{"report_id":"49cbd19e-aea5-4a01-b336-91aa5aca0976","version":0,"status":"done","tags":[],"date":"2026-08-01T17:58:00Z","url":{"schema":"http","addr":"ecardsforall.eu","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"ip":{"addr":"46.101.107.146","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ecardsforall.eu/","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"title":"Trust Card — Spend Crypto Like Cash. Everywhere.","dom":{"size":11946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1494)","md5":"ecb481ea761f156bc896d87e1787a57e","sha1":"d245341bf32ba72f9b140e547d4456508dc3e2ef","sha256":"9b63ed9a47ff5b74067fcbf3c7c8a069b958e1ebc3ba609370d8d7f5a55374a1","sha512":"2bb3e36b2828855855e1a9aa6a1c3776893d065b3e06be3643a2d66dc93e1164feb9dd20c21100ba79f06a70bd2a8c69f58f279f1575a2dd7b96a5b80cf57573","ssdeep":"192:TxQJdstjOkOEZ0hOhq4/6En2YyARvNEb1P7QC5NrbJEzD9LVW+j6GTN4xQFuziVk:TxQJijObrNAsQMt","tlshash":"3332c75756a33659b23388599fe3271b2265c01bf127de787ecc41689fc90e889e335c","dom_hash":"domhash961c117c307fc077281fefbb9a590143","first_seen":"2026-08-01T17:58:05.138248Z","last_seen":"2026-08-01T17:58:05.138248Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ecardsforall.eu","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"ip":{"addr":"46.101.107.146","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T17:58:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"ecardsforall.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwallet.com","ip":{"addr":"104.16.218.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-10-14","domain_rank":18447,"first_seen":"2018-11-01T00:59:02Z","last_seen":"2026-07-26T12:43:16.895233Z","alert_count":0,"request_count":1,"received_data":187744,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"connect.facebook.net","ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"domain_registered":"2004-04-01","domain_rank":1088,"first_seen":"2012-05-22T02:51:28Z","last_seen":"2026-07-28T08:54:00.196246Z","alert_count":0,"request_count":1,"received_data":407998,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ecardsforall.eu","ip":{"addr":"46.101.107.146","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-01T17:58:00.757683Z","last_seen":"2026-08-01T17:58:00.757683Z","alert_count":2,"request_count":2,"received_data":25638,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel-manager-umber.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":3201,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ecardsforall.eu/","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"ip":{"addr":"46.101.107.146","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"eade9b6e323360beca5641e7b7551fd7","sha1":"fcd54f686bc04ea31d876ba973ea1b525163f3e6","sha256":"0c9193ef1240fcc7398c9769d45474ec4bc1d03810c5c744322ca904fb28a36b","sha512":"ddcb6ef96bf92e537fccda37e31032fb0a2e8849f0f1b8a421c741a8e0a50655be1fc92c7107911605aaf2aac231bbc4b675be6e92a982e4634224a8ee8fa57d","ssdeep":"","tlshash":"10f0a39d3c56f55737f93635c2238ebb7365070175835524c646cc2468548865886d8e","size":445,"data":"","first_seen":"2026-08-01T17:58:05.144504Z","last_seen":"2026-08-01T18:19:30.799467Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0b02cd9ffb1bfa839d72d4b24dde93d","sha1":"7a55a03d5dd6d48797e91b64233feb1d2a49711b","sha256":"e6818637e5fa28d556f2906d448b71bd1a40acab15556a615612cd6ec647c627","sha512":"79079962a559938382a5020594740e41dad04d343e36f9512bec8194738b962aaf843943fc2292289d93bf23f34cfba23ad891209d6b66cf53439a410964d238","ssdeep":"6144:T7gAlTJGD0oWELS5QXTD+4Yd0E+brBLVw0Ku/ddLri921PynD+dyq39z5Y3lOFLg:JPo3HfdRPynD+dyqooHcr","tlshash":"9984e88971e5b0a107b7796c966f9007b2bbd5a238ccc960e51cedc8297c49e4133eb7","size":403980,"data":"","first_seen":"2026-07-31T23:03:19.363653Z","last_seen":"2026-08-04T23:03:19.020262Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/loader.js","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cf86fe0b92c1d1f134a9c90e70741ee","sha1":"a4ef6bb62c650ecb9869e7d9d44388b94fc5cc45","sha256":"fe7eb0a5aebbdb81ea24c0a16d5eab3e2e177bac277e824698ca7871ab30dc86","sha512":"edf113ae5cf11b1e3a8d337a16f8be91ee38f4a5b663e4b67ac6a2f6532c3481f7c06cd62d3efb96d1151caa06560a5203757ccbacd49079aef8434d57263ba4","ssdeep":"","tlshash":"c22186ac32f6b97243d618da6176ee46f5704214344ec4a0f2dc44552ce5d564f33e9e","size":1413,"data":"","first_seen":"2026-08-01T17:58:05.140344Z","last_seen":"2026-08-01T18:20:35.342824Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ecardsforall.eu/","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"ip":{"addr":"46.101.107.146","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T17:57:32.916Z","timestamp":1785607052916,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecardsforall.eu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 17:47:49 GMT","end":"Tue, 27 Oct 2026 17:47:48 GMT"},"fingerprint":{"sha1":"24:E9:EC:C7:D4:F8:75:32:21:AD:09:CD:3A:B7:82:3F:02:8B:F7:D8","sha256":"FE:79:ED:19:A7:82:52:2D:F9:1D:57:FC:C4:71:56:E1:2F:D9:64:70:9F:1F:88:7F:62:6C:A8:F0:CE:C4:49:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ecardsforall.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 01 Aug 2026 17:57:33 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 31 Jul 2026 16:17:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a6cca8b-26c6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9926,"size_decoded":4080,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (329)","md5":"a0d23656ae56102368b53a9cc87b54a5","sha1":"e2f83ce09ec3824f86db7562e51b1fd629e42411","sha256":"80f24d62ee6754e50ca5d4c31ccc41df3292f727964be7b6534d5c589c5c1e56","sha512":"c7f630561aed5f2d749a538894e50f4e88ec07aae9b065e841b7406745f6065845afd14641cc28c2d1078eb0127cb44a113ad0c0978cbc65932860979bbc88a6","ssdeep":"192:RxQJP0hOhq4/6En2YyARvNEb1P7QC5NrbJEzD9LVW+j6yxQFuZ:RxQJmrNcQMZ","tlshash":"2322856356a32619f11394699fe7270a3275d017a207ce693fcd129ccfc91e8d6a3398","first_seen":"2026-08-01T17:58:05.139325Z","last_seen":"2026-08-01T18:20:35.340702Z","times_seen":7,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":43,"connect":30,"send":0,"wait":30,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"ecardsforall.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/loader.js","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecardsforall.eu/","date":"2026-08-01T17:57:33.537Z","timestamp":1785607053537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: pixel-manager-umber.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ecardsforall.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 208161\r\ncache-control: public, max-age=300, s-maxage=86400\r\ncontent-disposition: inline; filename=\"loader.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 01 Aug 2026 17:57:33 GMT\r\netag: W/\"5cf86fe0b92c1d1f134a9c90e70741ee\"\r\nlast-modified: Thu, 30 Jul 2026 08:08:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t5mgt-1785607053584-cbc47417313e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1413,"size_decoded":1276,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1412)","md5":"5cf86fe0b92c1d1f134a9c90e70741ee","sha1":"a4ef6bb62c650ecb9869e7d9d44388b94fc5cc45","sha256":"fe7eb0a5aebbdb81ea24c0a16d5eab3e2e177bac277e824698ca7871ab30dc86","sha512":"edf113ae5cf11b1e3a8d337a16f8be91ee38f4a5b663e4b67ac6a2f6532c3481f7c06cd62d3efb96d1151caa06560a5203757ccbacd49079aef8434d57263ba4","ssdeep":"","tlshash":"c22186ac32f6b97243d618da6176ee46f5704214344ec4a0f2dc44552ce5d564f33e9e","first_seen":"2026-08-01T17:58:05.140344Z","last_seen":"2026-08-01T18:20:35.342824Z","times_seen":7,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":25,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecardsforall.eu/bg.jpg","fqdn":"ecardsforall.eu","domain":"ecardsforall.eu","tld":"eu"},"ip":{"addr":"46.101.107.146","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecardsforall.eu/","date":"2026-08-01T17:57:33.546Z","timestamp":1785607053546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecardsforall.eu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 17:47:49 GMT","end":"Tue, 27 Oct 2026 17:47:48 GMT"},"fingerprint":{"sha1":"24:E9:EC:C7:D4:F8:75:32:21:AD:09:CD:3A:B7:82:3F:02:8B:F7:D8","sha256":"FE:79:ED:19:A7:82:52:2D:F9:1D:57:FC:C4:71:56:E1:2F:D9:64:70:9F:1F:88:7F:62:6C:A8:F0:CE:C4:49:CD"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: ecardsforall.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ecardsforall.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 01 Aug 2026 17:57:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15202\r\nLast-Modified: Fri, 31 Jul 2026 16:17:15 GMT\r\nConnection: keep-alive\r\nETag: \"6a6cca8b-3b62\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15202,"size_decoded":15453,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 592x1280, components 3","md5":"d3cc6a19b7d2af59708a0105ba592fc4","sha1":"8339d97d17902ae25987003bb9f1fde0337355bf","sha256":"c4501603d152b0affb7fcf58040b7d6a228b76d790459c33c7b44e91aca8078d","sha512":"7855c49acbfeb2e5f2b2c78536ce8e142a6264baa81f04772ec8d4790abacf7bf0de1633e83271605e5d5e97cbc1076987b6897a134072b046fc88bb080fee58","ssdeep":"192:OoFY+uyLnGxQdNA4eKiSWTjYApitR42Qwby5ybEC84PRE3wPV7Lx01:OALnGxmSJItRf3hPegPFxa","tlshash":"6062c019af0a93b4d980a7b00db407d3ba47dd1065ba1616c7928cfe8ee7db88cc57c5","first_seen":"2026-08-01T17:58:05.141401Z","last_seen":"2026-08-01T18:20:35.344716Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"ecardsforall.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet.com/favicon.ico","fqdn":"trustwallet.com","domain":"trustwallet.com","tld":"com"},"ip":{"addr":"104.16.218.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecardsforall.eu/","date":"2026-08-01T17:57:33.649Z","timestamp":1785607053649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 03:28:35 GMT","end":"Sun, 11 Oct 2026 04:28:07 GMT"},"fingerprint":{"sha1":"D6:CE:00:38:9F:C1:86:4E:94:9C:46:FC:70:61:30:1D:43:45:9C:F9","sha256":"B4:6E:FB:12:5B:78:24:D2:A0:AA:31:F0:E9:36:2A:D0:17:CC:DA:FC:75:61:9D:34:8B:EF:C8:13:F3:33:2B:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ecardsforall.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 17:57:33 GMT\r\ncontent-type: image/x-icon\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none'\r\nserver: cloudflare\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-envoy-upstream-service-time: 4\r\nx-frame-options: DENY\r\nx-nextjs-cache: HIT\r\nset-cookie: __cf_bm=55L6A_GGa_5R0gX7pjdTRdI7LI6xwsvpJSwAxEAiXh8-1785607053.6695855-1.0.1.1-2U2gZhYcQ_aXqzGFQpMGAucjLXy8aTZO9zrvWhqpGpswlkyCQE0igK_sDD9LnKngajqBAMup5AEEDTZWDJh6AXgjc7xLP6kHBtQ0BV0MLXl1iZ6c6pHnfK9U0q6H0zev; HttpOnly; SameSite=None; Secure; Path=/; Domain=trustwallet.com; Expires=Sat, 01 Aug 2026 18:27:33 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-ray: a246b9d5690eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186813,"size_decoded":63368,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f31065f3cd27ee747f132dfb9f3004ca","sha1":"b1f3cc4a67b0b7c4cc1c8aaa594f4b141e574794","sha256":"aad2a3e5c939abd19c4960dbf40300fcfbf4b1a97b23aa08877f9ca689e20b38","sha512":"e6505d407245ec6a74b73604035572c9ffe3cbb314318e30e0c2aac3a355983d4c250066e25fafbf438fd6989ba70285e30572e7eda117a47e09dae7c40f81bb","ssdeep":"3072:jUcVblV61/KfYGyjVoEovkLYqFYUU9PoPZXLNnYfKDKwM0w+W3:jHVblV61/iYGyjVrovkLYmYN9PoPZXLe","tlshash":"dc04f44aba56d92be01137bcc9b3d1f0e49a6d40fa13b48366f47d87f8318a9cc095d6","first_seen":"2023-12-20T05:41:30Z","last_seen":"2026-08-04T05:48:00.511113Z","times_seen":311,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":115,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-manager-umber.vercel.app/api/public/pixels/pk_live_24b3c2c48e24dc52e2e53cd91086f8cdde0cc5ac3a576bd3271c211ae78ea08e/config","fqdn":"pixel-manager-umber.vercel.app","domain":"pixel-manager-umber.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ecardsforall.eu/","date":"2026-08-01T17:57:33.734Z","timestamp":1785607053734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /api/public/pixels/pk_live_24b3c2c48e24dc52e2e53cd91086f8cdde0cc5ac3a576bd3271c211ae78ea08e/config HTTP/1.1\r\nHost: pixel-manager-umber.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ecardsforall.eu/\r\nOrigin: https://ecardsforall.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://ecardsforall.eu\r\nage: 0\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sat, 01 Aug 2026 17:57:34 GMT\r\netag: W/\"2c7-Z04UnPSjhiq9eFMKHNmn0QSRaJI\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-powered-by: Express\r\nx-request-id: ad2c1cb5-5ddc-4a8a-9e90-870aa9f02417\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rjvxn-1785607053769-1b42cb1f84e7\r\ncontent-length: 711\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":711,"size_decoded":1240,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb1db39aeee1b7685633436e2dae3755","sha1":"674e149cf4a3862abd78530a1cd9a7d104916892","sha256":"f9e9d48bd4d960972b9628618d706bd1eccf7d1acdb8ebad36d5bf00472d6c35","sha512":"be195fb598ba0932c967a3f3a04d3f0735dad1ff0e655c0be6a0bf38e076ec2b8e9319b73b5cf3919af894d2ef07c73476c6ab3f294fc938f0fc919a7e81af8c","ssdeep":"","tlshash":"7c014e7d2d26f01b37b578b0f236ebef72b00b06148286448ec1c4242d905834c4b88d","first_seen":"2026-08-01T17:58:05.143086Z","last_seen":"2026-08-01T18:19:30.798736Z","times_seen":3,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":452,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecardsforall.eu/","date":"2026-08-01T17:57:34.231Z","timestamp":1785607054231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 11 May 2026 00:00:00 GMT","end":"Sun, 09 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:15:0B:8E:2A:DB:04:06:AF:F5:D9:55:4E:26:67:2E:87:98:E4:0B","sha256":"76:00:2C:37:29:EF:55:C8:C1:F8:94:40:E0:7D:96:42:38:34:D3:74:17:3B:07:A5:80:7A:46:E5:24:E9:DD:02"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ecardsforall.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-e6P1DdOI';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nx-fb-optimizer: 0\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: RDUVrtCUFp2ifdHZeQMCBNaPm7ZZh098eUmwnBD1uP60w/SKlWw5sjIH7P9t9LyG69/Sb57lOSlkAfCgcXFnyA==\r\ncontent-length: 106186\r\ndate: Sat, 01 Aug 2026 17:57:34 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=15, rtx=0, c=23, mss=1232, tbw=5088, tp=9, tpl=0, uplat=1, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403980,"size_decoded":110204,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9255)","md5":"a0b02cd9ffb1bfa839d72d4b24dde93d","sha1":"7a55a03d5dd6d48797e91b64233feb1d2a49711b","sha256":"e6818637e5fa28d556f2906d448b71bd1a40acab15556a615612cd6ec647c627","sha512":"79079962a559938382a5020594740e41dad04d343e36f9512bec8194738b962aaf843943fc2292289d93bf23f34cfba23ad891209d6b66cf53439a410964d238","ssdeep":"6144:T7gAlTJGD0oWELS5QXTD+4Yd0E+brBLVw0Ku/ddLri921PynD+dyq39z5Y3lOFLg:JPo3HfdRPynD+dyqooHcr","tlshash":"9984e88971e5b0a107b7796c966f9007b2bbd5a238ccc960e51cedc8297c49e4133eb7","first_seen":"2026-07-31T23:03:19.363653Z","last_seen":"2026-08-04T23:03:19.020262Z","times_seen":111,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":5,"connect":21,"send":0,"wait":14,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}