{"report_id":"71a28dd8-fcec-476d-801d-24eda27f332b","version":0,"status":"done","tags":[],"date":"2026-07-31T17:25:05Z","url":{"schema":"https","addr":"trustcardwallet.info/","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustcardwallet.info/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"title":"Loading","dom":{"size":2441532,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"66c76262d210f35585bbadcff88c8c9d","sha1":"35d677cb4bd4c1589f74830367140991c41dd794","sha256":"f444ef15551e04c33e78dd0cd2e753d27c7ca88acc4af20e97ccb3b3f071075a","sha512":"0d3b4022e3beb48bd6391829b3d3a071ca1ce3f78f9837c5ce2e5235c5e40687c79ef39237649051543a2cf5a65ead2f4d271c86d56373247cd1ab3e109af09a","ssdeep":"12288:bD2C9Q2hY71HqQWm7n0IGzEuVl0DEBQsJLDFf8zDJdNglI7cyFHyaXRqLKeJgZdE:bD2ux67dq40IynVl0KnQxtamm","tlshash":"4fb582923a96f65e00578b32364a56f558afc505ca8fa04df9ccada9f0dcdb339483c4","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustcardwallet.info/","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T17:25:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"trustcardwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustcardwallet.info","ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-31T17:26:54.220195Z","last_seen":"2026-07-31T17:26:54.220195Z","alert_count":3,"request_count":3,"received_data":2241500,"sent_data":2456,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustcardwallet.info/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"654e798c4b7f744cfae72c9a80f4f112","sha1":"6f5981ae0a78a6aeae4b1977aecdc8c289d07a5d","sha256":"165583fcad083ec378f5199745ef6a0c80ea8ec5dd0d055e06250ab2c024614d","sha512":"2ad26503bee616125005c202232187607833c7485349bf7b09e4fb03a89fd1e9733a97f8183c2e0bdf905ba35a899ad9a0bc4db3ca9ec520d7e0bcc04e7d0eaf","ssdeep":"12288:RJLDFf8zDJdNglI7cyFHyaXRqLKeJgZdOiogYUt/jdie4+o9U/4UdlWWbYzthLbw:FQxtamX","tlshash":"b4a51d923a96f65e00578b32364a56f558afc505ca8fa04df9ccadadf0dcdb329483c4","size":2137195,"data":"","first_seen":"2026-07-31T17:26:58.826557Z","last_seen":"2026-07-31T17:26:58.826557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://trustcardwallet.info/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://trustcardwallet.info/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"trustcardwallet.info/.rt/ce","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustcardwallet.info/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-07-31T17:24:38.046Z","timestamp":1785518678046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcardwallet.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 14:15:51 GMT","end":"Sat, 17 Oct 2026 14:15:50 GMT"},"fingerprint":{"sha1":"27:5A:8E:2A:DE:C1:1C:71:15:71:D2:37:A4:EC:0D:8A:75:AE:78:37","sha256":"FF:BE:C5:95:4C:B3:DF:44:F4:F5:CB:68:90:A4:2D:B4:66:FF:9B:B9:1D:63:3C:73:39:D6:93:87:D4:68:67:62"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: trustcardwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://trustcardwallet.info/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://trustcardwallet.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=b91d88e03f72db81c06efe701e9b36ef; __Host-sil_ses=b91d88e03f72db81c06efe701e9b36ef; sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgHa8uamDZ5VcQms2Ycn.jnQKbFHWie2QMmUqXG5tFVo3jto8i7PfIjcWBTi0NBhTOU7c6N8XgGdXkH9p_nmg5YpOhb3k7zPd8wG1nDawAg; __Host-sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgHa8uamDZ5VcQms2Ycn.jnQKbFHWie2QMmUqXG5tFVo3jto8i7PfIjcWBTi0NBhTOU7c6N8XgGdXkH9p_nmg5YpOhb3k7zPd8wG1nDawAg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"2c03716353fc03492a5fd43ec2b0a1958a518d19fa704581688437b1bc6f9b0f\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1785518678045}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1785518678-T7koTVIZFA7uPd8iaYUeGp3UhZK69D4e\r\ndate: Fri, 31 Jul 2026 17:24:38 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1289,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T20:32:35.777412Z","times_seen":17640239,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"trustcardwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcardwallet.info/","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T17:24:35.726Z","timestamp":1785518675726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcardwallet.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 14:15:51 GMT","end":"Sat, 17 Oct 2026 14:15:50 GMT"},"fingerprint":{"sha1":"27:5A:8E:2A:DE:C1:1C:71:15:71:D2:37:A4:EC:0D:8A:75:AE:78:37","sha256":"FF:BE:C5:95:4C:B3:DF:44:F4:F5:CB:68:90:A4:2D:B4:66:FF:9B:B9:1D:63:3C:73:39:D6:93:87:D4:68:67:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustcardwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23876\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=b91d88e03f72db81c06efe701e9b36ef; Path=/; Domain=trustcardwallet.info; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=b91d88e03f72db81c06efe701e9b36ef; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgDY8uamDZ5VcQms2Ycn.aLNh3I_3hUU4To23ibHsuNZ-TzLoVCyLXEZW2tmZSBq7lMVq0o1lYLfgufkIQTqO5hH7blPepEJTLdqbUGLpDw; Path=/; Domain=trustcardwallet.info; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgDY8uamDZ5VcQms2Ycn.aLNh3I_3hUU4To23ibHsuNZ-TzLoVCyLXEZW2tmZSBq7lMVq0o1lYLfgufkIQTqO5hH7blPepEJTLdqbUGLpDw; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Jul 2026 17:24:36 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86058,"size_decoded":24858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"13b0f9ee677a467611681d699f786a8f","sha1":"6a0decec04e23d2e686c61aaf42964e243fffcaf","sha256":"16f28a77c63c8819dcd7c8c0bb1821e151ae156a9e77913b6b0825195d74d54d","sha512":"9c5a91145785ddef8e376b7d999fbbd269a1472e7f6d49bf8c2f75ec0d9e92e158fa1466a4e40e9777cd6d9ce1b3dae81722724d0838636d339b111621bc37bc","ssdeep":"1536:w2y4QEV8znG79wKXonTm7TmwT8xoXUOFRSRC1:24tphYnTm7TbT8xYRX1","tlshash":"0483b6b5a7b0202f80232a75651f16d11dfbc371888a80c8f84ce9a6effdd5385d57a8","first_seen":"2026-07-31T17:26:58.823835Z","last_seen":"2026-07-31T17:26:58.823835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1157,"timings":{"blocked":-1,"dns":431,"connect":61,"send":0,"wait":470,"receive":63,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"trustcardwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcardwallet.info/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"trustcardwallet.info","domain":"trustcardwallet.info","tld":"info"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T17:24:37.301Z","timestamp":1785518677301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcardwallet.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 14:15:51 GMT","end":"Sat, 17 Oct 2026 14:15:50 GMT"},"fingerprint":{"sha1":"27:5A:8E:2A:DE:C1:1C:71:15:71:D2:37:A4:EC:0D:8A:75:AE:78:37","sha256":"FF:BE:C5:95:4C:B3:DF:44:F4:F5:CB:68:90:A4:2D:B4:66:FF:9B:B9:1D:63:3C:73:39:D6:93:87:D4:68:67:62"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: trustcardwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcardwallet.info/\r\nCookie: sil_ses=b91d88e03f72db81c06efe701e9b36ef; __Host-sil_ses=b91d88e03f72db81c06efe701e9b36ef; sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgDY8uamDZ5VcQms2Ycn.aLNh3I_3hUU4To23ibHsuNZ-TzLoVCyLXEZW2tmZSBq7lMVq0o1lYLfgufkIQTqO5hH7blPepEJTLdqbUGLpDw; __Host-sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgDY8uamDZ5VcQms2Ycn.aLNh3I_3hUU4To23ibHsuNZ-TzLoVCyLXEZW2tmZSBq7lMVq0o1lYLfgufkIQTqO5hH7blPepEJTLdqbUGLpDw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 635062\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=b91d88e03f72db81c06efe701e9b36ef; Path=/; Domain=trustcardwallet.info; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=b91d88e03f72db81c06efe701e9b36ef; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgHa8uamDZ5VcQms2Ycn.jnQKbFHWie2QMmUqXG5tFVo3jto8i7PfIjcWBTi0NBhTOU7c6N8XgGdXkH9p_nmg5YpOhb3k7zPd8wG1nDawAg; Path=/; Domain=trustcardwallet.info; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBiOTFkODhlMDNmNzJkYjgxYzA2ZWZlNzAxZTliMzZlZgHa8uamDZ5VcQms2Ycn.jnQKbFHWie2QMmUqXG5tFVo3jto8i7PfIjcWBTi0NBhTOU7c6N8XgGdXkH9p_nmg5YpOhb3k7zPd8wG1nDawAg; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Jul 2026 17:24:37 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2153263,"size_decoded":636070,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49175)","md5":"f8d7156580ae09373bace31ffc139c4a","sha1":"0f1f7cb7b239c47149b5fbb6d6d838f54d71ec3f","sha256":"87235a7c29aaec3549c2c855cb5d495b12932745dd0e27ad86c1050d157a2ece","sha512":"c65758521d193b3660f608de46c41521183f25116f26d3cddd95e09b90f6a92fa460ad1fb4fe7357ca5062f882340f10a3a232363918f5136427d4251a2e2440","ssdeep":"12288:YJLDFf8zDJdNglI7cyFHyaXRqLKeJgZdOiogYUt/jdie4+o9U/4UdlWWbYzthLbu:f","tlshash":"b125df923a96f65e00478b32364a56f558afc506ca8fa14df5ccadadf0dcdb239483c1","first_seen":"2026-07-31T17:26:58.82475Z","last_seen":"2026-07-31T17:26:58.82475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"trustcardwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}