{"report_id":"8bfe0674-aa97-464c-b374-79f7c966ebb3","version":0,"status":"done","tags":[],"date":"2026-08-28T14:29:26Z","url":{"schema":"http","addr":"wallet.trust-web.co/","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"wallet.trust-web.co/","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"title":"TrustWallet App |","dom":{"size":20185,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"26e9b6376c5a8096c89c6e3a819bb6a6","sha1":"ddd821d125c130fbb9591784bb3cfa33505454b7","sha256":"b280189e673fa7015939ca3244c98e80fbe14ae75fbd4a469077f32538c4e65e","sha512":"0cef7ad868d18c876330daba85c632fa59fff239f67598398af6bd4484536d11d4a12e7a638583020309c195ee1489e19c6d48f97e3751b5d2e5faecdef41810","ssdeep":"384:y4dNJ6Ih7a4r/ZdSZUaAhHkW9rewAQSbZ2T9PG:y4DZdypa99ZPG","tlshash":"6b926332e0a401627a1ec7ad91d0b328f998e706de07676571fc21ac8f95ef704eb61d","dom_hash":"domhashc4fce2c805d023821eaf18be4445bdca","first_seen":"2026-08-28T14:00:47.692876Z","last_seen":"2026-08-28T14:29:28.843416Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wallet.trust-web.co/","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:29:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-23T22:47:41.849275Z","alert_count":0,"request_count":1,"received_data":74879,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":1,"received_data":73777,"sent_data":561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-08-24T00:24:08.232807Z","alert_count":0,"request_count":1,"received_data":88175,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wallet.trust-web.co","ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T14:00:43.366728Z","last_seen":"2026-08-28T14:00:43.366728Z","alert_count":16,"request_count":8,"received_data":160186,"sent_data":4499,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":10251,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js?ver=7.1","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-29T19:26:17.729168Z","times_seen":192306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/js/main.js?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddd43bb5500533b71b43321576467220","sha1":"0218a63034394ec4ea637dbe0493a88b75313c45","sha256":"d5218fe4c9dfd943bd18f059bebb5076e14a2de0a16ebfd301420d36707f1dd9","sha512":"9a121209a49825aaa8ea69ace6e00c486b1313e378bd7b079a8599d41c9cef823e4f9a74fe430080ac43f1618c753f0565bbb45692561412915cb6cce2634fea","ssdeep":"192:06Qb2AEnoiOJk4FdRHVU9QQ+DknQdtdEySo:6ooiOJk4PpUoDdtdAo","tlshash":"2ce1434cbbbd22e054bbb17a16bb840026769517b408df10fa5cd9e02f8d12cf593b6d","size":6797,"data":"","first_seen":"2026-08-28T14:00:47.701614Z","last_seen":"2026-08-28T14:29:28.876435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/js/signup.js?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4baf05b9869d13a1c694abe48de5ac3d","sha1":"e7373fdab12eb7ea3d1c79575e7aafa4f89d6a65","sha256":"b5f7205a9ba58c83b760baaaf1180b35381bea38986639e4db3f6c8a64ac3bee","sha512":"507654efa21c5495eecef014ead56e955dd19860ec3e18b9194b37d458569c617d288ad3cd4633462462170540d9828608c16274c50d216617dbac77d7c6ad2a","ssdeep":"192:0qNicLjOL9O2n0pok/gG1fojJPkYq+PzxLDolkIy1fbTJBkJHMqojZmkjb2DxgWB:RLjOL9O2n0pok/nwjJPkEPFLDolkffbC","tlshash":"99e1b054f5a31ad810b3b03917ff491036a7a15b79049f01f92e49c81fd692fbda2e2a","size":6885,"data":"","first_seen":"2026-08-28T14:00:47.704479Z","last_seen":"2026-08-28T14:29:28.858035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/img/loader.gif","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.699Z","timestamp":1787927338699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/img/loader.gif HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Mon, 14 Apr 2025 16:52:14 GMT\r\nETag: \"119ff-632bfdfbb4b80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 72191\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72191,"size_decoded":72479,"mime_type":"image/gif","magic":"GIF image data, version 89a, 475 x 480","md5":"a21746f5374859d98f7528e1857e3532","sha1":"c6bbb0c42808f8200c8c472750b4d68b32dd4079","sha256":"82076465fd400fbad2c08a522707e222a00d826555d561e5c46b8ac502afeee6","sha512":"06baad261ee1f2254a003dd5686a1f8fc1f9663c6e17a6eab2161e62f754689e2cad7b564db5c804e2ef4700b2b7cb4582e689bbba1a6add3560c2652ae68801","ssdeep":"1536:OoHohNMZGeoQV5ZAFoza1OZCUoR2fGRyAoLsxETfsoP0Qk1UeaoDBxZ4xogemZir:zoao1oToCAoYejs+k1aoGoko3","tlshash":"cb63af4faad1aa41c184ca6350eb9336ee435c48edb5f6dff498ed2ac6104365c182e7","first_seen":"2023-05-11T14:33:27Z","last_seen":"2026-08-28T14:29:28.846194Z","times_seen":311,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":23,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/img/back.png","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.805Z","timestamp":1787927338805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/img/back.png HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/wp-content/themes/BasicTheme/assets/css/style.css?ver=2.63\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Fri, 16 May 2025 11:49:03 GMT\r\nETag: \"c79-6353f5e62a9c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3193\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3193,"size_decoded":3478,"mime_type":"image/png","magic":"PNG image data, 94 x 75, 8-bit colormap, non-interlaced","md5":"16b6e158672a64f664a81f1310d67078","sha1":"e0aa0422f08c861b9af71b32cd9d6c7fe722c317","sha256":"452e5633c42d4535111478f7538626ec3d5fcfb5692da863b0588a00ca97dd33","sha512":"45ee16e2172972853ece791e87d1d2f6dd0a7d11a0f97e0a035eea26828d3dda0b0acfd1c5f02ba0534601b38efe373ef7a7a5d670c4b5edff204e5ea26f5a77","ssdeep":"","tlshash":"4e612cc1ea3768a491d09396314d188250a68ff10cd1a50f93a1bf3138b7d75a791b4f","first_seen":"2026-08-28T14:00:47.709065Z","last_seen":"2026-08-28T14:29:28.850239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Ubuntu+Sans:ital,wght@0,100..800;1,100..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.688Z","timestamp":1787927338688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Ubuntu+Sans:ital,wght@0,100..800;1,100..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 14:28:58 GMT\r\ndate: Fri, 28 Aug 2026 14:28:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9567,"size_decoded":1610,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7d1812de4ab88be5d68362277860523a","sha1":"14dfd1e33734077c93710e4854e2765f8f30712d","sha256":"a329fe908daa958c983637df435ca944d6f8c205828a79cc1e686e3e6c235e73","sha512":"0ca50ce9508db715507bb8a36d07a8553aabbf0bde7e8b8ae2226494adb2ed84bbd6b780ca46e7877fb19bd131d04ffbaeddb7b85f018aaf096401973b41add0","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHpVzbVrViV7pVr9VBQa4RnsngB:vtfcHjg8ciIZBbtcn3Ez","tlshash":"3812df92046f9084ea435dc633cf7e32ad8ea1552041e6bd6bfd1cd8acdac2a537874c","first_seen":"2026-04-02T07:48:27.868647Z","last_seen":"2026-08-28T14:29:28.856024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.689Z","timestamp":1787927338689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wallet.trust-web.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 14:28:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18183\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 16 Dec 2024 22:44:28 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIluo4kovonV9wa2AIm2XGGlAA96ll4cb6oqfnqZ0mhlIKrdLL3cRVKe8BCPPpGGyVYLwmnoWSRWlLPJ8BDyge0wAqw7Xl4dcnWLrHIeoPao4e%2FpbUReOJW%2BpwmdR4t1dDiawwPp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a324016ae8de1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73890,"size_decoded":19172,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (49899)","md5":"7441465cab20b640d4156626d19cc63e","sha1":"8230c4590eee915e9b587a08f6e593fb77fffeb2","sha256":"74005d7c17d4a02f2f25404ec0655d9bc2fdaa53166874c87d7b7eec69d9088a","sha512":"12fbfce0caf892a54644d4a02062ff17f6880ea41bef1436bdcadd230c5f8d38521fc09247b3c111a902af9d4293ec3efd4eacc14d889b5bd55f449593d00186","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpcjA691m:SlgrLXzZJ2191m","tlshash":"14730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-23T14:25:51.255422Z","last_seen":"2026-08-29T18:33:24.720523Z","times_seen":32128,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/js/signup.js?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.693Z","timestamp":1787927338693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/js/signup.js?ver=2.63 HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Tue, 25 Aug 2026 14:45:56 GMT\r\nETag: \"1ae5-659e02913e7eb-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1363\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6885,"size_decoded":1707,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4baf05b9869d13a1c694abe48de5ac3d","sha1":"e7373fdab12eb7ea3d1c79575e7aafa4f89d6a65","sha256":"b5f7205a9ba58c83b760baaaf1180b35381bea38986639e4db3f6c8a64ac3bee","sha512":"507654efa21c5495eecef014ead56e955dd19860ec3e18b9194b37d458569c617d288ad3cd4633462462170540d9828608c16274c50d216617dbac77d7c6ad2a","ssdeep":"192:0qNicLjOL9O2n0pok/gG1fojJPkYq+PzxLDolkIy1fbTJBkJHMqojZmkjb2DxgWB:RLjOL9O2n0pok/nwjJPkEPFLDolkffbC","tlshash":"99e1b054f5a31ad810b3b03917ff491036a7a15b79049f01f92e49c81fd692fbda2e2a","first_seen":"2026-08-28T14:00:47.704479Z","last_seen":"2026-08-28T14:29:28.858035Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.813Z","timestamp":1787927338813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wallet.trust-web.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 10:36:12 GMT\r\nexpires: Mon, 23 Aug 2027 10:36:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445966\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-29T18:21:47.971503Z","times_seen":32869,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/img/favicon.ico","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.892Z","timestamp":1787927338892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/img/favicon.ico HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Thu, 14 May 2026 13:50:20 GMT\r\nETag: \"10be-651c76085ff00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4286\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4286,"size_decoded":4587,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d64409832bf25f9f8a23aa62c0f45a94","sha1":"a06280774b62918462bb7629810270597f631930","sha256":"f4c981d5bea25294ea52ab73ec88d5bfea7c8c2bc89aa007a413754cc9e75f50","sha512":"abae70e9ef45aeb1523b2a8b355061fa3526d62cb2a838c3089b8e69f4d7bc66879772b70446e079eade267e7d1cc637ca7cbee044472121866af1beaa3bda9f","ssdeep":"96:0Gw0hjcRa1ODkxus88DBLbAcRXkeHu0y3nZpaB:Fhjoa1OWzbA6Xk9rc","tlshash":"209152154e3fb1dcc354867dbc250da7275bc72978b8a62e0ec451ea2a1b0642348dd1","first_seen":"2026-08-28T14:00:47.72555Z","last_seen":"2026-08-28T14:29:28.863025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:28:57.979Z","timestamp":1787927337979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nSet-Cookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4702\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"8e7dcantf8s7rqqfm0aon3gt4j","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":20225,"size_decoded":5123,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9291)","md5":"013ceeb30b434bbe8280d6131ff66b78","sha1":"70f588be8c36d94f5f071701590ad20b473c9f89","sha256":"af23d59beb9f12785f3e729e0d68d0455dc6de7540ff1fae5e4a18b9ce7abfb9","sha512":"1c89583af9c6a91796a416d972282f9f6bc7490bbdfe4f813f0fb04504b371886b2f863c7699ee07e7013722a4b92f7da0e64753b66d1d689283bc68a56a3e64","ssdeep":"384:K4dNJ6Ih7a4r/ZdSZUaAhHkWbQs9wAJScZ2T9PA:K4DZdypa9bQJPA","tlshash":"f3926332e0a401627a1ec7ad91d0b328e998e706de07676571fc21ac8f95ef704fb61d","first_seen":"2026-08-28T14:00:47.711743Z","last_seen":"2026-08-28T14:29:28.869133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":89,"connect":20,"send":0,"wait":83,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/style.css?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.682Z","timestamp":1787927338682,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/style.css?ver=2.63 HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Thu, 15 May 2025 19:51:45 GMT\r\nETag: \"140-63531fed05640-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 240\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":575,"mime_type":"text/css","magic":"ASCII text","md5":"9b7d5d14180df1c3155da891f30741ee","sha1":"47ffd020a1eea0c1582831403713a1c8769b1a0c","sha256":"8f048e52945e4a5cbce37818015a1fd25ca6b17f1c6e99fdc98e7d0629faef9b","sha512":"e18e412d04322d8032c80db18462a52657b777a0cba998d1010296b85a34d64a9f886e903fe597dab569030e54fb24d0f84093b9c91c9aa9744fb6f96ef8093a","ssdeep":"","tlshash":"d4e07d0cda53d12b98f1a3997c67f07ee46cd30191cc9092d95b8b8644a033611f253d","first_seen":"2026-08-28T14:00:47.729961Z","last_seen":"2026-08-28T14:29:28.870902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/css/style.css?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.684Z","timestamp":1787927338684,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/css/style.css?ver=2.63 HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Mon, 15 Jun 2026 18:12:58 GMT\r\nETag: \"aa70-6544ec6b1fe80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7441\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43632,"size_decoded":7779,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"d9074340f3d1778fe31274b99d908914","sha1":"96aca8a604497ddd05ac5e868a1b337ee2f27d69","sha256":"38feba7de18ce98fc3cf0c52721a5aa88ec61e5e0307b2e6f4835bcbbbdd8246","sha512":"95cdedf5ae9280715ed38ff0dc3e27b5d0723d3b445c5cc4c6ebd6cf0c976856102f288f8d72ed29d4c70d613e916b94a0c2db89cc20ddf9b14a99d98bad9968","ssdeep":"768:v8XFDFXFDFWFpF4FhFpFpFBCFnFpFJFhFN8csDZSFNFSAXKQDDFDFpFDFOjFDF4+:v8X5J5MDmfXDDCNDHfIcstSLsAXKQDDq","tlshash":"661342d227b596247c2bf5402e96db65b35c9083940fcab96ff5200cddc92fa6863b4c","first_seen":"2026-08-28T14:00:47.732227Z","last_seen":"2026-08-28T14:29:28.871827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js?ver=7.1","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.686Z","timestamp":1787927338686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js?ver=7.1 HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 28 Aug 2026 14:28:58 GMT\r\nage: 1140117\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270032-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 585496, 21848\r\nx-timer: S1787927339.720857,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30978,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-29T19:26:17.729168Z","times_seen":192306,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":9,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.trust-web.co/wp-content/themes/BasicTheme/assets/js/main.js?ver=2.63","fqdn":"wallet.trust-web.co","domain":"trust-web.co","tld":"co"},"ip":{"addr":"212.224.107.21","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wallet.trust-web.co/","date":"2026-08-28T14:28:58.691Z","timestamp":1787927338691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-web.co","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 12:48:17 GMT","end":"Mon, 23 Nov 2026 12:48:16 GMT"},"fingerprint":{"sha1":"E9:1F:6A:1F:B1:C8:D0:01:0D:64:C0:4B:39:FA:92:BF:D2:47:52:43","sha256":"F8:E6:58:4D:EA:63:4D:7A:9B:7C:C5:13:92:5C:75:03:9E:E7:04:9F:6A:CA:59:B4:CC:FB:14:3D:73:03:E3:5E"}}},"request":{"raw":"GET /wp-content/themes/BasicTheme/assets/js/main.js?ver=2.63 HTTP/1.1\r\nHost: wallet.trust-web.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wallet.trust-web.co/\r\nCookie: PHPSESSID=8e7dcantf8s7rqqfm0aon3gt4j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Aug 2026 14:28:58 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Tue, 25 Aug 2026 14:45:56 GMT\r\nETag: \"1a8d-659e0290af2f1-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1886\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6797,"size_decoded":2231,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ddd43bb5500533b71b43321576467220","sha1":"0218a63034394ec4ea637dbe0493a88b75313c45","sha256":"d5218fe4c9dfd943bd18f059bebb5076e14a2de0a16ebfd301420d36707f1dd9","sha512":"9a121209a49825aaa8ea69ace6e00c486b1313e378bd7b079a8599d41c9cef823e4f9a74fe430080ac43f1618c753f0565bbb45692561412915cb6cce2634fea","ssdeep":"192:06Qb2AEnoiOJk4FdRHVU9QQ+DknQdtdEySo:6ooiOJk4PpUoDdtdAo","tlshash":"2ce1434cbbbd22e054bbb17a16bb840026769517b408df10fa5cd9e02f8d12cf593b6d","first_seen":"2026-08-28T14:00:47.701614Z","last_seen":"2026-08-28T14:29:28.876435Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"wallet.trust-web.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}