{"report_id":"50c6c73b-7a47-4618-a5a0-29469901793d","version":0,"status":"done","tags":[],"date":"2026-07-01T02:34:57Z","url":{"schema":"https","addr":"www.app.trustrawallet.com/","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"www.app.trustrawallet.com/login","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"title":"TrustraWallet","dom":{"size":15623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1647)","md5":"e64f8d2cd3940c67ad9c794b06e54f32","sha1":"78be89a56e3a1a86974b86546b1400c55c83bd82","sha256":"617ef35ae9bcd61d091c455e73b6f47ceb873335fec0b6496a58d270a2b53164","sha512":"3fad4fd5b87785fb37f7b0b8b54786708fc7d291c8392439ae14b27b9eb65ab3b64e18b7a56bf70c3778879925e84a9b22a8fcbc9ff25a451e1b0a73e8395173","ssdeep":"384:q9F03LBreB5KG3Aiock+w3Mk3Ndfd46bIxIrwbWZx0O76:q9F03LBrePKG3Aiock+w8gfdTbIxYqWc","tlshash":"7c62c83951d1042c5087ca62bae67f019e7cc783de1bd9ecf36d40a4afc2d54e983a84","dom_hash":"domhashea3c293e08bc9d81b49db7a5a2befb3d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.app.trustrawallet.com/","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T02:34:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.app.trustrawallet.com","ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-07-01T01:57:41.807153Z","last_seen":"2026-07-01T01:57:41.807153Z","alert_count":21,"request_count":7,"received_data":328025,"sent_data":7153,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-28T22:41:44.776353Z","alert_count":0,"request_count":1,"received_data":103005,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.app.trustrawallet.com/build/assets/app-B8IgZ4FG.js","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"253d3922aeef5ac860fb0a2b2e6a8f27","sha1":"486ee5a0d1f414bcad56565572b9f54a217cd225","sha256":"c30aba84d1da44ff1b53482da5f3d0d58039ba1ac83589130a6e5989f16f3652","sha512":"4cb335d9187bf5fce51c6753edcbd38e977d5c24dcc5a839aa2d86c5e1cbdbc20856ba4d1cf512157b5b2e1c861211fa2b927c9c4fb47740f55c800ce7829ffc","ssdeep":"1536:bI1jLDq1dCaAt2aE3J/GuZWEYkQvAW5Okm1cuk9Yi:bI1+HCjyJ/G7EYkQvArR1c3f","tlshash":"d073f6e972d6b03283ea11f250bf4606f3396954784e44a4f528ecda386648d92f3f7d","size":79553,"data":"","first_seen":"2026-02-15T14:09:59.773331Z","last_seen":"2026-07-01T02:34:58.458233Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbe857d833ed631b1547e26b3cf12df7","sha1":"4adce7bd9ed2c5ca5166201934b4c6ecca589e07","sha256":"a30442a1effbcea7bbe38275db952d16cfdbb25206d5415b807311d581eca696","sha512":"9ac80204b496304f215114223e14b1b3be6c3331847d9a4935dab3532b78730a662deaca3a07c0f5bcc3422ec4a7cda26399856202479afc398ebb0679794769","ssdeep":"3072:g248wGMy97Kh1t6aB8UoFONKEPRN+cnARFvAq8imgNVYAYzD:l48HHWyP4ZpN+cnARFXmDD","tlshash":"06e308e972dab17283ef117650bf420af3396884244f4028b62dd8ce393999951f7f79","size":145375,"data":"","first_seen":"2025-04-19T08:47:40.628544Z","last_seen":"2026-07-01T02:34:58.454844Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/login","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd31f1e596761682b3d246bb489cc4e1","sha1":"d69bf531eedd419b19d483ae0b150e62c92a1695","sha256":"0437ff60347980d8cd6a9b53fa77c8fa81f8e5bdc7b1ed58eb93b6690e14bced","sha512":"d3280e9cb8ca5c14fa1dfe98667b1e1f6306df56e71ced0678f9d5aad76131ace73c7058895c24777f01fad596f618f828c7b20b4c4a1e439d9423e08377c753","ssdeep":"","tlshash":"5fd0221e009e0a03903406ff3a4a6ce040370023623cf100b90e00343f8db1e1392bcb","size":225,"data":"","first_seen":"2026-07-01T01:57:43.793853Z","last_seen":"2026-07-01T02:34:58.46113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2a9a80a9162bb53044fca0ddbffe8f09","sha1":"a49dc1147d2f1be33ccdb72c955b5d783a347aba","sha256":"d4018a24db1e06b9266c1612779231637d4a13fd29a701dd6474a671410d8904","sha512":"b99b140b0e6aa7837b5a1b5b4a4b545e6a0df5c25c004e1fbc897c3f23ec5302056ef14dc0a51d469ce206668170ea24a5c6b265afd361d5238341e2483f3c58","ssdeep":"","tlshash":"97c0128448ce0a00c1563596d5755836623912a1a07dd57526299364a47710ad35dd9f","size":181,"data":"","first_seen":"2025-10-17T12:43:05.350635Z","last_seen":"2026-07-01T02:34:58.462149Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d8bc027a7bf4c91f68977f4adb649aeb","sha1":"82c3083c1796dc1f05f8f4e00e4c2158b4d56329","sha256":"48561bf772de82456babafb030cb14cbd36d1df838a537e1e849213ad93d3832","sha512":"07abaf6c4c6e00577cca7c3a1442146bcaf97a0213771d6bfa5adbbaed6c41537ba992fa4b80fbdbbfcb7c6e6ed54c06a0f4129cb438df3f91c21228f1baa35c","ssdeep":"","tlshash":"e8c09bc458cb5d00c31b3a95d1365c3b713c2661e1bd84691a3df3549577116d15dc5e","size":144,"data":"","first_seen":"2024-10-11T09:02:16.41319Z","last_seen":"2026-07-03T06:49:06.181922Z","times_seen":1464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"bf773203a0e796ca32d52722a6cef4a6","sha1":"3eaa433c5dad169833244f6cbcdb5562a682a841","sha256":"f184690079dfcd1a264545f16cff89d7a728808f308447bccfb62540de183891","sha512":"56af6067dbfe32b283a808666d48d0eae2bc214c40376df7fd76c837472c59f4e86f3acf4fc78170186043ed6817a043d059d6f7f19d585736307a9bd6ac3a80","ssdeep":"","tlshash":"24c02bc028ce0900c2033580c0364037213c1631907ec86c173ce350d633027d00dc6d","size":136,"data":"","first_seen":"2026-03-23T09:00:33.601005Z","last_seen":"2026-07-01T02:34:58.463478Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Alpine Expression Error: old is not defined\n\nExpression: \"old('login')\"\n\nmap[actor:server1.conn0.watcher14.process7//obj26 class:HTMLInputElement contentDomReference:map[browsingContextId:3 id:0.2698814933287078] extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[attributes:map[:value:old('login') autocomplete:username autofocus: class:w-full pl-10 pr-4 py-3 bg-gray-50 dark:bg-gray-700/50 border-2 border-gray-200 dark:border-gray-600 rounded-xl focus:ring-2 focus:ring-blue-500 dark:focus:ring-blue-600 focus:border-transparent dark:text-gray-200 text-sm transition-all duration-300 placeholder-gray-400 dark:placeholder-gray-500 group-hover:border-blue-500 dark:group-hover:border-blue-600 id:login name:login placeholder:Enter your UUID or email required: type:text] attributesLength:9 isConnected:true kind:DOMNode nodeName:input nodeType:1] sealed:false type:object]","filename":"https://www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","line_number":1,"column_number":17046}]},"http":[{"url":{"schema":"https","addr":"www.app.trustrawallet.com/build/assets/app-CJEknlvJ.css","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.419Z","timestamp":1782873274419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /build/assets/app-CJEknlvJ.css HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; trustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:34:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 28 Mar 2026 21:18:13 GMT\r\netag: \"12149-69c84595-c26ea22f4e5b9bff;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9665\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74057,"size_decoded":10081,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f9ad0cd6728c837e755cb31cfbc2202","sha1":"7c97bf6917c77df407e4cd1287337174195fce2e","sha256":"891d5586280e4358f9592c6ace7332430c5b895c3df25b7d610445c1dca592dd","sha512":"cd7ca7c7e475d72550b1f1b1cb29a7da6ff38ff46b868db26608c0db5fe16a61a4edfb1dcbbc8f4ff5dcb6063734f6ebd49179f02eb131f8a952a4183ec6fc19","ssdeep":"768:KQZTgbrdh+KTH6q5ZNUrAOsGeRyhh1W46fp:KQZTgbrdAKD6qPOsGeRyhh1W4o","tlshash":"d673d13c6aa4403b7c6391f5e28db96de62b70c0de3e5aeabc81122097e53f75d47604","first_seen":"2026-07-01T01:57:43.781711Z","last_seen":"2026-07-01T02:34:58.453848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/livewire/livewire.min.js?id=02b08710","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.421Z","timestamp":1782873274421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /livewire/livewire.min.js?id=02b08710 HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; trustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Thu, 01 Jul 2027 02:34:34 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Sat, 28 Mar 2026 21:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145375,"size_decoded":51653,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45588)","md5":"bbe857d833ed631b1547e26b3cf12df7","sha1":"4adce7bd9ed2c5ca5166201934b4c6ecca589e07","sha256":"a30442a1effbcea7bbe38275db952d16cfdbb25206d5415b807311d581eca696","sha512":"9ac80204b496304f215114223e14b1b3be6c3331847d9a4935dab3532b78730a662deaca3a07c0f5bcc3422ec4a7cda26399856202479afc398ebb0679794769","ssdeep":"3072:g248wGMy97Kh1t6aB8UoFONKEPRN+cnARFvAq8imgNVYAYzD:l48HHWyP4ZpN+cnARFXmDD","tlshash":"06e308e972dab17283ef117650bf420af3396884244f4028b62dd8ce393999951f7f79","first_seen":"2025-04-19T08:47:40.628544Z","last_seen":"2026-07-01T02:34:58.454844Z","times_seen":20,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/uploads/favicon/1775299753_Untitled4_20260326092344.png","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.731Z","timestamp":1782873274731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /uploads/favicon/1775299753_Untitled4_20260326092344.png HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; trustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2618\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9401,"size_decoded":2893,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1654)","md5":"4840933b05f190916adb2edc04d0755d","sha1":"3b40846803dc7f622f3e78d55811e3c5d3ea9052","sha256":"1292f7a637be997b6df90f9b60804dacea137ff6dd3bc76b97c00c1cc77d033f","sha512":"0b5ba83e5574a7af890fcdd9a4dd279e15771beadcd8a769fcc4f9dfdb1946702210b857c92282f6ba5defae22048b85ce59e1d12c4c62b64cbb66792a69a18c","ssdeep":"192:f98qw1W/1Bb71bVX15l1PN13c1Ky514X14L1F71Vo1uL1Fw1WH1J81qf1u3En7An:f9c03LBreB5KG3Aiock+wU7doH","tlshash":"e312953511ec153d50d2cd66b6e23f25de69d183de6a61beb35d02e06fc6c14e983888","first_seen":"2026-07-01T01:57:43.786216Z","last_seen":"2026-07-01T02:34:58.455551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/login","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T02:34:33.654Z","timestamp":1782873273654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; expires=Wed, 01 Jul 2026 04:34:33 GMT; Max-Age=7200; path=/; secure; samesite=lax\ntrustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D; expires=Wed, 01 Jul 2026 04:34:33 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-length: 3386\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 01 Jul 2026 02:34:33 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":14702,"size_decoded":4569,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1654)","md5":"145c54bde2bf3b6e73dca0da4e803721","sha1":"8ee2d1a0df69d8c7c1c1df6d95ae97d44394b70f","sha256":"749cc26e058dab4aec9fac977d24685be34501b8847049a94912b206c1d2ddf6","sha512":"4c0f6364380b68fa0dfbf24594a8cb6403cb27b382019e9d5c364f5067ed0b7d5da9f66ac6cd4f925eea9ef3a3e7d3264ecb28758b122538452ffccfd63aedf5","ssdeep":"384:C9c03LBreB5KG3Aiock+wUMk3NdeiLf7BmIru3wTxjg7A:C9c03LBrePKG3Aiock+wJgeij7BmYYw9","tlshash":"ad62513812d4456c90c7c562b5b27f11ddbccb83de67a9edf36d80a0af82c54ea43a84","first_seen":"2026-07-01T02:34:58.456543Z","last_seen":"2026-07-01T02:34:58.456543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.413Z","timestamp":1782873274413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 Jul 2026 02:34:34 GMT\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-07-03T13:09:39.25635Z","times_seen":12765,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/build/assets/app-B8IgZ4FG.js","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.420Z","timestamp":1782873274420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /build/assets/app-B8IgZ4FG.js HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; trustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:34:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 28 Mar 2026 21:18:13 GMT\r\netag: \"136c1-69c84595-d1245da3ad6e9ae7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29034\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79553,"size_decoded":29465,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25360)","md5":"253d3922aeef5ac860fb0a2b2e6a8f27","sha1":"486ee5a0d1f414bcad56565572b9f54a217cd225","sha256":"c30aba84d1da44ff1b53482da5f3d0d58039ba1ac83589130a6e5989f16f3652","sha512":"4cb335d9187bf5fce51c6753edcbd38e977d5c24dcc5a839aa2d86c5e1cbdbc20856ba4d1cf512157b5b2e1c861211fa2b927c9c4fb47740f55c800ce7829ffc","ssdeep":"1536:bI1jLDq1dCaAt2aE3J/GuZWEYkQvAW5Okm1cuk9Yi:bI1+HCjyJ/G7EYkQvArR1c3f","tlshash":"d073f6e972d6b03283ea11f250bf4606f3396954784e44a4f528ecda386648d92f3f7d","first_seen":"2026-02-15T14:09:59.773331Z","last_seen":"2026-07-01T02:34:58.458233Z","times_seen":8,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T02:34:33.162Z","timestamp":1782873273162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Wed, 01 Jul 2026 02:34:33 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://www.app.trustrawallet.com/login\r\naccess-control-allow-origin: *\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T13:08:27.602411Z","times_seen":16942676,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":212,"connect":65,"send":0,"wait":64,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.416Z","timestamp":1782873274416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 3510\r\nexpires: Mon, 21 Jun 2027 02:34:34 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhdmsUL%2BQEr1VcEoazHsM4gTXAq%2FfR49P%2Fbxa3lLBXyw4ISALW2ob9VUEaqUsdi%2BvCjZynGGaxSo%2BfKP6yQg3KiDYrmYt%2BGQzhfrTiwM%2FWCwV2CmaonvzD0wYrJtCdh24v6dbZub\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a142032d3fcc0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19732,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-03T13:31:19.501852Z","times_seen":53453,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.trustrawallet.com/css/scrollbar.css","fqdn":"www.app.trustrawallet.com","domain":"trustrawallet.com","tld":"com"},"ip":{"addr":"198.251.89.168","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.trustrawallet.com/login","date":"2026-07-01T02:34:34.417Z","timestamp":1782873274417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.trustrawallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 05:49:41 GMT","end":"Tue, 15 Sep 2026 05:49:40 GMT"},"fingerprint":{"sha1":"1F:E7:08:60:EF:BF:E4:2A:2C:A8:DF:B1:BE:E2:D9:65:58:C6:B6:A7","sha256":"F3:55:BA:06:13:E5:5F:F6:65:85:68:6C:B7:E3:BF:33:98:65:59:F9:80:C4:AC:E8:80:71:4A:E8:6E:FF:34:7E"}}},"request":{"raw":"GET /css/scrollbar.css HTTP/1.1\r\nHost: www.app.trustrawallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.trustrawallet.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNYQWhUeFN2dElwKzJFdk1HMXhsWGc9PSIsInZhbHVlIjoiZHp0dFlvblhrS01xL3prb2licXZnbnVHeDJRTFhGbVQ1M2RUNkJIZ1ZRN3pzcStOUzh3ZkxhMXJKYXcwWVJ0VFRUcFYvSGNlOG1aeVdVSDBiQVpjeTUzdFhvOEpCRjFoNDVQYjFLVHBXQURsVmdGckZENmoxc1c2aCtybGFEQlMiLCJtYWMiOiI4YjYwY2U4MTZkN2U1ZWM2ODhlNjE5YjhmOWM5MzdhODM2ZDVkZDdkMGU3YjBhNTVlNzAxMDgwZmY5MzQ0ODVlIiwidGFnIjoiIn0%3D; trustrawallet_session=eyJpdiI6ImszL3N6WWM0RVJPbVRHcUd3ZlBUSWc9PSIsInZhbHVlIjoiQ2FFbWNxUW1vK2haMEg3OHZ6N2p3SytHc0JzckUvWGgzZEhrVjc5bmltMGdpN09HWVMxZUZOb2szR2NBWW5KbHZhWW91YkFNNDVzQ2pORkhiSHhLMHRpeHp0R3pYUEZabVROVXZPUTRyWkZVSGZlTVdqUFQzTEdvUU1iRnp6OG0iLCJtYWMiOiJmNThlYTM1OGM5YzY0NjAyMjRiZDA1NDc3NWE4M2Q2YWMwMTJkZmM2MzNhMDFmMDg3MzYwOGY2OWZkNTkxMjY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 02:34:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 28 Mar 2026 21:18:13 GMT\r\netag: \"54f-69c84595-339cab1f8ef32625;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 358\r\ndate: Wed, 01 Jul 2026 02:34:34 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1359,"size_decoded":771,"mime_type":"text/css","magic":"ASCII text","md5":"0b17781c9dcf6158d58e82b5dc66e800","sha1":"50ce4d58cf06f9b4193938bd9301f768dd7a451b","sha256":"70dab790dc645d817dabbedaba9c7d24060eed2f6fbdc66fd51874a85299c94e","sha512":"8343cce4554309a9efe26e7e9bad356fec1a4477fba54c5f8266ce9b5f38ce1aa926976dbc20c2971fcfa1d1c91764b6d21e0d5ae34991f3082ac3240a84b01d","ssdeep":"","tlshash":"d8213c9fd9e5099a20ff79198ae9c21d37ae4053524d4fdcb31d2aa08f0976d1651182","first_seen":"2026-02-15T14:09:59.774876Z","last_seen":"2026-07-01T02:34:58.459973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"www.app.trustrawallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
