{"report_id":"31844290-1a22-4be4-a004-0b68c4d9b01b","version":6,"status":"done","tags":[],"date":"2026-01-11T06:28:35Z","url":{"schema":"https","addr":"trustwxallet.com/","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustwxallet.com/","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"title":"Trust钱包安卓版下载_TrustWallet钱包安卓下载_TrustWallet钱包app下载_TrustWallet钱包下载安卓app-全球领先的数字货币交易钱包","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustwxallet.com/","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T06:28:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwxallet.com","ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":11,"received_data":1691996,"sent_data":5726,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwxallet.com/","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ec6b419d7dc4d8deec400ffa594bbad","sha1":"9ec5ec6780c8055507bbcb45081a160e72e1ffd7","sha256":"2b9b339f663e0bd5c07dbdbc2dc0c8ac3b2425098759b7e7a8df3104032ef079","sha512":"f1dae243f026a7a0108e210db8a674aef193636e0462423a0a287ff335568585c03beacb1c830dae17c3adf1167d408c8f078f730390a85cc18349e7cbc02241","ssdeep":"","tlshash":"4d01ac97296064a24a2b79774c9f9500367281576d0ebedab54e0ca4cf5102c03bcbe9","size":723,"data":"","first_seen":"2023-06-10T03:36:53Z","last_seen":"2026-06-06T17:13:29.23441Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/images/js/swiper.animate.min.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c65f46168f8b46c37f8394155793737","sha1":"a681bd4ac1d3972e7664e0f35d88e6ca9cfcd713","sha256":"d1136c5c805e2069d250b1036023cb10b424d690aee26525337957b67509ea39","sha512":"807167ab1c7b934efffcfa2628920a8586246d9149975c49350ce44d89212aed73eaaf8229aed203b34c45792da617e0aeadc17888d25d720a8d5b28d192ac32","ssdeep":"","tlshash":"1a314a52c30046beea123a92564f04582c305a9d5a859cb474f9af7f88ec63285fd7bb","size":1743,"data":"","first_seen":"2023-03-07T22:33:39Z","last_seen":"2026-08-08T15:55:03.555635Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/js/index.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1130f5483a2b7948208cb72421ab08f","sha1":"365b05483fe043106ca104550dddc66e2d192a0e","sha256":"920023e263c0a800983e8b5b2f385d24ff7f887398f7aea71cef9c337cb14726","sha512":"ea0926e821647d6cf1c14f2822027094a789f8a6423c425b97b31ce9976431acb75fb754ea657a5018a60a88fb19525acae861d2d880d33860693715d3031010","ssdeep":"6144:BdlmnKCta98HruzgbsWZv5Ecvw+FgvQ8NSLe3WqEwfmVtECKQF:tCVLZx5FgyqGGstECd","tlshash":"23c43a8db251316247a730f551af410b727a98b9f40588b8b1b8c8e57eb8d8d217bf7c","size":575657,"data":"","first_seen":"2025-09-18T16:35:37.919423Z","last_seen":"2026-01-11T06:28:42.438393Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/images/js/swiper.min.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5bb26def607ac0e0e114a502ac65e38","sha1":"2cd244e7a00c598ed9ec4e0d04325f8511667816","sha256":"770008a560398e6ab513700705e2431fce9e999b8e10c299ad9c4dafd0c9010b","sha512":"3db22c669b0df4cc315529cb2180e90d3318bec989cb5c01e130919c9889e7e6102150a138ea53114889965607add93ac5a5407a0bc10e4612970220dfc5ebd1","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgT:wxoo6desFshaKi+HgZsUOUTqiqM37EO","tlshash":"d9d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139191,"data":"","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-08-10T22:04:41.839497Z","times_seen":2096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwxallet.com/","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T06:28:13.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D; expires=Sun, 11-Jan-2026 06:29:17 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":61218,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1092), with CRLF line terminators","md5":"18721ca43eaff2c4358a9a3e90fdd195","sha1":"3291b4b42af57b5bcba075ca50468979222d9fe6","sha256":"294bee9a17bc9ec4954624ce5029ea21ee1efb4d73fb332db4116cebee0f81dd","sha512":"2345f2bbeac3b5d0f4a14bb1c1d13704bb53385a9aea72afdf0c4898083d44a16409b47ce3de4c1f74cc66903683812525d26ca595049f1f8c4a5abb607a7fbb","ssdeep":"384:Pibcl2zzQmEjb4Nob/3baL129fhYYA1au3K2al5ikF4tD2d8cOGq+W3:nlaEwNqGJ0l5ihxt","tlshash":"de53556256873e7203376ad8254b1bb4fa45cccbcd422a8875eda3732f72e68f547502","first_seen":"2026-01-11T06:28:42.433751Z","last_seen":"2026-01-11T06:28:42.433751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14215,"timings":{"blocked":4675,"dns":1602,"connect":1218,"send":0,"wait":4861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/style/swiper.min.css","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00313/style/swiper.min.css HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A2%7D; expires=Sun, 11-Jan-2026 06:29:22 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14015,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14004)","md5":"42a7b3b0e356d5d4b9a29a40e77f3dc8","sha1":"669df5ba901266814a7db67da57cc498433612d2","sha256":"2e6ab360427637e592549154e6fae3bd663ea67df74b1d6ee66c9fa7be573d23","sha512":"56af3fb6e844a7f9d8d2d23e2bccd124de60f88dd9b6b5064470dc99ad64edc761a7d2c6b5ea115a12c05e7a71575cb5ab71feb8801ce35a8841a59365ab6671","ssdeep":"384:3Ubeo7zOqgx9BUsm/XHCXif65W/1mXA82FHy8:kbr7zOlbDm/XHwif65W/1mXA82FX","tlshash":"4152236417003837f3774f6e46a1e6b59f60cc838a934dadb2c0dd44d6fa8b9122eb95","first_seen":"2023-05-13T21:20:52Z","last_seen":"2026-08-09T23:27:05.428786Z","times_seen":590,"resource_available":false,"data":null}},"time_used":3041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/js/index.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00313/js/index.js HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Dec 2024 04:11:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675bb3dc-8c8a9\"\r\nexpires: Sun, 11 Jan 2026 18:28:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":575657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029), with CRLF line terminators","md5":"b1130f5483a2b7948208cb72421ab08f","sha1":"365b05483fe043106ca104550dddc66e2d192a0e","sha256":"920023e263c0a800983e8b5b2f385d24ff7f887398f7aea71cef9c337cb14726","sha512":"ea0926e821647d6cf1c14f2822027094a789f8a6423c425b97b31ce9976431acb75fb754ea657a5018a60a88fb19525acae861d2d880d33860693715d3031010","ssdeep":"6144:BdlmnKCta98HruzgbsWZv5Ecvw+FgvQ8NSLe3WqEwfmVtECKQF:tCVLZx5FgyqGGstECd","tlshash":"23c43a8db251316247a730f551af410b727a98b9f40588b8b1b8c8e57eb8d8d217bf7c","first_seen":"2025-09-18T16:35:37.919423Z","last_seen":"2026-01-11T06:28:42.438393Z","times_seen":2,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/style/365jz.css","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00313/style/365jz.css HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A2%7D; expires=Sun, 11-Jan-2026 06:29:22 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"fd702f1b550a4635b42451d05d6ff7f5","sha1":"da55d202486d986c1be21ec76bcec88c56094dda","sha256":"7e1c45bdf4cdad65a00b63549fc4a152654cf3601c7a8dcff0f45b5615bfcc64","sha512":"a9cbab53c84d3fd39e8a7c768903c1519fe00f089639f0251910800b1e9bb503d7d7f6cca9b11a1507bc03dd8fd3471c50f86e2c0253730af17d47aafa255b61","ssdeep":"","tlshash":"af610e1597111102e637ccb80fa42335e2849063e70392b9bfc17646cffb9a892a9fcc","first_seen":"2025-05-30T20:33:45.1247Z","last_seen":"2026-07-24T23:21:33.069221Z","times_seen":50,"resource_available":false,"data":null}},"time_used":3041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/uploads/allimg/250430/1-250430142324.jpg","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /uploads/allimg/250430/1-250430142324.jpg HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 30 Apr 2025 06:23:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6811c1dc-79f4\"\r\nexpires: Tue, 10 Feb 2026 06:28:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 750x375, components 3","md5":"0acc6f12b13689c4eefd8a473bae5e21","sha1":"2917ca56c67b682b176ca6dc96ad46e3fbee8164","sha256":"a6e7b8a0da45d4e0f17a12988e15da0afc81b08f04fa3ec80c5ce4b085c10bc1","sha512":"47ad6afd7ae3ce56cb0fb946d02015f1b08b778b1872027fa3b6f52530c03405596b7813b013c0010b867e85c8e92b6bab3ff7a831effe740023d73a5573438a","ssdeep":"768:ffOEsqbaUkfG8H23TpC1GH0WEmOXiaTyGHjS/B6IOOMH1:uEpaZOE1eVEqaOG+P8H1","tlshash":"55e2f155865086cee0fd423e40b38f7ba3cc4deb3953605e02d60e42abfda67c81c0a9","first_seen":"2025-06-26T17:56:30.593431Z","last_seen":"2026-04-06T08:28:59.29441Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/images/js/swiper.min.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /images/js/swiper.min.js HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Nov 2021 08:06:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618ccf20-21fb7\"\r\nexpires: Sun, 11 Jan 2026 18:28:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"e5bb26def607ac0e0e114a502ac65e38","sha1":"2cd244e7a00c598ed9ec4e0d04325f8511667816","sha256":"770008a560398e6ab513700705e2431fce9e999b8e10c299ad9c4dafd0c9010b","sha512":"3db22c669b0df4cc315529cb2180e90d3318bec989cb5c01e130919c9889e7e6102150a138ea53114889965607add93ac5a5407a0bc10e4612970220dfc5ebd1","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgT:wxoo6desFshaKi+HgZsUOUTqiqM37EO","tlshash":"d9d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-08-10T22:04:41.839497Z","times_seen":2096,"resource_available":true,"data":null}},"time_used":3001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3001,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/images/js/swiper.animate.min.js","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /images/js/swiper.animate.min.js HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Nov 2021 06:35:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618b6826-6cf\"\r\nexpires: Sun, 11 Jan 2026 18:28:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1743,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1690), with CRLF line terminators","md5":"7c65f46168f8b46c37f8394155793737","sha1":"a681bd4ac1d3972e7664e0f35d88e6ca9cfcd713","sha256":"d1136c5c805e2069d250b1036023cb10b424d690aee26525337957b67509ea39","sha512":"807167ab1c7b934efffcfa2628920a8586246d9149975c49350ce44d89212aed73eaaf8229aed203b34c45792da617e0aeadc17888d25d720a8d5b28d192ac32","ssdeep":"","tlshash":"1a314a52c30046beea123a92564f04582c305a9d5a859cb474f9af7f88ec63285fd7bb","first_seen":"2023-03-07T22:33:39Z","last_seen":"2026-08-08T15:55:03.555635Z","times_seen":1028,"resource_available":true,"data":null}},"time_used":3001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3001,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/style/page.css","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00313/style/page.css HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A2%7D; expires=Sun, 11-Jan-2026 06:29:22 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":785229,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"e320e10e4d645e5ce3943e5ebfa53117","sha1":"e6a9b4a16341436a0f2bd17d7e62b62dc87fd23f","sha256":"59c94383e5609cb79e460e8727a7e69f7ac2e5a33731c94aea6c6e83d90d82bc","sha512":"dd72d5877b82ae0330c81d92de3ce193898aedb70167b035b593c1f760ba08012bbbeaf107dd9e26265d3876c3305a99ae0dc4a8a0835e2947498501847b7374","ssdeep":"6144:v5qXnCmLT6xy2Hw+CwulTcWkOcwK2kwcPR1O78vUEfWmp4:/ZWkOcwKIEfWmp4","tlshash":"97f49855ea03208713338bb4a7d65a51ff242173de02097db7dea68c4ff46a85262f8d","first_seen":"2025-09-18T16:35:37.92621Z","last_seen":"2026-01-11T06:28:42.444902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/images/logo.png","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 08:37:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68551dc1-342b\"\r\nexpires: Tue, 10 Feb 2026 06:28:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 48, 8-bit/color RGBA, non-interlaced","md5":"1337579eda79fb2019b069d0e01fad42","sha1":"4f9d41804581e030c88530a26af03d16f183ea07","sha256":"b0bd4d3afd369bc29d3c3184e94746963165a75b594e257bb6872a6d5e5aa75e","sha512":"7b865f1d556a0ae5793bf19117dfbeae8a0c8ae2d78f68e891a280db99f284e61d9bcd725691e271b31f3041b58490bf2cc02b554d9c5ae38c47d24d72d9f594","ssdeep":"192:A/LhlNAlnaebeZJqAVg+TgYvhTeH9goM41K2CWS74JNeaAqMN1489EXE93AotPmo:ASlna1Zda+kYRg9/KFTbaU3f9hBZ","tlshash":"9552c0062251c454c42d002ad85cac99c7fdca1b87e60a25bbfd519b7d6ec99cd9fc32","first_seen":"2025-06-26T17:56:30.607377Z","last_seen":"2026-04-06T08:28:59.306138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":3036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/templates/vip3mb00313/style/animate.min.css","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00313/style/animate.min.css HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A2%7D; expires=Sun, 11-Jan-2026 06:29:22 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61353,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (61191)","md5":"d6dfff213c31504dc0a27d36c8e320bd","sha1":"8411c1c0418521c96d07bcca0d9dbce7e832ccc9","sha256":"f89ad2fbc54ddd9e111ed8dc7b6e4d88e6c3463134b5264da879305866e5f458","sha512":"e1cd6bd615407b53490c25ae6bbaf21977d1339477772234631054f5213253a8b254a95fa006fd9f9a40cf5d4ba18ec988c03676cc510d899daeb51da4044ffb","ssdeep":"768:hkZlIuqI46CIBqI4IuwG1RASkMDs3Uyp5CrWeu0GT6sPasb:hkZ6IuwG1RASkMDs3Uyp5CrWeu0GTT","tlshash":"cc5347ae5891228991664b66c3cc4e684b3dc77714625cdf3385684b8f87f9f33ea207","first_seen":"2023-04-07T10:13:34Z","last_seen":"2026-08-09T23:27:05.397654Z","times_seen":1500,"resource_available":false,"data":null}},"time_used":3041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3041,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwxallet.com/index.php?act=api\u0026aid=1","fqdn":"trustwxallet.com","domain":"trustwxallet.com","tld":"com"},"ip":{"addr":"156.243.14.63","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwxallet.com/","date":"2026-01-11T06:28:22.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /index.php?act=api\u0026aid=1 HTTP/1.1\r\nHost: trustwxallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwxallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:28:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112897%2C%22v_count%22%3A2%7D; expires=Sun, 11-Jan-2026 06:29:23 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":3039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-11","alert":"Phishing Block","trigger":"trustwxallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwxallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}