{"report_id":"a546646e-03b7-4ebb-9a55-3e8e72e4892b","version":6,"status":"done","tags":[],"date":"2026-01-11T06:26:43Z","url":{"schema":"https","addr":"trustwmallet.com/","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"ip":{"addr":"156.243.14.67","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustwmallet.com/","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"title":"Trust钱包官网下载_Trust钱包官网入口_Trust钱包下载_Trust钱包官网下载-全球领先的数字货币交易钱包","dom":{"size":1612,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"56e848ac4cb242f6b595a460a04cfb88","sha1":"8e29460b7a8f5f2d90b431c72b688c395781aa08","sha256":"d71b92a22386911bdb4d18ac7018efb5df883859186a523d5ec8e2896d0f5ff2","sha512":"49691dfddd334317fc7bfc3fbf7f128a37fb4a1018a46504a80598cb3425ace839df6de3b7bb2703511ec9341fc7d958ea831c73441280113601ef5c1829e550","ssdeep":"","tlshash":"ce31b31940625ecd1b316d267a8f331bc4a8fcc3bd64a418b49e8a391f9475e71eac07","dom_hash":"domhash2dbeaa04a072d3d80d5c4e88d75f8754","first_seen":"2026-01-11T06:26:49.731611Z","last_seen":"2026-01-11T06:26:49.731611Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustwmallet.com/","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"ip":{"addr":"156.243.14.67","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T06:26:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwmallet.com","ip":{"addr":"156.243.14.67","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":3,"received_data":143578,"sent_data":1528,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwmallet.com/templates/vip3mb00270/js/jquery-1.10.2.min.js","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"ip":{"addr":"156.243.14.67","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwmallet.com/","date":"2026-01-11T06:26:39.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00270/js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: trustwmallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwmallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112794%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:26:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jan 2019 02:28:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5c467fde-16b35\"\r\nexpires: Sun, 11 Jan 2026 18:26:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92981,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"aeb3d180faa84ea433add019f6e192f5","sha1":"a981366d380b05143e46b21530a9e60029944ac7","sha256":"0b7ee8e9ec281694609c05663c60e040fb6aca52581df80e9a5c4e2461fa22f2","sha512":"12a7801678d2d2ae74baae727ec69dd842a0b1d3dccdb6abd729adc5fdc4be1d7a0c2aa5b475ab6c8466db44b59d3173464fb35a55d0e5f83341430a6f66b458","ssdeep":"1536:o4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFn:oGsKXAI2p0WP9bDrstfak","tlshash":"4c93f8ddb2d1b06257ab31bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-10T00:13:50Z","last_seen":"2026-07-24T11:23:43.055407Z","times_seen":48,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwmallet.com/templates/vip3mb00270/js/slider.js","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"ip":{"addr":"156.243.14.67","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwmallet.com/","date":"2026-01-11T06:26:39.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET /templates/vip3mb00270/js/slider.js HTTP/1.1\r\nHost: trustwmallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwmallet.com/\r\nCookie: req_limit=%7B%22timestamps%22%3A1768112794%2C%22v_count%22%3A1%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:26:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Jan 2019 02:28:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5c467fe4-11c2\"\r\nexpires: Sun, 11 Jan 2026 18:26:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c84940f00f14879c5ba954dcc89ace4f","sha1":"3516375b276ebac7ccc7dabb628a9b07b25b9e93","sha256":"164e2c9ecb07830527d0a29b09bbdbdfe86f26e864324f750027eef6027867d3","sha512":"317e703cd75d78f583386ce74abd919e0f95c0bcc5eef93ea0d7cd7651ea233838d3089b9252ca786f57a59ee8fd88c9ac62bf80cfc197b3c481a1fd7f357c3a","ssdeep":"48:3fB60bypXaAX3fq7WGyZVRgwhrGxzkF7YZdtdSI:3fsGyQAOw3PI","tlshash":"2a91344851222764c8b733bcaf9b881cdb7b5327490a129578ed87854ff001892dbfec","first_seen":"2023-03-07T13:43:50Z","last_seen":"2026-07-19T13:27:51.184052Z","times_seen":113,"resource_available":true,"data":null}},"time_used":1944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwmallet.com/","fqdn":"trustwmallet.com","domain":"trustwmallet.com","tld":"com"},"ip":{"addr":"156.243.14.67","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T06:26:22.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atrsutwallet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 18:04:20 GMT","end":"Mon, 23 Feb 2026 18:04:19 GMT"},"fingerprint":{"sha1":"C2:72:B5:96:B1:BE:39:BA:A8:95:89:37:8E:7E:4A:07:8E:73:1F:11","sha256":"5D:8F:89:A2:57:BA:71:43:4D:8E:33:0C:A3:D7:92:1B:A3:CE:B8:73:D7:E6:01:19:BD:E6:DE:AD:0C:4C:9C:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwmallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 11 Jan 2026 06:26:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: req_limit=%7B%22timestamps%22%3A1768112794%2C%22v_count%22%3A1%7D; expires=Sun, 11-Jan-2026 06:27:34 GMT; Max-Age=60; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44457,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1092), with CRLF line terminators","md5":"54f5ff098bcc0efff719888bc5447011","sha1":"05598f84c2e1d1f0d69ac93059fad8151cc02035","sha256":"f4fd53b531fdd19d709ba2ad298bb4172439135df8bd66487a48ef46a1d97dc3","sha512":"f96df4efbc993470f296dad3cad60c75551596f2a94bb724732f44f0f15bd31170e5f0228ad54f6fc64208dc294a883515b897d9870d92e2ffb3ac4754faf26e","ssdeep":"384:m2zSyLP8haz0ek/1f8T28RzWyCJH8aOcu:mbQCcKo","tlshash":"5f13657152c21aa6077266a81f1b673cef818883ed42544970edba7b6f71f2cf907507","first_seen":"2026-01-11T06:26:49.739562Z","last_seen":"2026-01-11T06:26:49.739562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29260,"timings":{"blocked":12171,"dns":365,"connect":1474,"send":0,"wait":4915,"receive":0,"ssl":10333},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"trustwmallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}