{"report_id":"9f800021-40dd-4ca8-ace3-82071ecd5c6e","version":6,"status":"done","tags":[],"date":"2026-03-16T17:38:49Z","url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"title":"Trust Wallet — Secure Web3 Crypto Wallet for DeFi \u0026 NFTs","dom":{"size":21167,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (510)","md5":"299a2c37bd05e77090bd77ace0bfeb24","sha1":"f9376c190c5900a13b637c84bfd33222b1cae20c","sha256":"e9209fd92f0b51e978906b056129d4cd5469fea74de811506dd75622b6ac6fd7","sha512":"4de1ed46dfb2e60bdb27989f8a86eb573bc986d0d3816c7e1bedf59c8b14f1d7804b1019ac90c78c53af7a06077b0cd3dc9842b94b715f60fcd7a83b9e9c5a3d","ssdeep":"384:PRjv+BXJ7rV56tFBPQn7Iq3Rf3l2AFQeypsu96/kyl2:8B5l56tFBPcRvUQs68","tlshash":"e792a7b7e29827098742425d68027bfec103883db7c66dfa319f867a2b41780497f327","dom_hash":"domhashd47bef3206eb5c2d951fe27f67fe36a3","first_seen":"2026-03-16T17:37:56.947364Z","last_seen":"2026-03-16T17:38:50.663232Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T17:38:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":10196,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":2,"received_data":73526,"sent_data":1134,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app-trustwallet.to","ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-16T17:37:52.741447Z","last_seen":"2026-03-16T17:37:52.741447Z","alert_count":6,"request_count":3,"received_data":27542,"sent_data":1383,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a8256af3ef36a92cf0cb68335036236","sha1":"aeba73279fbb1a603c51390513f0f92d67a5f9d3","sha256":"aba60d66026b613cf6f2d8030527a241558b794006d63663c7a8cfab66b9f7cf","sha512":"b9b35d6c70250e3a2e8290985338b48cb68ecaf5b30ec87527ed8344ba316a933ac1dccbe82e1c67ec01609ee78cf6ab73555fe31bc596def91cf8bd984703b9","ssdeep":"","tlshash":"6be07d193082103912b354b623f341091527270ec44e4312795fc5965725d71060a50c","size":320,"data":"","first_seen":"2026-03-09T13:05:21.308674Z","last_seen":"2026-03-16T17:40:51.665761Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d516a1efe2dccaaeac303d10df986db","sha1":"401a06a39627a5ad183075435242d0965f301f41","sha256":"c615e9f237e23b0c58464eefa27a83b7bd29202fafea73e6dc9fc3f9982c54f7","sha512":"35c13336adadd307b9c9d3b7b1c86ea6207d9f2aad28105fe47100bec22b99bc0b79f0f7ba31f811c41287e6a2d3215510ed4d8afb829e1872186d61ec2348da","ssdeep":"","tlshash":"0ca02413374414111f7f3057411053cd343040d33cc1d0373d1c03004d40741503c0c0","size":80,"data":"","first_seen":"2026-01-27T15:21:54.754351Z","last_seen":"2026-05-23T08:39:52.725167Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-trustwallet.to/en-gb/","date":"2026-03-16T17:38:29.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-trustwallet.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 19:59:40 GMT\r\nexpires: Wed, 10 Mar 2027 19:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509929\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-08-11T19:22:54.587511Z","times_seen":30214,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":96,"dns":1,"connect":21,"send":0,"wait":26,"receive":25,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-trustwallet.to/en-gb/","date":"2026-03-16T17:38:29.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-trustwallet.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 19:59:40 GMT\r\nexpires: Wed, 10 Mar 2027 19:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509929\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-08-11T19:22:54.587511Z","times_seen":30214,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":115,"dns":1,"connect":21,"send":0,"wait":27,"receive":13,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-trustwallet.to/favicon.png","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-trustwallet.to/en-gb/","date":"2026-03-16T17:38:29.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-trustwallet.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:20:55 GMT","end":"Mon, 01 Jun 2026 13:20:54 GMT"},"fingerprint":{"sha1":"42:EA:3F:8A:2B:03:0E:0E:E9:3C:95:8A:18:F6:A0:16:79:F8:DB:F9","sha256":"A9:4B:7D:E4:7C:EA:5B:42:E4:B0:91:39:9A:91:C8:17:1D:B1:77:E2:B4:AA:FF:5E:B3:6A:43:4A:99:4A:D8:CB"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: app-trustwallet.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-trustwallet.to/en-gb/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 16 Mar 2026 17:38:29 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 05 Mar 2026 09:42:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a94ff6-49d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a185d5aa19c6c9061227253a37080609","sha1":"d6579075b76a90828bbb6463c6fd626a587be2d9","sha256":"cf2d440f28d9828dd95b05c7e306c086852957fc7a708d16e2e659253f16f959","sha512":"843f992e24028181a2aed630404ed488ed3cc5c534d7e7ced2e80aa2405fc94407649205f85488cf966b6db6af9c3351cdbaa67718166811b85e100e5378b702","ssdeep":"","tlshash":"8b21da69fa6f2064412bf7be183047817fe4091c71c166f91b235dad57b11880eeee01","first_seen":"2025-12-17T12:55:11.652407Z","last_seen":"2026-06-09T04:16:18.08839Z","times_seen":10,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-trustwallet.to/en-gb/","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T17:38:28.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-trustwallet.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:20:55 GMT","end":"Mon, 01 Jun 2026 13:20:54 GMT"},"fingerprint":{"sha1":"42:EA:3F:8A:2B:03:0E:0E:E9:3C:95:8A:18:F6:A0:16:79:F8:DB:F9","sha256":"A9:4B:7D:E4:7C:EA:5B:42:E4:B0:91:39:9A:91:C8:17:1D:B1:77:E2:B4:AA:FF:5E:B3:6A:43:4A:99:4A:D8:CB"}}},"request":{"raw":"GET /en-gb/ HTTP/1.1\r\nHost: app-trustwallet.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 16 Mar 2026 17:38:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6319\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21095,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (510)","md5":"fb9f2b57584b70ac38e3bb532848b882","sha1":"04770002a5e717a83e5461b1ddd75cb385309dd7","sha256":"689f48481d3dda6fb64dd9372148dc5638ff74c50d69496438e62ee55b82265e","sha512":"143034c12466e7605776427e49cafca247d007532f81800ee4a35763ee4a41ddac4def8ddd86c281c1d8057ba0462e1d55c6c6ff39db5fc9df1a3556b25e5236","ssdeep":"384:Njh+wUJ7rV56tFBPQn7Iq3Rf3l2AFReypsu86/kyrU:mwQl56tFBPcRvUQ06E","tlshash":"8f9296b7e29827098742425d68027bfec503883db7c66dfa719f867a2b41780497f327","first_seen":"2026-03-16T17:37:56.950029Z","last_seen":"2026-03-16T17:38:50.672173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":124,"dns":1,"connect":58,"send":0,"wait":397,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-trustwallet.to/en-gb/","date":"2026-03-16T17:38:28.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-trustwallet.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 17:38:28 GMT\r\ndate: Mon, 16 Mar 2026 17:38:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4058cc3961136b5d0727eeb45ef25a88","sha1":"1374d05dd6ec645bf53087743c71dac8b91a6487","sha256":"473c107a12d3da9dc4ee44038b2c61a56d913ac3b5c406857f70e9271d7a4af5","sha512":"b6833ea6f24cdadf79fcbc035187c8e1260fc286f436af23531c436ccbf4cce2f45508a82cacf479ac1c1cdd7cdb790b35c853676a87bd50bd5b39eaaf7c8211","ssdeep":"192:Mq8qg9x3xI/7WUqrBfWx3aIA79SqRbVox3cIO7HC:7Mr+CS/","tlshash":"a612caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-26T11:59:27.868254Z","last_seen":"2026-08-11T11:07:02.273956Z","times_seen":189,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":118,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-trustwallet.to/styles.css","fqdn":"app-trustwallet.to","domain":"app-trustwallet.to","tld":"to"},"ip":{"addr":"178.16.52.131","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-trustwallet.to/en-gb/","date":"2026-03-16T17:38:28.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-trustwallet.to","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:20:55 GMT","end":"Mon, 01 Jun 2026 13:20:54 GMT"},"fingerprint":{"sha1":"42:EA:3F:8A:2B:03:0E:0E:E9:3C:95:8A:18:F6:A0:16:79:F8:DB:F9","sha256":"A9:4B:7D:E4:7C:EA:5B:42:E4:B0:91:39:9A:91:C8:17:1D:B1:77:E2:B4:AA:FF:5E:B3:6A:43:4A:99:4A:D8:CB"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: app-trustwallet.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-trustwallet.to/en-gb/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 16 Mar 2026 17:38:28 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 05 Mar 2026 09:42:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a94ff6-11cd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"820d276d231c99c8efcd32e08b42a3d1","sha1":"d41081b751ec0e7e6c138a76a2de02b3718fe366","sha256":"5d68d441e64876915d4a78451749b9a5982e18f2cc01bd87d5ab3d36990fcfb8","sha512":"a47271dc010b1a382f0461872a56379ca3a05a9bd716623f096efa429d1f59560c9ef80eb654372f630f0b622ce0674456eef35ad9557f2f8b08145e0e50ad28","ssdeep":"96:Q220hGCMC6cGZNCk86amNTH4w9rfC0CM9//m9IJCQtM9C8CdxoL892lKCKGEpVkR:X20nDI+B6PWiO9QC8ULNZKGE/oOEb","tlshash":"089131952bb45534b91b96a5b696cf46b37cd043840eccb8aef9001cdd893bd94a3f4c","first_seen":"2026-01-27T15:21:54.744599Z","last_seen":"2026-06-28T09:28:33.452227Z","times_seen":43,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"app-trustwallet.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}