{"report_id":"5cad3755-01bf-417a-b5da-3872426416bf","version":0,"status":"done","tags":[],"date":"2026-10-11T10:00:59Z","url":{"schema":"http","addr":"trustwalletpay.cloud/","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":0,"asn":32097,"as":"WholeSale Internet, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustwalletpay.cloud/","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"title":"Wallet Payment · USDC Authorization","dom":{"size":5606,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5174)","md5":"3445fe5b8140921915ca5415895a23b8","sha1":"3b6c84db24f995a36293f20a9aee33b57ed5fb65","sha256":"91637f7febc29c9334cb7a36f70d0d290a37b18d827e7d7aec37535a41ff85d5","sha512":"ab71511c8a755ed53e13a0b4979349d6c6c6601326a328f7d7c0d2a1876ab9bd5e50fbd0fe8b04b8b68cf12492966453d8cdf2d012c943a625b12f2a93fd0aad","ssdeep":"96:nm/eD8Jv1WvWtWyWzW9WXV5w7bEtz9xK55rk/fp0ElHdSTf/dVg72u1yhgP82:m/e4RcuE5iUihOzHMzdVgTagU2","tlshash":"7dc163629219623f122787cce5a7637431ae525ce98d2530a6ad03f806fbcd4bc6b487","dom_hash":"domhash7e9f75e9ebd0b066db867fc57981e4db","first_seen":"2026-10-11T10:01:09.599942Z","last_seen":"2026-10-11T10:01:09.599942Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwalletpay.cloud/","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":0,"asn":32097,"as":"WholeSale Internet, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T10:00:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwalletpay.cloud","ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"domain_registered":"2026-10-09","domain_rank":0,"first_seen":"2026-10-11T10:01:03.868897Z","last_seen":"2026-10-11T10:01:03.868897Z","alert_count":6,"request_count":6,"received_data":1152181,"sent_data":2747,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwalletpay.cloud/assets/index-Dtf3eePS.js","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"150acbe1a07bd7cd4e4c0b93ee9da665","sha1":"e70bf02dd69e4246c782ea7049f5aa721318bec6","sha256":"2be098de8546f170dde0ce5a9607209ddf3bd60c84d35d567cbbfbc207f3321f","sha512":"f10846ebaa9cc096d42b12ef78f4dab20d1221df6e4cd81502073b64e8264c20623bea4a8d986427a200fe18697c07d32470b7df06164e090eac4594edb6beb9","ssdeep":"12288:qemq8OEP8VhtXsr8hTUaolOd/tOIKlVg7kqY9o71xqKeVCBhyDuT4bkHlu:qk8h8ntXsr81UvlOd/tOlVg7kqY9o71i","tlshash":"6ae45b8472aab57107e355e4407b1102f239a821304c8468fa6cedef7eb458a567ffbd","size":700606,"data":"","first_seen":"2026-10-11T10:01:09.605206Z","last_seen":"2026-10-11T10:01:09.605206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwalletpay.cloud/","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T09:58:58.588Z","timestamp":1791712738588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 11 Oct 2026 09:58:59 GMT\r\netag: W/\"1c8-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456,"size_decoded":1152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (333)","md5":"5c1fe05ce694f342523ada864a7b15f6","sha1":"ea0760d3d34b2a4ab40c03877a1a192e85b1c312","sha256":"5429209e08e9e03fc395b7d103a8b0d430fd1afba0a8f2bf9e4d89170f8960fd","sha512":"3b5c06a26eccdffc69a1841a6dd16c0722df417589ee5538c72020f103da9349e91ba8aff9226d272098cf559e27589deb0e11f85adb16db5e6beebef68076d2","ssdeep":"","tlshash":"5df0dc959821481e2330637dbec1e0088696fb0cd2807da0b9e6d0fc18d5b81ccdb669","first_seen":"2026-10-11T10:01:09.603596Z","last_seen":"2026-10-11T10:01:09.603596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":127,"connect":113,"send":0,"wait":118,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpay.cloud/assets/index-Dtf3eePS.js","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwalletpay.cloud/","date":"2026-10-11T09:58:59.418Z","timestamp":1791712739418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET /assets/index-Dtf3eePS.js HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 09:58:59 GMT\r\netag: W/\"ab0be-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 700606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":700606,"size_decoded":701498,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40679)","md5":"150acbe1a07bd7cd4e4c0b93ee9da665","sha1":"e70bf02dd69e4246c782ea7049f5aa721318bec6","sha256":"2be098de8546f170dde0ce5a9607209ddf3bd60c84d35d567cbbfbc207f3321f","sha512":"f10846ebaa9cc096d42b12ef78f4dab20d1221df6e4cd81502073b64e8264c20623bea4a8d986427a200fe18697c07d32470b7df06164e090eac4594edb6beb9","ssdeep":"12288:qemq8OEP8VhtXsr8hTUaolOd/tOIKlVg7kqY9o71xqKeVCBhyDuT4bkHlu:qk8h8ntXsr81UvlOd/tOlVg7kqY9o71i","tlshash":"6ae45b8472aab57107e355e4407b1102f239a821304c8468fa6cedef7eb458a567ffbd","first_seen":"2026-10-11T10:01:09.605206Z","last_seen":"2026-10-11T10:01:09.605206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpay.cloud/assets/index-BoH7SaKr.css","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwalletpay.cloud/","date":"2026-10-11T09:58:59.423Z","timestamp":1791712739423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET /assets/index-BoH7SaKr.css HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 11 Oct 2026 09:58:59 GMT\r\netag: W/\"7c05-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 31749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31749,"size_decoded":32632,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (31748)","md5":"3c3ff17cb5fdda2dee98a10471e89847","sha1":"bd9d715b9eef9a0c5bbbb04bbff59c17d00352e9","sha256":"f29a94e6a920bff1f7a06f174a44ad5fb587191f22fe3f8afb254245d5061131","sha512":"ebba27ade43c74c2095a751e98218643946ec89242c089aede05295fd54922f03b462e1177cf751d71e1489044148c0d8c550d577119f5b45b5c8831524ce1f8","ssdeep":"384:eSrNIF0L++SSVUcetCa7+OqfFVeRn2iMugdIf6:eSr+jLZtCaaBf+R2iMuTf6","tlshash":"3ae285a6a160613dfc27e944a7c89a9f7014b547d8330be9da92f530c9c77f71672b08","first_seen":"2026-10-11T10:01:09.613806Z","last_seen":"2026-10-11T10:01:09.613806Z","times_seen":1,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpay.cloud/trust-logo.png","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwalletpay.cloud/","date":"2026-10-11T09:59:00.239Z","timestamp":1791712740239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET /trust-logo.png HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: no-cache\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 09:59:00 GMT\r\netag: W/\"593d3-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 365523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":365523,"size_decoded":366367,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 8-bit/color RGBA, non-interlaced","md5":"79459696fbdcceb933fa82017937904d","sha1":"642b92493a798cd874561a9e63de53e4164e6a52","sha256":"4162136066e34c57873d326de4cd4cb32332a1fe22cb1044e8263bada5b7a508","sha512":"a459f85b3b4501a3ff737d9cf9b5acc6c13d481cd9712ad02a2f0c2d20840b920c84200d16f6ca4ab632d0720c51cf523f722d9d3150dcb9edfdde4396914179","ssdeep":"6144:stvLKSRODdW1P7o92xVKqnjKnvZmElLSwWecqRuiAWt7aBwRqFMKGdqiP:sFL3AdWecVznA4ElVVjZt7aeuMP","tlshash":"1a747d48c315863772be2554b0204a5748223e7bb215ee2526cb74ff2f07fb19e35ea9","first_seen":"2026-10-11T10:01:09.615821Z","last_seen":"2026-10-11T10:01:09.615821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpay.cloud/assets/inter-latin-8kRkwJBP.woff2","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwalletpay.cloud/","date":"2026-10-11T09:59:00.268Z","timestamp":1791712740268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET /assets/inter-latin-8kRkwJBP.woff2 HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 09:59:00 GMT\r\netag: W/\"bd30-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48432,"size_decoded":49302,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-10-11T12:42:46.120671Z","times_seen":110536,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpay.cloud/mark.svg","fqdn":"trustwalletpay.cloud","domain":"trustwalletpay.cloud","tld":"cloud"},"ip":{"addr":"173.208.142.58","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwalletpay.cloud/","date":"2026-10-11T09:59:00.410Z","timestamp":1791712740410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpay.cloud","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:40:09 GMT","end":"Thu, 07 Jan 2027 18:40:08 GMT"},"fingerprint":{"sha1":"15:3D:D1:57:FE:5A:7C:FB:6D:BE:12:97:F2:CB:AA:04:08:37:57:CD","sha256":"F2:4D:72:AE:C7:4C:D3:EF:0A:D9:84:B8:EA:98:67:5D:2C:60:21:F1:28:09:C3:AF:2F:91:04:71:86:0D:C3:F4"}}},"request":{"raw":"GET /mark.svg HTTP/1.1\r\nHost: trustwalletpay.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: no-cache\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://ethereum-rpc.publicnode.com wss://relay.walletconnect.org https://verify.walletconnect.org https://verify.walletconnect.com https://pulse.walletconnect.org; frame-src https://verify.walletconnect.org https://verify.walletconnect.com; object-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\r\ncontent-type: image/svg+xml\r\ndate: Sun, 11 Oct 2026 09:59:00 GMT\r\netag: W/\"f9-1a1230e7340\"\r\nlast-modified: Fri, 09 Oct 2026 23:45:12 GMT\r\nreferrer-policy: no-referrer\r\nserver: nginx/1.24.0 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\ncontent-length: 249\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249,"size_decoded":1091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b0eda7c21b21b5258e043793f5e3a0d","sha1":"6d08660d2fb1526e1b161648a7614274fd42931f","sha256":"947fa040c1df90137ea35cf8f73bcc205738642a9d35b3f45489ab4896003f6d","sha512":"5af0b5bbbf0e4926eaa103e7302cc979e53a8d8871c243b965afed1b19a9d6998553e60797700a4e8e29c94946d0b17cbeca755107a730a6f0178d2fb58139ad","ssdeep":"","tlshash":"09d0a7aa135ccc1cf6170b24ebbc3571506170cb494c162ae9a115327615a9fba7f6ec","first_seen":"2026-10-11T10:01:09.621292Z","last_seen":"2026-10-11T10:01:09.621292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"trustwalletpay.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
