{"report_id":"ac0f40e7-f22d-4c19-a810-a9086a640b75","version":0,"status":"done","tags":[],"date":"2026-08-31T08:40:55Z","url":{"schema":"http","addr":"trust-card-company.ltd/","fqdn":"trust-card-company.ltd","domain":"trust-card-company.ltd","tld":"ltd"},"ip":{"addr":"46.29.26.38","port":0,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"trust-card-company.ltd/","fqdn":"trust-card-company.ltd","domain":"trust-card-company.ltd","tld":"ltd"},"title":"Loading","dom":{"size":2506748,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51221)","md5":"dd35fc5b2a194bf5930f233aee681b2d","sha1":"09d7d68ab72f3ef469b346d1efc130d14ca5072f","sha256":"96e5952db40ee56ac5771f2fdf89c6c0114244bac603b169e98aff53cc06d51c","sha512":"cb6bf0ddc50cf9328d4a213144d86dc3a754082e6b878c1adab43d65da06044c52bf9e3f7db749f6cb5fca229560a0dd901dc54a3c6e95f1a698b3d4d0341142","ssdeep":"12288:kubZ70E8LA1tBeNndtCPBoZC8LhG3lRFjJPv083O0DleL/zCECHf7+WFGmTmWya3:kE9uU1XCndwPWpS","tlshash":"bec592963a92f55e04478b31364e1bf658abc905c58ea04ef98caeedf0dcdb325487c4","dom_hash":"domhash3510a583cc183b781043b4744a117d73","first_seen":"2026-08-31T08:41:43.178635Z","last_seen":"2026-08-31T08:41:43.178635Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trust-card-company.ltd/","fqdn":"trust-card-company.ltd","domain":"trust-card-company.ltd","tld":"ltd"},"ip":{"addr":"46.29.26.38","port":0,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:40:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trust-card-company.ltd","ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T08:12:16.262389Z","last_seen":"2026-08-31T08:12:16.262389Z","alert_count":4,"request_count":2,"received_data":2211771,"sent_data":1418,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trust-card-company.ltd/","fqdn":"trust-card-company.ltd","domain":"trust-card-company.ltd","tld":"ltd"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:40:13.867Z","timestamp":1788165613867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-card-company.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 18:48:02 GMT","end":"Thu, 26 Nov 2026 18:48:01 GMT"},"fingerprint":{"sha1":"D5:86:CD:90:61:F9:8B:26:4C:3D:CC:C7:8A:77:3A:95:B3:6F:7A:49","sha256":"1D:48:5D:29:D7:FA:D9:D1:B1:9E:54:6A:51:DC:7A:19:00:E4:D8:43:E4:02:7B:9C:E5:93:32:C3:E4:8F:3F:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trust-card-company.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 664439\r\ncache-control: no-store\r\nx-edge-action: captcha\r\nx-incident-id: euwest1::1788165614-wIx5GCnEnE6EESQ8NkuytJjv7vytte0t\r\nset-cookie: sil_ses=a49a22a5842be8f06758e9d5a4c15e30; Path=/; Domain=trust-card-company.ltd; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=a49a22a5842be8f06758e9d5a4c15e30; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA; Path=/; Domain=trust-card-company.ltd; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Mon, 31 Aug 2026 08:40:15 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"sil_ses","value":"a49a22a5842be8f06758e9d5a4c15e30","quoted":false,"path":"/","domain":"trust-card-company.ltd","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_ses=a49a22a5842be8f06758e9d5a4c15e30; Path=/; Domain=trust-card-company.ltd; Max-Age=86400; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_ses","value":"a49a22a5842be8f06758e9d5a4c15e30","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_ses=a49a22a5842be8f06758e9d5a4c15e30; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned"},{"name":"sil_gate","value":"ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA","quoted":false,"path":"/","domain":"trust-card-company.ltd","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA; Path=/; Domain=trust-card-company.ltd; Max-Age=600; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_gate","value":"ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA","quoted":false,"path":"/","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2210528,"size_decoded":665493,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49408)","md5":"a46ca41c19f6e0f73f43147da1ee9c09","sha1":"12003c999a060083c568026dccfbbb13fb4f9ab9","sha256":"bc7a5d800166440f9c40995295e7be325327e82b306a2a4acb3c633837b81983","sha512":"0e6edb7b34e806288a5067564321892a75d77da11fa725164236b930bed205e495a90b2bdf62711a685c7fdd2e91cdb4f17bb3ff510d138e2a64186533224d7e","ssdeep":"12288:z8LhG3lRFjJPv083O0DleL/zCECHf7+WFGmTmWyaC2zP/pBTakKCtKgwCzb6frL:M","tlshash":"6f2500963a92f96e04478b31364a5bf558abc905c58fa04af58caeedf0dcdb335483c1","first_seen":"2026-08-31T08:41:43.183039Z","last_seen":"2026-08-31T08:41:43.183039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1467,"timings":{"blocked":-1,"dns":401,"connect":14,"send":0,"wait":960,"receive":70,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trust-card-company.ltd/.rt/ce","fqdn":"trust-card-company.ltd","domain":"trust-card-company.ltd","tld":"ltd"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trust-card-company.ltd/","date":"2026-08-31T08:40:15.662Z","timestamp":1788165615662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trust-card-company.ltd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 18:48:02 GMT","end":"Thu, 26 Nov 2026 18:48:01 GMT"},"fingerprint":{"sha1":"D5:86:CD:90:61:F9:8B:26:4C:3D:CC:C7:8A:77:3A:95:B3:6F:7A:49","sha256":"1D:48:5D:29:D7:FA:D9:D1:B1:9E:54:6A:51:DC:7A:19:00:E4:D8:43:E4:02:7B:9C:E5:93:32:C3:E4:8F:3F:B5"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: trust-card-company.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://trust-card-company.ltd/\r\nContent-Length: 138\r\nOrigin: https://trust-card-company.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=a49a22a5842be8f06758e9d5a4c15e30; __Host-sil_ses=a49a22a5842be8f06758e9d5a4c15e30; sil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA; __Host-sil_gate=ASBhNDlhMjJhNTg0MmJlOGYwNjc1OGU5ZDVhNGMxNWUzMAGOgaqpDRpW3mdstqbj.GvEfInAL4CcGne7cVUBqSEAItcq1PK6AEXfsfr7HCM4HMrMYndxhnCVzQTK-VvmPCQl95vBsEohZADdZvCKAAA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":138,"data":"{\"p\":\"init\",\"cid\":\"4fd8cb727291b307dbf21c4c9e1297f136decf1b81894631a5e9250c49c99e39\",\"kind\":\"click_shape\",\"subtle\":true,\"t\":1788165615660}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1788165615-WJaVtdEZFde0X8cgbHlHEMY8uGd6qgo7\r\ndate: Mon, 31 Aug 2026 08:40:15 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":1254,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trust-card-company.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}