp07eWPqumCfWzXEioTiU\"}]}\r\netag: W/\"69832041-411b\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a9388c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16667), with no line terminators","md5":"2d0a2143aac6f815b607554ca2564f79","sha1":"c3ff9f22d08bdda8afa7233200826c212a187e31","sha256":"d53f0e2f90709acdbe6d9020caf805ad64e93dc1f0f63ce044b9b0f9cbef5408","sha512":"1112a55842c9d516c75b69c6ec0e60cbfb09a9209b33a5a78e27d376e4fd1dbda7a846b81e4fbea3ccebd1b1c26bb7f2a26765a13247663fdc7c63d77eec6d44","ssdeep":"192:k0c9Jo5X5lWQ9lTIIH2XqMskR/KKaad6P6bHRMosDgfr5sKC/Yp6zSaBsYh:ke5nIIwQhVDQ5Tol","tlshash":"7f7242319599113df01bdac3b4c2aece7158c903f1a70abeabd921afcec15da4635349","first_seen":"2026-01-10T14:02:29.686104Z","last_seen":"2026-02-19T05:47:37.1221Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/29-949739d660b8375b.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/29-949739d660b8375b.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SlJ%2FxeEjiAdpyJ%2F9gxiAzrdDGGKR82QcrLYGy7Z2KkJ4ayX0gq0ayokF%2BtMxVlgGBDXX4kYiRV2BWHi4ARp%2BbFB97dKVuH6%2B9Z7vLmSaZddJPC6AJ3G\"}]}\r\netag: W/\"6983203a-a0f2f\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a948a23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b7647ae332021a09da3976015182ace9","sha1":"76622f20041d60733038b383d4d703f52bd20685","sha256":"155b8e013d48822ebfba6a66fcc3a768805093d908498cbb89b18b25009f96da","sha512":"d12ea3248263463fb144c89b13a8777af86317760e99e1fadb23b36462b568c516b76bc98c1f04f31779ab50fa151c33018f94401a5a4b78d608bf1536bf0917","ssdeep":"6144:YclbuCQV2S1dgNp7zF34OIWdjt02/dApvI+MYdDPSzzDQnb2RDbt1IcbOOo5jz/5:YclZQV2w+h7/d5YdDqTQCRDbt1IcbuN3","tlshash":"b4e40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","first_seen":"2026-02-01T05:25:46.932635Z","last_seen":"2026-02-19T00:53:21.400371Z","times_seen":15,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 22:53:36 GMT\r\nexpires: Tue, 02 Feb 2027 22:53:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526405\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T13:12:31.108261Z","times_seen":37172,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":95,"dns":0,"connect":28,"send":0,"wait":22,"receive":27,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/api/retrieve_config","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"POST /api/retrieve_config HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nContent-Type: application/json\r\nContent-Length: 164\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":164,"data":"{\"action\":\"retrieve_config\",\"domain\":\"user7525.cardstrust.com\",\"user_id\":\"5\",\"message_ts\":1770599221571,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"1f92-1xbuRdKCuVa1WW3cFPBMAiEolGA\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg6XjNREsML9TkZltu1gbupmCVNRkegHx95PjYDUAsBDJIGc6RXP9V0opam8b437rtvOShiYEkDmT%2BdmpmM4va25umS%2BvGGKdt3r%2FPM%2FbEwo17FB%2B90t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9caf77aede453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8082,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f5c91518e3d748db45d335272ac917b","sha1":"d716ee45d282b956b5596ddc14f04c0221289460","sha256":"6c725e7d9ba079bdd5fd99ed8257d88cb952420f050583bafca2d3ec479b1c36","sha512":"37333c5758a824764a155ef14a953c6c6540be5aae44ca66b7d16c54b0a7aba307c9b2bebfab74e35d8ec78d83702b441852d5f6c6c8839140fbfb8ce2179a51","ssdeep":"192:ILfJD2qIpqBq0c3jvi+7eLvw5vwhzvwfvwovwlvwKvwsvwUvwZvwCvwmwxvYT:3RpqBq0c3jvi+7eLvw5vwhzvwfvwovwm","tlshash":"0cf1fda2bdddd359c1ecec717c9f6ae204eca35d4e4c8323035a541a4cea9ae6787407","first_seen":"2026-01-26T00:46:39.648548Z","last_seen":"2026-02-19T00:53:21.367647Z","times_seen":22,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/banner.png","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/banner.png HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 148744\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:28 GMT\r\netag: W/\"24508-19c0e611084\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTq5ZF6bXBM6Syi3VchjDWIbX%2Bss1NfMXqzpjHccHOO3DWHbSNihd9fSHnBg1kFQsPrfUILdze0sPUzZ6TUau4Evygf3XonvrVr9LnqijDTTTDXBAPsr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a928703181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 518, 8-bit/color RGBA, non-interlaced","md5":"d9b41e719f1a670928067723380d3039","sha1":"548cd5df56cbbe772234630ba82718bc48edeb60","sha256":"49982d38a3213a9e764c67f5376adfd185748f011f149083b1ba4ad643b7bc25","sha512":"49ab26332083cfd498aab0d7fa0cebbf770c02b0092f9d6905018679dc8a5ebe066fa59ee6a4937599a6dfe94ba793e31b1b608b698b01655c3439927f4a2ca9","ssdeep":"3072:tdzqbVITOtA+AIG7IsOIwbTCvdRN/WU3Nu0pU2I1vdFlcD:b0iOm+S7IC+GvlpuCU2I1xq","tlshash":"0be312da4759e35425ade3f23f19dca3e977a8c3d1b336ec525002b07c703a8c8665a6","first_seen":"2026-01-10T14:02:29.67497Z","last_seen":"2026-04-28T13:46:00.709922Z","times_seen":821,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit1.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit1.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:38 GMT\r\netag: W/\"56ff-19c0e63f837\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iN1ufxkb%2BfQ87aahIMesxHlCXd2BfNj%2BlLs6NcLtfk4Idfn114nrqiN127raDyfu%2FmMTGM5cQmbJ9hZds91dOxfoG0opkvc3KMiB070POpJZMjWyE5nl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a928783181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-08-06T11:27:12.922952Z","times_seen":903,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/cta-banner.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/cta-banner.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:27 GMT\r\netag: W/\"280a-19c0e610cd4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEky%2FV3KccHBrArH7ZnCnOCxeM7GS0CSrbWVMdGuN5WNgLNIkFb%2FlXoOLxfaLOusDy%2BcAlO3UbWTUBxrlJW4t8moC16A5Xvb6MLcktS6%2FyVc1g1dNYuB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a958b33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.776945Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8884.cardstrust.com/wc-bridge","fqdn":"user8884.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /wc-bridge HTTP/1.1\r\nHost: user8884.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: frame-ancestors https://cardstrust.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meFnPqqR0nqCoEHuz3e8FpsmM%2BWDkhiFM6B1eAayuEmvc54cBv8O%2F%2FA1%2F6jz8m3RRgYEnSdqm14ueiVRjG8sIMbvf4gGy1QApbRc%2BA9J7bHpNirFABsZ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9caf77ae0da63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user8884.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user8884.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user8884.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit6.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit6.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:09:27 GMT\r\netag: W/\"1b23-19c0e610f90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDU02Ha%2BRPcMl5c6EUwJw6%2BR6e0bOosXHgNnW%2FannEJBtDLpTwEKKEO1ARqmJho9FAQPnLDTkAYGgTjoE2CYdrR9kKPQC1GgV%2Bmwrmr3Ad6wDO2av1Yc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a938893181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-07T02:57:00.756999Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/css/6e48048022a69e58.css","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/css/6e48048022a69e58.css HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxltkykqZyEhgkP48Gt5NBUadxPorw4PNqpf32zfuiSyjjgUMw5363RPy5QQjoJ91KzbC0ESdtajU7u4KEbA2jHJPPxE4VIEx5B%2BojqovSR7vFl5xHY6\"}]}\r\netag: W/\"6983203a-510d\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a938923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20749), with no line terminators","md5":"456bb6b0b391ddb448da0fd85f056e07","sha1":"fea7a171b6a892b3b88e4eb5f6e4d0cca980dd2b","sha256":"b82b060e7aad9907b587be5ba86cc635c2b3091363a832f28a12a99b6882401f","sha512":"457e5d5e9fa811a2461244a88f56a01817363dfb250430b717f79c8c91cc9a8c8f91875d58439bca5329066ddc743b74ee63f182757262e3c26fa326e979b878","ssdeep":"192:BwEVP358B9ogLzmh2QaCUjQquMkZ7xrdWMxc7bTgowKpXXXWNMQylG0PlwRR3cQz:Bwg35ZgsHk+dVB1RMedkm","tlshash":"9f92752339001125f12feca4b9d2af99b160f811d29b96fae545b939cacf0970772b0d","first_seen":"2026-01-10T14:02:29.664502Z","last_seen":"2026-02-20T08:01:05.534948Z","times_seen":797,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/app/layout-8daf250c46134e18.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-8daf250c46134e18.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A70c5x92miIWKeUKrCGqrEaMDmYNY22rbtTEGIpKe78mkhRLVc3u8SkT%2BFqzFLDkOI759hEMATgaG0e%2FrQOIRz9oAsGDRuC%2BL7l18KOYHpdv7hKUUkaA\"}]}\r\netag: W/\"69832041-292f\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a958b13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10481), with no line terminators","md5":"7bc6ffa2f31070a3a5ff1835fc89f38f","sha1":"820cfb42438801bfc73e6fad24287cbb7e18a470","sha256":"e119107a149d8b789eaebe7dfff632f6f01e4c4a8533e67d20127f46066f6def","sha512":"4435cb7a027d712cbb102a718302fe1f7b04b211a02b4b37531b275a2fb9c36ae81aea94723e9e055620e980a0fd4670615d149860abd9af32388b84804d78a4","ssdeep":"192:q3A4ny5iGTiQOTiYdK8xWYT0JbJAvpfaigAOpLIecEEn6gyxyrbB6:q3T+TiPTiYdrVTSJATlVCz","tlshash":"7a22d9d2f285fda8a53905c4d42b491c321a1f61d62e8c60bab9fc9b2095dc8b1b1fcd","first_seen":"2026-02-03T00:54:46.48038Z","last_seen":"2026-02-09T01:07:28.128905Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/_next/static/chunks/app/page-8a9219ce47171f16.js","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /_next/static/chunks/app/page-8a9219ce47171f16.js HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Feb 2026 10:32:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Feb 2027 00:38:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1712\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xv4FDjZJ6Hp0sojMaQ9T7n%2FmBYWGfMIxnM%2BeBKK7%2FBTDeh4YaUeX%2BixiPZA0RguL%2F6%2BQ3%2BFd1f9U0W80aAti68aKrKT%2BWhbpWnbLd%2FaBvh9Ht%2Bbkp4lq\"}]}\r\netag: W/\"6983203a-3217\"\r\ncontent-encoding: br\r\ncf-ray: 9caf77a958b23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12786), with no line terminators","md5":"0b41cb8bee169e04d3551cce3c78d19a","sha1":"a354739f8e4d93b5e93251be9050fde78a4a0d3c","sha256":"bb4d41a9bd6158528436c0f3e9c5cbcf746db53cf5159f8a5d318b6943d654bb","sha512":"1f8931a4bb3750d9642e1191371ec6c2155cf25dde92b75b7dadc0b152b033793e60fac689d49c3c25885f9a325c00759b19791be3dba459f64e5cef530066bf","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urcm:wLHGHq3XAqd","tlshash":"7a422855e494ebfdf92b19c459af504c712aaf84cb0a48f0b8bd78240b054f97627bcb","first_seen":"2026-02-03T00:54:46.491732Z","last_seen":"2026-02-09T01:07:28.129508Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:01.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user7525.cardstrust.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 22:53:36 GMT\r\nexpires: Tue, 02 Feb 2027 22:53:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526405\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-07T13:12:31.108261Z","times_seen":37172,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user7525.cardstrust.com/icons/benefit3.svg","fqdn":"user7525.cardstrust.com","domain":"cardstrust.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 11:31:49 GMT","end":"Tue, 14 Apr 2026 12:29:09 GMT"},"fingerprint":{"sha1":"CF:2F:E9:2D:0F:F0:DD:A6:01:E5:FF:C6:58:8D:6D:91:7E:85:76:07","sha256":"0A:40:76:36:5C:3A:75:E0:7A:17:B3:48:A7:3A:61:62:E4:11:DA:E2:56:25:79:88:91:2E:DE:05:2C:4C:07:92"}}},"request":{"raw":"GET /icons/benefit3.svg HTTP/1.1\r\nHost: user7525.cardstrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user7525.cardstrust.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 30 Jan 2026 10:12:38 GMT\r\netag: W/\"1225-19c0e63f6c3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJP5H33YFmdKtvuoCsWVOtoaSGYms%2BlbjhkbNcRppO%2BBjeFxxY36bWG%2F6VN1Bdo1ArfWZMD3AxC50TcB4i6mFPbaWX4rmvobKh%2ByPe1D%2By9vghRu7Thf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9caf77a9287d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-08-06T11:27:12.901682Z","times_seen":928,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-09","alert":"Phishing Block","trigger":"user7525.cardstrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-09","alert":"Sinkholed","trigger":"user7525.cardstrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user7525.cardstrust.com/","date":"2026-02-09T01:07:00.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user7525.cardstrust.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 09 Feb 2026 01:07:00 GMT\r\nexpires: Mon, 09 Feb 2026 01:07:00 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 09 Feb 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 77686\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4196)","md5":"69694f58011069df806f7ad2dc049276","sha1":"5c8964f07939f1f6a1392176e34b46741febb9a6","sha256":"b967da77a9f3b3f708815a3d9d5049e4305bc4cdae34d4e484cdae6e1f13715f","sha512":"7dc6cca3cf3f6e88ecfa538246fa16b7e8c0ad877c1fb0fb65345d1e8cfcdeb9438e5020d999dc38cd70da27dfb343eda2fd71d614cc2464a5b0cfce57d35353","ssdeep":"3072:diKw0wG3Fo/r30161Iq0N7yryklQB/NibI+cxGzaxahdZjfrzB4MmqfO00upG:XwkoDIFeA2I++8hXjzB4fqfH0uo","tlshash":"541429c9b7c6706683a37578503f020bb17a7992f84cd8d0e182d8d42e74aaa5277f7d","first_seen":"2026-02-09T00:39:00.678424Z","last_seen":"2026-02-09T01:07:28.130627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":109,"dns":1,"connect":25,"send":0,"wait":36,"receive":37,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}