{"report_id":"936732dc-8231-459f-8a7a-293276cdd5c6","version":0,"status":"done","tags":[],"date":"2026-09-11T09:56:24Z","url":{"schema":"http","addr":"trustsending.live/","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"Google LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustsending.live/","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"title":"USDC Approval Manager - Signature-based Token Approvals","dom":{"size":5460,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2774)","md5":"2e286e227039885dd2caea342933f68a","sha1":"19b636e64ab272b353a83439a04c3c4fdebd01da","sha256":"46908a5a79e6246e4fdc09b8f09d6d4388dee077d850953ba6b6cf8e78cfc037","sha512":"002363186817814ab46bd11cbbab9ec18c832a08418d04b7a0662d4f3554f7dfa7b4f9cb0be65d97f557f17db119d10877c2fdd694a77b86c9c2c4432ce6c1be","ssdeep":"96:nCplbFA1cgx+M73sQ8egsBPmTD46Wwftk08SpZkaIlYxtWjK34:cl21NmQKVZUi4","tlshash":"7fb174ba450a087a710375a1f4e0fb67047a924fe5fbc494b0958996cbcafc9cc53a78","dom_hash":"domhash084ded6ef5527c89be0bd7b7dbaab402","first_seen":"2026-09-06T23:12:24.295102Z","last_seen":"2026-09-11T09:56:29.863855Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustsending.live/","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T09:56:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trustsending.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":146540,"sent_data":1850,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trustsending.live","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":1649579,"sent_data":2626,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"replit.com","ip":{"addr":"104.18.35.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-02","domain_rank":8181,"first_seen":"2015-09-15T20:45:19Z","last_seen":"2026-09-06T19:44:12.051557Z","alert_count":0,"request_count":1,"received_data":5534,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-09-07T12:19:01.647101Z","alert_count":0,"request_count":1,"received_data":15729,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":1,"received_data":73777,"sent_data":559,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"replit.com/public/js/replit-dev-banner.js","fqdn":"replit.com","domain":"replit.com","tld":"com"},"ip":{"addr":"104.18.35.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ef62263fdd4d343920e52101493d5ef","sha1":"66edec25c6e4cf2897dca70332d48af3e092252a","sha256":"e2bedec4d902217c8bd92775b038e27b7864105e42d6358038faeb5f391f9306","sha512":"25a866a0455c6e020820950804183754e09275189b1166060fd60b8c0f9ef166eca8267b558286bc0212638d75e545861537495693e9d01a449a8906341c8943","ssdeep":"96:TZ5Fz5FH59dJuf5GGO4jw2y+ZL5P7buUyDSoyqeUoW/cle:Nfb7dJI7w2yolP7buUyDSoN3/cle","tlshash":"fc91756a6f731235952390ac5bc7a7412338b01be10acd597ead824cdfed614e9637cc","size":4626,"data":"","first_seen":"2025-12-19T19:12:36.875979Z","last_seen":"2026-09-11T09:56:29.879675Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsending.live/assets/index-aOjBR8WB.js","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f3f466497deb731e6a609be20b10f8","sha1":"9b1a6438256b66e92918f427c2d6e3ee086eac08","sha256":"a7a19e0f52693662ce628145314d048b55129249dc488bf3b0e42a97c94c00bc","sha512":"76fc82b5f41e834e215dcf5dbc149749ab31ac9847f98d01dc9b538a2e18374ffd45d3bf766fc8625858a375e00218992b5b9aa60f2f024aee26b7a7b9b26719","ssdeep":"24576:mpg2ubwDRERn7qYbmjSfJm9R0ghv6AzQxhzEFcfUGLa2vnojHq:cghbwDRERn7qYbmjSBm9R0k6AzQxdPfp","tlshash":"17757ed072a2b47c6b6701d444bf0501f2386417a40dc4acf2fcdaf6afa598989b7b79","size":1557764,"data":"","first_seen":"2026-09-06T23:12:24.303177Z","last_seen":"2026-09-11T09:56:29.885589Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:52.636Z","timestamp":1789120552636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 09:55:52 GMT\r\ndate: Fri, 11 Sep 2026 09:55:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145856,"size_decoded":8135,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"194d9b4264ae31301c9ddcebe7065ca4","sha1":"bc9e7d59e1021aaf4915478b6a459f2ece1dd060","sha256":"82fd0d181927fff9a997dcd3b61fc25d4df92e3bdf91f33bfd01a85b6b2ddf1a","sha512":"73f5e8fce63b94fb920634148e6eaa75736473b467c07e4eb3e9345f60d4fa2b64fd750bbcb25cffce3e06b10b9bbd661bea08826580ca24c5585fa9ec683073","ssdeep":"768:CtFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:5VXPNo6mACNqHvDyWNpQ9","tlshash":"efe31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-06-09T04:03:47.231468Z","last_seen":"2026-09-11T09:56:29.867814Z","times_seen":215,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":37,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsending.live/assets/index-aOjBR8WB.js","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:52.638Z","timestamp":1789120552638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsending.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 13:44:30 GMT","end":"Thu, 05 Nov 2026 13:44:29 GMT"},"fingerprint":{"sha1":"81:A7:60:B8:33:17:BD:C4:12:58:6C:CC:C3:AD:5D:AB:97:74:ED:0A","sha256":"A0:95:5F:54:77:DE:20:F7:E5:BE:B4:14:80:DA:4D:DC:82:D1:8E:AC:4C:89:F5:6B:4B:EF:48:9A:9A:56:58:EB"}}},"request":{"raw":"GET /assets/index-aOjBR8WB.js HTTP/1.1\r\nHost: trustsending.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nCookie: GAESA=Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1557764\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 11 Sep 2026 09:55:53 GMT\r\netag: W/\"17c504-19fdcd3f068\"\r\nlast-modified: Fri, 07 Aug 2026 15:25:05 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b1b0549ab94021b6f8b5cc1eb39f97c2\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1557764,"size_decoded":1558269,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"b8a47e40dd688568640fc7ded7e1aa3b","sha1":"619efc98ccfd34e6eb09c7e8add85f077ff5d6c1","sha256":"5a388c0b75155298594095f31dcba83ba51b5850a51858b58de725fe34f81b8a","sha512":"ab9e14645d13b5439007f584407555e10c6134476e5e3a1e5dfaf863d8b29a0b0ed5c7937ae3d583bf7220940d9e9e5e3ad93a3f37bae259ec9325371c6869e0","ssdeep":"12288:kN/nhNpqu5Bu3n0NubwDRJSRn7CpYWcfMckdj/QUzPUyGmdBJZqJfJgJ9R0ghv6d:mpg2ubwDRERn7qYbmjSfJm9R0ghv6d","tlshash":"7d257dd472a5a47c7a5342e440bf0501f3387417640dc0a8f6fcdaf6afa958a88b7b79","first_seen":"2026-09-06T23:12:24.301374Z","last_seen":"2026-09-11T09:56:29.875745Z","times_seen":4,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trustsending.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsending.live/assets/index-DiVkGU3V.css","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:52.639Z","timestamp":1789120552639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsending.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 13:44:30 GMT","end":"Thu, 05 Nov 2026 13:44:29 GMT"},"fingerprint":{"sha1":"81:A7:60:B8:33:17:BD:C4:12:58:6C:CC:C3:AD:5D:AB:97:74:ED:0A","sha256":"A0:95:5F:54:77:DE:20:F7:E5:BE:B4:14:80:DA:4D:DC:82:D1:8E:AC:4C:89:F5:6B:4B:EF:48:9A:9A:56:58:EB"}}},"request":{"raw":"GET /assets/index-DiVkGU3V.css HTTP/1.1\r\nHost: trustsending.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nCookie: GAESA=Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 84275\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Fri, 11 Sep 2026 09:55:53 GMT\r\netag: W/\"14933-19fdcd3f068\"\r\nlast-modified: Fri, 07 Aug 2026 15:25:05 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b9f5300d94021192f8b5cc1eb39f9f15\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":84275,"size_decoded":84763,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"808a2396b1fe6f751e6ff9b6bb6d598d","sha1":"98b8523a7e9a19bae2693996fa45de462865698d","sha256":"535198fdc5a5247f2c2ed0cc481b5a19e388f88d44aeb13a02edcd48a9f2f77b","sha512":"ecdb068715fbc6820009fbb044d80c238ad152f2438d702b108887121b21a122e2c80bc84b94a472ef95ebeb457f34c470884e85f0d7ec763cba89e2cf85e166","ssdeep":"1536:gCofh+vyRkYJw8IQ6GUBBweEMGSfC378VQZkt5FxPboqL:gCofh+vyRBw8IgU2MGSfC378VQZkt5Fz","tlshash":"5583652dba59603f3c6791f4d28cbaace10bf1c0de3a45eabd86412167d23f25d97604","first_seen":"2026-09-06T23:12:24.296511Z","last_seen":"2026-09-11T09:56:29.877988Z","times_seen":4,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trustsending.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"replit.com/public/js/replit-dev-banner.js","fqdn":"replit.com","domain":"replit.com","tld":"com"},"ip":{"addr":"104.18.35.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:52.641Z","timestamp":1789120552641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"replit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 07:36:10 GMT","end":"Wed, 09 Dec 2026 08:36:04 GMT"},"fingerprint":{"sha1":"33:AC:85:95:9A:69:20:D7:46:88:64:20:10:7E:19:E0:2E:E0:0F:6C","sha256":"5F:3B:FB:CF:F5:18:42:41:D8:CE:B1:F4:2D:5E:09:A5:A3:B6:0F:8A:37:80:63:07:AC:72:2F:3B:F9:01:A4:35"}}},"request":{"raw":"GET /public/js/replit-dev-banner.js HTTP/1.1\r\nHost: replit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 09:55:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Aug 2026 19:59:54 GMT\r\netag: W/\"1212-1a016757e90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 3\r\nx-edge-backend: istio-prod\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 1834257\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; preload\r\nset-cookie: __cf_bm=10uyuJZ9stHtYuIho49vwy922nn6wtZsi.1Jk6awF0I-1789120552.660793-1.0.1.1-znt.929w35PGU2dDDr9c4tN1AncTB_XxV._EX5FzhJ6oJ17JC4_xeUBLs8mAtjhzDensauqNQAeALkmMnzG9esDsYQ5dDnAsQD0grjCtXxM1TAtnMpqeo91u1BizgNC7; HttpOnly; SameSite=None; Secure; Path=/; Domain=replit.com; Expires=Fri, 11 Sep 2026 10:25:52 GMT\r\ncf-ray: a395cc9e1f12b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"10uyuJZ9stHtYuIho49vwy922nn6wtZsi.1Jk6awF0I-1789120552.660793-1.0.1.1-znt.929w35PGU2dDDr9c4tN1AncTB_XxV._EX5FzhJ6oJ17JC4_xeUBLs8mAtjhzDensauqNQAeALkmMnzG9esDsYQ5dDnAsQD0grjCtXxM1TAtnMpqeo91u1BizgNC7","quoted":false,"path":"/","domain":"replit.com","expires":"2026-09-11T10:25:52Z","raw_expires":"Fri, 11 Sep 2026 10:25:52 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=10uyuJZ9stHtYuIho49vwy922nn6wtZsi.1Jk6awF0I-1789120552.660793-1.0.1.1-znt.929w35PGU2dDDr9c4tN1AncTB_XxV._EX5FzhJ6oJ17JC4_xeUBLs8mAtjhzDensauqNQAeALkmMnzG9esDsYQ5dDnAsQD0grjCtXxM1TAtnMpqeo91u1BizgNC7; HttpOnly; SameSite=None; Secure; Path=/; Domain=replit.com; Expires=Fri, 11 Sep 2026 10:25:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4626,"size_decoded":2701,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"3ef62263fdd4d343920e52101493d5ef","sha1":"66edec25c6e4cf2897dca70332d48af3e092252a","sha256":"e2bedec4d902217c8bd92775b038e27b7864105e42d6358038faeb5f391f9306","sha512":"25a866a0455c6e020820950804183754e09275189b1166060fd60b8c0f9ef166eca8267b558286bc0212638d75e545861537495693e9d01a449a8906341c8943","ssdeep":"96:TZ5Fz5FH59dJuf5GGO4jw2y+ZL5P7buUyDSoyqeUoW/cle:Nfb7dJI7w2yolP7buUyDSoN3/cle","tlshash":"fc91756a6f731235952390ac5bc7a7412338b01be10acd597ead824cdfed614e9637cc","first_seen":"2025-12-19T19:12:36.875979Z","last_seen":"2026-09-11T09:56:29.879675Z","times_seen":505,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/6319/large/usdc.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:53.877Z","timestamp":1789120553877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/6319/large/usdc.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 09:55:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14806\r\nx-amz-id-2: NAbAXTZF6Ig4zmyXeM9E5kV5kxNRsZPvsMUijlSXGSpUPil6DGo8P/+icd+oVDowFhaZpQ4Nj+U=\r\nx-amz-request-id: HJHZH56MK5D9ZP2D\r\nlast-modified: Fri, 22 Sep 2023 09:17:55 GMT\r\netag: \"76c6fe8560fc7f0dc487edfe08cc5fbc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .eR.9DMGcsAPThaQfkrjBkZFiTQ6wQ2c\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=26417\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 498704\r\nexpires: Sat, 11 Sep 2027 09:55:53 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a395cca5dff9569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14806,"size_decoded":15729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b4831d981dec0baaa44e681673736a7","sha1":"e14a339c955807a1bdce19fbabff9e3a4fed419b","sha256":"924f455e9308d2ab8412826ddb3fe044ad0e7f2caa57fd73928594491452946a","sha512":"037c4f91ee5e01529e63b4b02d2477e6487eb9cf031cf84dd4a884ce0bba10063b501f0e49de712f316b2fdd5f31a8942cb5318a7669bf8af35a8fcf2ab5839c","ssdeep":"384:jhkonj3XV5u6ol2JGVvIXOQxkjHLwWL0/9MWoLwe2+qLd5w:dkonBMctN4/MMWoJnaw","tlshash":"cd62e10cd979a81874411b008eba3b7b31c049c8a9366bf4eec5ea198c97f6cfae5145","first_seen":"2024-01-02T00:31:59Z","last_seen":"2026-09-11T09:56:29.88119Z","times_seen":19,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":30,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:53.886Z","timestamp":1789120553886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustsending.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 10:36:40 GMT\r\nexpires: Mon, 06 Sep 2027 10:36:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429553\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-09-11T14:32:02.835205Z","times_seen":34024,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsending.live/favicon.ico","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustsending.live/","date":"2026-09-11T09:55:53.960Z","timestamp":1789120553960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsending.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 13:44:30 GMT","end":"Thu, 05 Nov 2026 13:44:29 GMT"},"fingerprint":{"sha1":"81:A7:60:B8:33:17:BD:C4:12:58:6C:CC:C3:AD:5D:AB:97:74:ED:0A","sha256":"A0:95:5F:54:77:DE:20:F7:E5:BE:B4:14:80:DA:4D:DC:82:D1:8E:AC:4C:89:F5:6B:4B:EF:48:9A:9A:56:58:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustsending.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustsending.live/\r\nCookie: GAESA=Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2622\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 11 Sep 2026 09:55:54 GMT\r\netag: W/\"a3e-19fdcd3f068\"\r\nlast-modified: Fri, 07 Aug 2026 15:25:05 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1b4c1174c54a351fa47262f12d7ef7cc\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2622,"size_decoded":3108,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1432)","md5":"52bbcf4e401bfef1d9f84329a55dbe45","sha1":"651785b05b2c7ab5882a35201fc4a53c7d0ab8c3","sha256":"5f3caf4b70ecc276f99a7acc3d70907019e0fd87f872385b94aa3324c8c6fb99","sha512":"8dbb16cfd92856ddb1f5043a5d831c70c2b29f03eba335080681b05dd4b26fa589dc9a73890bfd676d2c7d441211d601a9192993c510ace035910e98b00abbba","ssdeep":"","tlshash":"62519cdbcd5a5c767011a179b8e1be17041aa44f5bf9c8a0b482d89bcdc97ccc863e29","first_seen":"2026-09-06T23:12:24.2997Z","last_seen":"2026-09-11T09:56:29.884184Z","times_seen":4,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trustsending.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsending.live/","fqdn":"trustsending.live","domain":"trustsending.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T09:55:52.029Z","timestamp":1789120552029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsending.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 13:44:30 GMT","end":"Thu, 05 Nov 2026 13:44:29 GMT"},"fingerprint":{"sha1":"81:A7:60:B8:33:17:BD:C4:12:58:6C:CC:C3:AD:5D:AB:97:74:ED:0A","sha256":"A0:95:5F:54:77:DE:20:F7:E5:BE:B4:14:80:DA:4D:DC:82:D1:8E:AC:4C:89:F5:6B:4B:EF:48:9A:9A:56:58:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustsending.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 2622\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 11 Sep 2026 09:55:52 GMT\r\netag: W/\"a3e-19fdcd3f068\"\r\nexpires: Fri, 11 Sep 2026 09:55:52 GMT\r\nlast-modified: Fri, 07 Aug 2026 15:25:05 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0; expires=Sun, 11-Oct-2026 09:55:52 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c38dd6db24cb9731d208e26cf8088df4;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0","quoted":false,"path":"/","expires":"2026-10-11T09:55:52Z","raw_expires":"Sun, 11-Oct-2026 09:55:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"GAESA=Cp4BMDBhNDFlOGMxZDdkZjY5ZjIxNWMxYjMwODI0ZTJkMjg0ZDJhODAyMTU5Zjc5M2FmNTE0ZmVlNzA4ZDExN2VkMzMyZjNmYzMzZmIwZWE0Y2RmNGQyMWY4NDFlMTkzM2NjZDU5Y2Y3NDVjNGUyZTQ1NWIwMGQyMTk3ZWI1ZWM2NjQ0YjQ4ZWFkMDljZThlYzhiOGVjM2RkYTQ3ZTMzZDEQ_rmU_4g0; expires=Sun, 11-Oct-2026 09:55:52 GMT; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":2622,"size_decoded":3439,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1432)","md5":"52bbcf4e401bfef1d9f84329a55dbe45","sha1":"651785b05b2c7ab5882a35201fc4a53c7d0ab8c3","sha256":"5f3caf4b70ecc276f99a7acc3d70907019e0fd87f872385b94aa3324c8c6fb99","sha512":"8dbb16cfd92856ddb1f5043a5d831c70c2b29f03eba335080681b05dd4b26fa589dc9a73890bfd676d2c7d441211d601a9192993c510ace035910e98b00abbba","ssdeep":"","tlshash":"62519cdbcd5a5c767011a179b8e1be17041aa44f5bf9c8a0b482d89bcdc97ccc863e29","first_seen":"2026-09-06T23:12:24.2997Z","last_seen":"2026-09-11T09:56:29.884184Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":18,"connect":12,"send":0,"wait":169,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"trustsending.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}