{"report_id":"a08618d7-9647-47fa-bad3-d9caafdb777b","version":0,"status":"done","tags":[],"date":"2026-07-30T12:19:21Z","url":{"schema":"http","addr":"trustwallet-securlty.com","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"trustwallet-securlty.com/","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"title":"Trust Wallet","dom":{"size":3607,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2688)","md5":"e760408c16977b31a061b2c05c0b2c9d","sha1":"bb8a708cf33e59fddfa9628cd886c0fe62f4d381","sha256":"cba8322691e557234c0ca16faf8af76d458f755a09f108626a405aa0d325b625","sha512":"3b07b3b07951d55e45981b73a383ce21ccf281f3669d5356f973879939ea97cd802fcb7eff94faa86f2ab8f18ff1b7342b1c9ddeb0db972907c0592812d7c1ff","ssdeep":"","tlshash":"0e71b71681543c1e53978eb5e953f25c9195e30bc3975bb8abb883aa1bf2ed0c073061","dom_hash":"domhashc21a6380f5312a2933031850f4cc2044","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwallet-securlty.com","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T12:19:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwallet-securlty.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-07-29","domain_rank":0,"first_seen":"2026-07-30T12:12:37.895398Z","last_seen":"2026-07-30T12:12:37.895398Z","alert_count":10,"request_count":10,"received_data":1177262,"sent_data":7723,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwallet-securlty.com/~flock.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-30T13:36:48.096492Z","times_seen":14617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/index-CC34nnLm.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2de2446755e6d48eb356e0474209b142","sha1":"7c31a2a0f4c0c51aeecda8121efe707c486afd5c","sha256":"530f8870d2ec2a90ce7296bb8ce475742740acd7fecb5442149a4d901144c6da","sha512":"335793c513aaf19867f04820b5bc7576e7d729de5af8ec09698ee8050fe2072ec7553bd022010576b07afb91f184f6aed69db15e2bbcacfecae3dc0bbc49dae9","ssdeep":"6144:fwi4oEqHrfMC/MyT2MIaVkdDmNQ+1TzfFmL/O37iapoOp:74et6DmNvJppoOp","tlshash":"a5742be832a6b2221bd756b6407f1506b33518672c0d4420b224fdef76b188995fbff9","size":345769,"data":"","first_seen":"2026-07-30T12:12:42.312454Z","last_seen":"2026-07-30T12:19:23.843333Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/routes-6WIIZjGi.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4deafcf0ec929998236afd22673eafc","sha1":"7950146e5d9591b7082bcba5d8cc3b2e4ec3e599","sha256":"65333028d54af64955c7eab995f79969fb842d74fa66b399f0c6d3f5f7cffb07","sha512":"4e08d44c152290837d94bee20f6aaecf81ca534c66aa81688995c995baec8b910e621bdb6fde99de3400b3100df4644ab8c4e36a5141e984d8a2b046354a3cd9","ssdeep":"","tlshash":"3141224ee0c16eecb6470864615fd04e305bc554db6f8ab87e78707665810e56b23bc4","size":2293,"data":"","first_seen":"2026-07-30T12:12:42.314887Z","last_seen":"2026-07-30T12:19:23.844029Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/logo-new.png.asset-rZgIUHWo.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bee5368fe78e6085cc4d333c1d1fd415","sha1":"4a884fdddaec145d0541b27c344aa9b8637a9326","sha256":"0fc9e5c1ea4278647a19495c3aa0d873ca7762ef62bd1cfc0a89f486b486cd67","sha512":"de77e7fe1522827f4d0def26b490991c64e4e92c0ccd1f6a0bf2d6a7f503cc252c5e934681f9a8e15ac4c9034ab71c5306ebe526ccc0de5e3426037bef6baeeb","ssdeep":"","tlshash":"a6316407e2ad3e7d6367814d475c520ca456c310beab6668b0e8092e77a708067fb7c5","size":1585,"data":"","first_seen":"2026-07-30T12:12:42.294185Z","last_seen":"2026-07-30T12:19:23.84501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/styles-D0Dx_FoX.css","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.387Z","timestamp":1785413935387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /assets/styles-D0Dx_FoX.css HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f082e9056b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77333,"size_decoded":13313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"edbdf1d087335444d4dcaa6c0c48ed2e","sha1":"3a0d812c177673add58c5f7bd9d6dee0c2d9ec42","sha256":"6b6a104e5bf940e99e2ebd16d8514eeb80637fc7bbebd0318ec95811e8f734f5","sha512":"ede9f1f6c8fc3ef0614c1071017dde4328d9c476dba0f8535db6069b0b8707ff585d2372eedd2720e6ad9f6489ce785223021cf59313878f0d542ac4feadc3fb","ssdeep":"1536:QqG7fh+CDEywX6wSf/fEaUTaaGSsMq+WDhXX78E+Xbein988R988q:VG7fh+SEyLwSf/fPUTqMq+WDhYDX+","tlshash":"4773f690b229d93f7c33a4f5938cb89c911970c0dd7546e8ff56612216c3bf2adab618","first_seen":"2026-07-30T12:12:42.307075Z","last_seen":"2026-07-30T12:19:23.842508Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/index-CC34nnLm.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.388Z","timestamp":1785413935388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /assets/index-CC34nnLm.js HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f082e9156b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345769,"size_decoded":107728,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43892)","md5":"2de2446755e6d48eb356e0474209b142","sha1":"7c31a2a0f4c0c51aeecda8121efe707c486afd5c","sha256":"530f8870d2ec2a90ce7296bb8ce475742740acd7fecb5442149a4d901144c6da","sha512":"335793c513aaf19867f04820b5bc7576e7d729de5af8ec09698ee8050fe2072ec7553bd022010576b07afb91f184f6aed69db15e2bbcacfecae3dc0bbc49dae9","ssdeep":"6144:fwi4oEqHrfMC/MyT2MIaVkdDmNQ+1TzfFmL/O37iapoOp:74et6DmNvJppoOp","tlshash":"a5742be832a6b2221bd756b6407f1506b33518672c0d4420b224fdef76b188995fbff9","first_seen":"2026-07-30T12:12:42.312454Z","last_seen":"2026-07-30T12:19:23.843333Z","times_seen":3,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/routes-6WIIZjGi.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.390Z","timestamp":1785413935390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /assets/routes-6WIIZjGi.js HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f083e9556b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2293,"size_decoded":1565,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1633)","md5":"d4deafcf0ec929998236afd22673eafc","sha1":"7950146e5d9591b7082bcba5d8cc3b2e4ec3e599","sha256":"65333028d54af64955c7eab995f79969fb842d74fa66b399f0c6d3f5f7cffb07","sha512":"4e08d44c152290837d94bee20f6aaecf81ca534c66aa81688995c995baec8b910e621bdb6fde99de3400b3100df4644ab8c4e36a5141e984d8a2b046354a3cd9","ssdeep":"","tlshash":"3141224ee0c16eecb6470864615fd04e305bc554db6f8ab87e78707665810e56b23bc4","first_seen":"2026-07-30T12:12:42.314887Z","last_seen":"2026-07-30T12:19:23.844029Z","times_seen":3,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/assets/logo-new.png.asset-rZgIUHWo.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.391Z","timestamp":1785413935391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /assets/logo-new.png.asset-rZgIUHWo.js HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f083e9956b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1585,"size_decoded":1360,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1585), with no line terminators","md5":"bee5368fe78e6085cc4d333c1d1fd415","sha1":"4a884fdddaec145d0541b27c344aa9b8637a9326","sha256":"0fc9e5c1ea4278647a19495c3aa0d873ca7762ef62bd1cfc0a89f486b486cd67","sha512":"de77e7fe1522827f4d0def26b490991c64e4e92c0ccd1f6a0bf2d6a7f503cc252c5e934681f9a8e15ac4c9034ab71c5306ebe526ccc0de5e3426037bef6baeeb","ssdeep":"","tlshash":"a6316407e2ad3e7d6367814d475c520ca456c310beab6668b0e8092e77a708067fb7c5","first_seen":"2026-07-30T12:12:42.294185Z","last_seen":"2026-07-30T12:19:23.84501Z","times_seen":3,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/~flock.js","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.392Z","timestamp":1785413935392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f083e9d56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-30T13:36:48.096492Z","times_seen":14617,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/__l5e/assets-v1/60a4358d-c37b-4909-a1d9-56a934565e09/hero-devices.png","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.397Z","timestamp":1785413935397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /__l5e/assets-v1/60a4358d-c37b-4909-a1d9-56a934565e09/hero-devices.png HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 627184\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"46f0cc111228a18d32304f535b4abbf9\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2344f083ea556b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627184,"size_decoded":627750,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced","md5":"46f0cc111228a18d32304f535b4abbf9","sha1":"8ad359fb8f9ce2b6cce007d5d8090e294063dd0a","sha256":"fd51468b2f9c0c5050ff1e5e97273c68ce28e7251bd4dfa35fa95288142d77a7","sha512":"2feb8e1035a86e7eaf835a9b295971e52a2664e17eaa0d26bd42df4599c78bcc13e2f0f0d1d1b56d190d14641daabda59e808f1762916c3e686ef346183e7687","ssdeep":"12288:b7WCfGHFnKtlEEzLBwoq1SFjXfhMkBRiHYywpVY2I78/52be+8J10IK0:b7jfsQBLnX2kLieY24y5UYj0IK0","tlshash":"c8d42330b0ceb199cb47916f42ad0d27bcacd14d7bde4ba27200419621caedd56af3d6","first_seen":"2026-07-30T12:12:42.298251Z","last_seen":"2026-07-30T12:19:23.847193Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/favicon.ico","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.579Z","timestamp":1785413935579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f096fb156b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21899,"size_decoded":22146,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"12e26fd55b292b55bfd1302c3dee9c61","sha1":"d81799c9a691dc635ca14d4f957124bb58f644b2","sha256":"fbaee54621e16fe9ab0aa9f4e615632524aa925794f8954476902bfbe6aa0a97","sha512":"0524d36eeba7bcd873490f33c8dbf4fac1957ffdae701cbcf64b965840e535745986ab51a384feeafe8bfe67a967896edaa18243a6390e735abbda3455de8e37","ssdeep":"384:FVd/2hRIXXWsihGkmiij/osOu7nua2+1/MR38Ij0PjAypCa9R1MJ986OmvCmTYrR:FVdBXGJzirGeualLkyPc9tOmvCmkrR","tlshash":"7ba2e1ff5d42be94d18245bb4941b01bf2e1e748b0ae2e66481fc52069ca10dbbff854","first_seen":"2026-07-30T12:12:42.300967Z","last_seen":"2026-07-30T12:19:23.848266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T12:18:54.683Z","timestamp":1785413934683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl; HttpOnly; SameSite=None; Secure; Path=/; Domain=trustwallet-securlty.com; Expires=Thu, 30 Jul 2026 12:48:55 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2344f03fa3856b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5078,"size_decoded":3177,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"3c1e53e591722eb0bf68ec4ed119dbe3","sha1":"569a20aa914fd1f8696879441d3c559535380364","sha256":"6b61348f71442bcbbd3ad50a6e2e30bc452d1b08c5e8139fbf170290039a5eb2","sha512":"e4018beab08e2d7118d98b78ff994db7f75bacbbe649d649e4b197e6524dc447477d6c4fc6a8a9a5a62e426d56320ea512b4a9dd57b2319b016dc2fca449e5a6","ssdeep":"96:TmFHiaCVf0fjCMCxefD9y077qg9w9K4fikY9qdZTMS4IgeDYi:e1uf0fjRt7Zw9K4aDqMS43Fi","tlshash":"ffa1da674500283e13fe9db5e572f2185196e202d39786aca7bcc07a2bd2fd3c077561","first_seen":"2026-07-30T12:19:23.848899Z","last_seen":"2026-07-30T12:19:23.848899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":475,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/__l5e/assets-v1/43c7581d-f8ec-4899-afca-b51e2dd0ea21/logo-new.png","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.396Z","timestamp":1785413935396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"GET /__l5e/assets-v1/43c7581d-f8ec-4899-afca-b51e2dd0ea21/logo-new.png HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 69765\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"7db883c8bfd733103c2850a16e72c7e3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2344f083ea356b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69765,"size_decoded":70330,"mime_type":"image/png","magic":"PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced","md5":"7db883c8bfd733103c2850a16e72c7e3","sha1":"a434244ceb3d0dad43724239d32c957cb535c2c4","sha256":"361b9400aa18dc6ccea648923e7af6f68879be2c591a7d78d5f73ba912e6793a","sha512":"0da3ace56f0d25ee36ff86b8ce2c6ade012e795a63dccdeac9dd3ca81bde3d86e88021315b2e054d30ae6a31f4c52b0c0f88d6ffe402924a42cb46dc6a6ca6eb","ssdeep":"1536:9lurFrdHNr9AsH9DwoJ7WbyBGphEiIlmqXF/PBuyIVeg:9l0rdfbZ1WmGTsXF/ZI/","tlshash":"986302e1d26a4ce3c29c243a972e0d5637b9d26ca330471f09159a36fb760fbacc9535","first_seen":"2026-07-30T12:12:42.309904Z","last_seen":"2026-07-30T12:19:23.850527Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-securlty.com/~api/analytics","fqdn":"trustwallet-securlty.com","domain":"trustwallet-securlty.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trustwallet-securlty.com/","date":"2026-07-30T12:18:55.869Z","timestamp":1785413935869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-securlty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 16:37:48 GMT","end":"Tue, 27 Oct 2026 17:37:40 GMT"},"fingerprint":{"sha1":"1D:4F:B3:EA:A5:31:42:60:AB:89:7D:48:26:00:26:1A:77:4F:F5:70","sha256":"A8:40:17:AE:6E:7D:49:F0:83:5C:C3:DB:D7:7B:C8:7C:34:4D:DF:EF:CB:00:C4:94:B6:5F:DD:DD:D0:D9:0D:04"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: trustwallet-securlty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustwallet-securlty.com/\r\nContent-Type: application/json\r\nContent-Length: 345\r\nOrigin: https://trustwallet-securlty.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=15867d62912d1905cd844bb73ffb573521b08c43e9c1fc130aa22ecb488b9be6; __cf_bm=GC4yt_4ue1NmfKW3xGqGaMnJREhz2Y.EINM9.4e2lqk-1785413934.7168381-1.0.1.1-.sot2Hfv.yoxBnyHDwfix9X6TwZ8o.H64TVeZdLPU2qT5BABWHq8fFbDsd4dZDuGI8.zkcrmoMyLzYbPVdd2pvwM_2Dn.XEOWnmBmhXo0121YP4yC6A6T0yA9BKJ0LIl; session-id=42490ad8-7034-47f1-8dbf-28235c905d8a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":345,"data":"{\"timestamp\":\"2026-07-30T12:18:55.868Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"42490ad8-7034-47f1-8dbf-28235c905d8a\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://trustwallet-securlty.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Thu, 30 Jul 2026 12:18:55 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2344f0b396356b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-07-30T13:36:48.187797Z","times_seen":4239,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"trustwallet-securlty.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}