{"report_id":"3fad4f94-295d-4d53-ad77-be93d2a3e426","version":0,"status":"done","tags":[],"date":"2026-07-08T16:23:44Z","url":{"schema":"https","addr":"trustwalletcard.me","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustwalletcard.me/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"title":"Loading","dom":{"size":2690409,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"7c1f290958096a30c11d5bedd748afdf","sha1":"71a98f2d2fb48f917ef75053ba92314bf3079173","sha256":"5f7e1a732cadc22eb195d4f79c3f90fe291416bc2e8c7cac4e411aed20209ebb","sha512":"8234173458825c966fa70c054f898613cd81795d2f3f653c51a05f2462a197425a6149e946bac1d6e7f56c54263cb32fb61b1e61b365d38dd36d71754de85e50","ssdeep":"12288:Vl6vn+Eq7dFJXUUpg+bsVVsYG0ZhsOI3mj6SHRo5anqGCCzyxwkJvIX1KigtenJa:6+LmUp1+Q","tlshash":"ddc595963a91b55e01878b313a8e67f558bfc505c6caa04af88cade9f0dcdb335583c4","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustwalletcard.me","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T16:23:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"trustwalletcard.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwalletcard.me","ip":{"addr":"193.187.110.3","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-08T16:25:28.215848Z","last_seen":"2026-07-08T16:25:28.215848Z","alert_count":3,"request_count":3,"received_data":2460036,"sent_data":2444,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwalletcard.me/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"17567ac4313e058e19022b4ad82016f7","sha1":"e28407376679c8b68e46504de599f46c8dee266b","sha256":"8dc048b40c8520fa1586d84b8fea5db62c708a129630516e25fdd404c0a1f57f","sha512":"60b6356cd86f04854f0b7c9c161a955e14330e5db728b449d9f2b0ac6e9a4bd023e87b01a6849394c171cd5c23e15808947d640974792ab9460e0d2ae231ae61","ssdeep":"12288:NVsYG0ZhsOI3mj6SHRo5anqGCCzyxwkJvIX1KigtenJskHDP4FLeSP5Lnb8gWdn3:3p","tlshash":"0ab531963a91b55e05878b313a8e67f558bfc505c6caa04af88cade9f0dcdb335483c4","size":2355593,"data":"","first_seen":"2026-07-08T16:25:34.056201Z","last_seen":"2026-07-08T16:25:34.056201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher14.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://trustwalletcard.me/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://trustwalletcard.me/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"trustwalletcard.me/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T16:23:13.416Z","timestamp":1783527793416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletcard.me","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 09:38:58 GMT","end":"Thu, 01 Oct 2026 09:38:57 GMT"},"fingerprint":{"sha1":"65:D8:D6:6C:07:93:70:FD:13:6F:43:B2:04:63:A5:E3:7B:A7:AD:26","sha256":"A3:6C:AF:74:97:C6:16:6F:4D:8A:CD:E0:02:BF:6B:65:01:CD:5C:51:41:33:10:C5:80:62:0F:DE:A0:C2:BB:0A"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: trustwalletcard.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletcard.me/\r\nCookie: sil_ses=94932067158b9ae7a78d2690a0bdc60a; __Host-sil_ses=94932067158b9ae7a78d2690a0bdc60a; sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQCQ7_OkDZ6HNPr1y1_1.eWZr-Ymeir6WdhoARhDhkhCOFDtf3W62Y4gMlA4fXkVGwWXSXAOL8ccm2pPjetE9m0nvUCNiuVpUrd0JW0GECg; __Host-sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQCQ7_OkDZ6HNPr1y1_1.eWZr-Ymeir6WdhoARhDhkhCOFDtf3W62Y4gMlA4fXkVGwWXSXAOL8ccm2pPjetE9m0nvUCNiuVpUrd0JW0GECg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 699263\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=94932067158b9ae7a78d2690a0bdc60a; Path=/; Domain=trustwalletcard.me; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=94932067158b9ae7a78d2690a0bdc60a; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQGS7_OkDZ6HNPr1y1_1.daSz6nYRcsOhlj5JA1smqtayXtVQijtf1YnkAXefZ54trhM0uNnfunOYDP-UifbnlVr02CZF-tGQ6A4Vw2a6BQ; Path=/; Domain=trustwalletcard.me; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQGS7_OkDZ6HNPr1y1_1.daSz6nYRcsOhlj5JA1smqtayXtVQijtf1YnkAXefZ54trhM0uNnfunOYDP-UifbnlVr02CZF-tGQ6A4Vw2a6BQ; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Jul 2026 16:23:13 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2371661,"size_decoded":700267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49175)","md5":"ab75ef2534b8157971ffdd471ae6bc94","sha1":"1f1113fb93bdb56ce86d32c8f1b6c7f288f17da1","sha256":"03c523359daa7483565aa0fc8179af506bba9389375b051c076a2793121cd7c3","sha512":"83e29e27b13e152ef1dc191ca61db13f5594185e1e5c5dd500a8b5dcd75707dc8b1a68096e7287b9eafa07ef369ed32b5028f498365ce8dd2720ecb82d5f17dd","ssdeep":"12288:bVsYG0ZhsOI3mj6SHRo5anqGCCzyxwkJvIX1KigtenJskHDP4FLeD:b","tlshash":"3a2500963a91b59e058787313a8d67f658bfc505c6caa44af88c9de8f0dcdb335883c1","first_seen":"2026-07-08T16:25:34.053348Z","last_seen":"2026-07-08T16:25:34.053348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":537,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"trustwalletcard.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletcard.me/.rt/ce","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustwalletcard.me/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-07-08T16:23:14.170Z","timestamp":1783527794170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletcard.me","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 09:38:58 GMT","end":"Thu, 01 Oct 2026 09:38:57 GMT"},"fingerprint":{"sha1":"65:D8:D6:6C:07:93:70:FD:13:6F:43:B2:04:63:A5:E3:7B:A7:AD:26","sha256":"A3:6C:AF:74:97:C6:16:6F:4D:8A:CD:E0:02:BF:6B:65:01:CD:5C:51:41:33:10:C5:80:62:0F:DE:A0:C2:BB:0A"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: trustwalletcard.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://trustwalletcard.me/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://trustwalletcard.me\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=94932067158b9ae7a78d2690a0bdc60a; __Host-sil_ses=94932067158b9ae7a78d2690a0bdc60a; sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQGS7_OkDZ6HNPr1y1_1.daSz6nYRcsOhlj5JA1smqtayXtVQijtf1YnkAXefZ54trhM0uNnfunOYDP-UifbnlVr02CZF-tGQ6A4Vw2a6BQ; __Host-sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQGS7_OkDZ6HNPr1y1_1.daSz6nYRcsOhlj5JA1smqtayXtVQijtf1YnkAXefZ54trhM0uNnfunOYDP-UifbnlVr02CZF-tGQ6A4Vw2a6BQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"ab256532816ee29a24f72255382a5680be61cebcf6103aaa51ca556efc273550\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1783527794168}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1783527794-vtbAuMBwMbPLitfhaPD7uCrDOdyP1OrF\r\ndate: Wed, 08 Jul 2026 16:23:14 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1283,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-08T20:05:45.193454Z","times_seen":17098550,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"trustwalletcard.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletcard.me/","fqdn":"trustwalletcard.me","domain":"trustwalletcard.me","tld":"me"},"ip":{"addr":"193.187.110.3","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T16:23:11.870Z","timestamp":1783527791870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletcard.me","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 09:38:58 GMT","end":"Thu, 01 Oct 2026 09:38:57 GMT"},"fingerprint":{"sha1":"65:D8:D6:6C:07:93:70:FD:13:6F:43:B2:04:63:A5:E3:7B:A7:AD:26","sha256":"A3:6C:AF:74:97:C6:16:6F:4D:8A:CD:E0:02:BF:6B:65:01:CD:5C:51:41:33:10:C5:80:62:0F:DE:A0:C2:BB:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwalletcard.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23839\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=94932067158b9ae7a78d2690a0bdc60a; Path=/; Domain=trustwalletcard.me; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=94932067158b9ae7a78d2690a0bdc60a; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQCQ7_OkDZ6HNPr1y1_1.eWZr-Ymeir6WdhoARhDhkhCOFDtf3W62Y4gMlA4fXkVGwWXSXAOL8ccm2pPjetE9m0nvUCNiuVpUrd0JW0GECg; Path=/; Domain=trustwalletcard.me; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASA5NDkzMjA2NzE1OGI5YWU3YTc4ZDI2OTBhMGJkYzYwYQCQ7_OkDZ6HNPr1y1_1.eWZr-Ymeir6WdhoARhDhkhCOFDtf3W62Y4gMlA4fXkVGwWXSXAOL8ccm2pPjetE9m0nvUCNiuVpUrd0JW0GECg; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Jul 2026 16:23:12 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86204,"size_decoded":24817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"48ad559b23ebefe252a9ae4b4a2d4408","sha1":"522237f2becf143e81e4376891cbdc9a8e71a2fd","sha256":"cc9713e52a033d2235290978e25ac5b201d528ffde8f13faed241284fbd1e64f","sha512":"78914c60f5829c49cc29d74523413a599b53497fe8977a5380fe1c0dfcb978c97543cea2f0d3b32030630abd97729e97d90d3551340d29aa677a459841975243","ssdeep":"1536:w2pYkSiHvX1koCzTh+T7qrhTmlC5+8UlVR2j:NYkSiHvX1koCzwTQhTmlej","tlshash":"eb8308e12231206d8723ab7a365f52851affc022ccd7a088fc9cdda467eda5b157578c","first_seen":"2026-07-08T16:25:34.054989Z","last_seen":"2026-07-08T16:25:34.054989Z","times_seen":1,"resource_available":true,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":271,"connect":14,"send":0,"wait":575,"receive":3,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"trustwalletcard.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}