{"report_id":"b0041564-0bae-4a50-b714-e0047abedf78","version":0,"status":"done","tags":[],"date":"2026-08-31T08:51:08Z","url":{"schema":"http","addr":"trustcard-application.com/","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":0,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"trustcard-application.com/","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"title":"Trust Card","dom":{"size":33380,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30456)","md5":"498a968b662fa1ec174e5827512ef14e","sha1":"63588847fb77b4c653f061cbede077bb47f554c0","sha256":"505482fd93b3d5ddb587c2241c70443f244a7dba896fb30fa393b585bdde77b9","sha512":"17ef87b1f37fbf0a79f7a3747604dbb13dab44aab191e2d8f571e4837274980e02e0537b7c1faa579c5ee0bdcfcce9ded38193f0e122fbd9ea2c341e5c21b312","ssdeep":"768:aGmbjqZC+Mcw4yhOyWaw1oBhLouB8/PjjJN1A4HCZTIINA:g6w4yhOyWamozfIINA","tlshash":"60e2963412111d3f27134ad4f7e1bb7951ade35aca27895cb3bc01b32fcacd8895a685","dom_hash":"domhashf42bdb2986ff7947931d9c1217a0c071","first_seen":"2026-08-31T08:51:18.163549Z","last_seen":"2026-08-31T08:51:18.163549Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustcard-application.com/","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":0,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:51:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trustcard-application.com","ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":7812710,"sent_data":14262,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2920,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustcard-application.com/card-flow-i18n.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"be4d94ceab7d089bed4cffb32b476933","sha1":"6f52bbeed80288335cae333a5094657f38542daa","sha256":"dbb0141b8e95b3f0c0c22a33ae6a0407fb82ef6d4b4ce04144f9cf33f4f6713a","sha512":"2f90bd570b7c42145040eed1daa2521be5984df7597691f75966f0e90b3fe66e70c5671e3882dbbf34b192cc2f4bdb182f856b0486e260732ffe35b51d32cd87","ssdeep":"768:OU4PTCDfjV1oSqxlKqUnAHM9zwvT2+ZoNF/bF4x:OU4PTCDfjV3qxheAs9zwq+CNFzFS","tlshash":"a3d2d9584b5910ed0283935960426747222ea1fb8f44719c37acd6b92f4f5afb0fe1af","size":28503,"data":"","first_seen":"2026-08-31T08:20:06.539472Z","last_seen":"2026-08-31T08:51:18.188828Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/card-flow.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cf33a306ee381700f4fcb3b4bf9b3e2","sha1":"f7c44f4c07c51675f2171bd21e89db767f34f4db","sha256":"4d3d7bf068f44b81d638b9c1bcc001dd7cc441079860d11bbdb1696a47ef58b6","sha512":"0d7161ed6e76657a2d22450d928ab6b45e992ce12acf6e3665efbd1810e932015aba53bbf79976f3f69110f1c3c6fd9965c71c90d7b9cfe48ce65c2916d1c7f4","ssdeep":"384:9Vz70OOsNDkZN+XEHl+alC+KNexC+Jos5tvvzxasMmV0zPNKPKn+w0B66:/fP1D3nzsQVW66","tlshash":"c6c2d72811f41d3d0273109d8797a2173536e643e98e8909764c87b20feada9f9bb3dd","size":25772,"data":"","first_seen":"2026-08-31T08:20:06.527964Z","last_seen":"2026-08-31T08:51:18.204608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b3c65b44ff15fd40cb813fbf0f31b9b","sha1":"1129ff9c97383c6623085d3712ffd1bd6a348a90","sha256":"62da70a77e746cd34849fc035c34168ebc2d6d24bdfc97ee520184d1fc31977f","sha512":"9c2f8749492c7f102ea51e797828b99d1b2dbcbd0b8a4650dc3a6f294ffa9c845c0a37b9714faa602736a141c50b12be046ac9b1700bafeb5039af5c2ad73863","ssdeep":"","tlshash":"71f0dcaf2c43a45737fe2639c767aa6b2b62070238c2d415ba40c4643fd49d61c42dce","size":477,"data":"","first_seen":"2026-08-31T08:20:06.548427Z","last_seen":"2026-08-31T08:51:18.208345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/index-zXMmog4c.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2e1b8fbb72739dfea1f0d3c3417cd3a","sha1":"d59467c5fcb1b32b7125f14948210e12d6ccd52e","sha256":"b5db2346a2b142bf74d32b77da94a656fc691b786c45bc75d6af35095b22d471","sha512":"78aa7784489dd6588d3b0679473c514106dde486ea80f4fe263180c83216d0fea3bfeb8d79989f71af84ea5cfc80befb5926b1452562b43f07a4377065c84f0e","ssdeep":"6144:WEihW/M95vsNaXfo8P+QeDsJgE50cRoqfyCjaLHnUZg2YF:Kh1FuDsJgE50cRosyCaLHUBYF","tlshash":"6ba48ee83294b161579342a6805f0a0a733954b5ac4ec538b560feef35f0489d1bbfbe","size":479466,"data":"","first_seen":"2026-08-19T22:38:11.288867Z","last_seen":"2026-08-31T08:51:18.197947Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/sweep-flow-draincheck.js?v=2","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58385d5fd5627b700b0f67b0d09cc65","sha1":"825cb35516271179e755c9c03888f379e82cdfc6","sha256":"231ba9549476b1fa4141517ecf0bd95cecc81ff1da80babe65a2801ed5ebb155","sha512":"b29faf0a5c0cacd48b77d3ba17c670bfca27802404d89ee639c2279b34db2741d07ac80349a6f7c3668696dd56c1139545ed199aa3fa121851ed23335b405229","ssdeep":"96:Jjrc5dxGJWRLgrgEXyrjeJNt5BuHejkpXXrl9ipQTDX6STt9yXOSQuNJ+al8BBtu:JjgbQ0CC05c+WXrH2+DX6gt9QhQe+a+g","tlshash":"0ba1111e35eb21658263303e8b9f606d3a314913158ace203d8cd250afb49659eaffdd","size":5001,"data":"","first_seen":"2026-08-31T08:20:06.512483Z","last_seen":"2026-08-31T08:51:18.17614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/site-tracker.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f57ca91c29ab948a725fa4c6199c023","sha1":"9916002c92844fcce2d90ac54c94da51f72c1971","sha256":"0843f8f9a144d34ed58b1c535609bb7ef3e0665b645a2f4e61db08408edb1fc9","sha512":"1b1ae0d655d9a7c7f4aeef6cb6ecf7e03abea47e26833b58b928303b875629459ad9e3d7cec939ebd9ecfac30773fcd0c4be13ed1f843ace11b5efd3468d1b3a","ssdeep":"","tlshash":"8e51ed6f81b2107411f7406d4bab6546262285937d86e8507fcc12547fecb2e82f3edd","size":2665,"data":"","first_seen":"2026-08-31T08:20:06.520655Z","last_seen":"2026-08-31T08:51:18.18655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.908Z","timestamp":1788166236908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 08:50:36 GMT\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-08-31T12:32:39.998571Z","times_seen":4915,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":34,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/cta-banner.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.835Z","timestamp":1788166236835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /cta-banner.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10502\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-2906\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10502,"size_decoded":10739,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e34a0d2ddecc4eca36af15326e3ef4cc","sha1":"27158ef8abf4724643ad911ed1091688e6d2ba40","sha256":"1fe123414ca02e7118d90c20c5ef90f15d45ce6dbeb6820a44d89498319a20de","sha512":"90db61f4078563bf7f118b99c3927ca8410b4062f977ffaa49f72c2733e67b1fe0c0b570030fb4133d92ceef7888ce08242e72495fe3beea03ad413df2944edb","ssdeep":"192:sXxy6K0CCGDMdkLeLEIwy5HpYpE72KPJesp:MxtXQIwepfJesp","tlshash":"e1221dde33148cbcfd268ba2eb03737822275ab30a996780cd371a79155551ea93fdc4","first_seen":"2026-02-11T15:17:55.649184Z","last_seen":"2026-08-31T08:51:18.173043Z","times_seen":63,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/css/wc.css","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.586Z","timestamp":1788166236586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /css/wc.css HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 1928\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-788\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1928,"size_decoded":2158,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"60a9f3abd602c3ef5a66e021a55f1994","sha1":"4a0f0d134ec7045bc69514537563a0f2dbe5e772","sha256":"f262512ef3e1ae76ac23c4d53b2e0b0eb340bb7237b2e0e95dc44d392b584bca","sha512":"1546bb2d4755ce8bdcf28659b88dbfcb7cf7a1be96316fd182d9057cadabf7d556d400b35909948f1eaec40d6d55f9d6d39db5827f412401c9e4dac8b4725664","ssdeep":"","tlshash":"8b41a6863b2a0410362384a435e25f58233d9602971bdffd6be1305cdec41e8f2b7398","first_seen":"2026-07-18T17:42:15.177912Z","last_seen":"2026-08-31T08:51:18.174417Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/sweep-flow-draincheck.js?v=2","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.602Z","timestamp":1788166236602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /sweep-flow-draincheck.js?v=2 HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5001\r\nlast-modified: Sun, 30 Aug 2026 01:14:20 GMT\r\netag: \"6a9383ec-1389\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5001,"size_decoded":5246,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d58385d5fd5627b700b0f67b0d09cc65","sha1":"825cb35516271179e755c9c03888f379e82cdfc6","sha256":"231ba9549476b1fa4141517ecf0bd95cecc81ff1da80babe65a2801ed5ebb155","sha512":"b29faf0a5c0cacd48b77d3ba17c670bfca27802404d89ee639c2279b34db2741d07ac80349a6f7c3668696dd56c1139545ed199aa3fa121851ed23335b405229","ssdeep":"96:Jjrc5dxGJWRLgrgEXyrjeJNt5BuHejkpXXrl9ipQTDX6STt9yXOSQuNJ+al8BBtu:JjgbQ0CC05c+WXrH2+DX6gt9QhQe+a+g","tlshash":"0ba1111e35eb21658263303e8b9f606d3a314913158ace203d8cd250afb49659eaffdd","first_seen":"2026-08-31T08:20:06.512483Z","last_seen":"2026-08-31T08:51:18.17614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/coin-2.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.821Z","timestamp":1788166236821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /coin-2.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1793518\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-1b5dee\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1793518,"size_decoded":1793759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"679dcc59d1ea87802e916859080e6aba","sha1":"5af66ce9537d54796c53a52f689d7e93881f83b9","sha256":"a116d33afa3d2361896caa270db16978e68ead2bed979e0b5cdc6834421ee203","sha512":"6f457c81a67d1fa297759a25e6a630816ba5a51bc85ddd637d78163665a50cb6f0fca73e336c0542d5b725daabda216788fb8ecb1716d7846f876c22bb46fda5","ssdeep":"24576:J3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:VfuyyP8FgFhB","tlshash":"b1252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.590228Z","last_seen":"2026-08-31T08:51:18.179588Z","times_seen":76,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/phone-6.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.825Z","timestamp":1788166236825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /phone-6.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 507069\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-7bcbd\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507069,"size_decoded":507308,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d98f60d0f1e584c5a31a48e2771e2ff9","sha1":"64986489ae3eee8af3180db20370fd3a512d93c8","sha256":"ef154187de3d627f4596396bac0c41502996cdf2273959b3b583c06ba24a69e4","sha512":"7054312977ae826d988fb9976759d3868bafb2ab6c02174ccb4ae7800f41af83b9d188c586df09218ce3883d894fa96756bd16bab2dcd103657c04e0d1990e23","ssdeep":"12288:eFFFFF2YsSm6y+9xyzwisudXPg7aj51G/5YKn9nTJ6oQjPYtF:eFFFFF2YsSm6y1M9uRBG/5T9TukF","tlshash":"6eb41330bbb29ed958014b3435688707ece4798926dcc9d48b9dcacb66ef73d8c5182d","first_seen":"2026-02-11T15:17:55.594612Z","last_seen":"2026-08-31T08:51:18.180847Z","times_seen":69,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit4.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.826Z","timestamp":1788166236826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit4.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7806\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-1e7e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7806,"size_decoded":8042,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ce1bf382bdf03988579a134d40f3921","sha1":"e1ff829a2f0d8f5321d84d908e3cb93dab905bea","sha256":"127bdc6794f588cdc3bf94ab39138ed933ff68a8befe013421ec234002b351f0","sha512":"485bc45d14c71c02ece687f12b949a4636f09a2f5849e3f5834b86ad5a12d1f56b5f737ea56e8e402807c51777801598d9043fc352cc76b4f01e7ec3983e9886","ssdeep":"192:7o1T487sgBAXx+o1T48caSJkfVOBgHMLM:k1TNSXN1TCEYBBM","tlshash":"2cf185dd376856f5f85ac2e2ef12a038301b44bb56d0d620c6666e7c342a04dccbf6d5","first_seen":"2026-02-11T15:17:55.648367Z","last_seen":"2026-08-31T08:51:18.181832Z","times_seen":79,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit1.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.827Z","timestamp":1788166236827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit1.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 28924\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-70fc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28924,"size_decoded":29161,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2b45b63af2e789e308494b1c39eb30b","sha1":"a515a2b4874b574c8b8867806098e4f9911e4f11","sha256":"c4db6bb328ef78023c9182449c928af831feb01021d4bccd650b6d0c354c12d6","sha512":"bbdc3a13ac7aaa13973bac44c15f9e33b8a381ee94405a669b4069dd61649a7f94d92d6714555f7d52daf70b6576bdc93d93d439f3ad0dc0598310acb63b2d08","ssdeep":"384:C4qAlAemnXq21Ig9JX5k5Z0XLeeUUUoULEsfqEqklflsKcPez:C4qxemLPDGCMhN","tlshash":"60d2c7ee37140cbafc16d3eaeb0220bd502b54bb6ac55720c6299b29344685dde7fdc1","first_seen":"2026-02-11T15:17:55.635436Z","last_seen":"2026-08-31T08:51:18.182794Z","times_seen":85,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:50:36.176Z","timestamp":1788166236176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: text/html\r\ncontent-length: 33129\r\nlast-modified: Mon, 31 Aug 2026 01:49:01 GMT\r\netag: \"6a94dd8d-8169\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":33129,"size_decoded":33362,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30267)","md5":"e1ef5b06162c0c68e771b7853e877905","sha1":"764911283e6f4996b42b59670ba9eb676af6af61","sha256":"e8307521ec0c877f0580855c71cd53e02a07aa42fd96894c252f788a06e15db7","sha512":"5eba2ae1ef84fea47db509151704ff8ee96b67305d4925a563a9f1db2a1d23746080b0c1d572f49233fb96ac4a1344488b11a1ed87f34db93bae0307cc0bcd02","ssdeep":"768:+GmmyqZC+McJFy4l9h/1nbUPKB7ttAjJN1A4HOZTIINA:T/JFy4l9htnTIINA","tlshash":"2fe2763412151d3f27134ae4f2e1bb7961ade35aca27895cb3bc01b32fdacd88896745","first_seen":"2026-08-31T08:20:06.516506Z","last_seen":"2026-08-31T08:51:18.183813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":118,"connect":25,"send":0,"wait":25,"receive":6,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/site-tracker.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.595Z","timestamp":1788166236595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /assets/site-tracker.js HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2665\r\nlast-modified: Sun, 30 Aug 2026 23:02:59 GMT\r\netag: \"6a94b6a3-a69\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2665,"size_decoded":2909,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6f57ca91c29ab948a725fa4c6199c023","sha1":"9916002c92844fcce2d90ac54c94da51f72c1971","sha256":"0843f8f9a144d34ed58b1c535609bb7ef3e0665b645a2f4e61db08408edb1fc9","sha512":"1b1ae0d655d9a7c7f4aeef6cb6ecf7e03abea47e26833b58b928303b875629459ad9e3d7cec939ebd9ecfac30773fcd0c4be13ed1f843ace11b5efd3468d1b3a","ssdeep":"","tlshash":"8e51ed6f81b2107411f7406d4bab6546262285937d86e8507fcc12547fecb2e82f3edd","first_seen":"2026-08-31T08:20:06.520655Z","last_seen":"2026-08-31T08:51:18.18655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/card-flow-i18n.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.599Z","timestamp":1788166236599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /card-flow-i18n.js HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28505\r\nlast-modified: Mon, 31 Aug 2026 02:12:24 GMT\r\netag: \"6a94e308-6f59\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28505,"size_decoded":28751,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"be4d94ceab7d089bed4cffb32b476933","sha1":"6f52bbeed80288335cae333a5094657f38542daa","sha256":"dbb0141b8e95b3f0c0c22a33ae6a0407fb82ef6d4b4ce04144f9cf33f4f6713a","sha512":"2f90bd570b7c42145040eed1daa2521be5984df7597691f75966f0e90b3fe66e70c5671e3882dbbf34b192cc2f4bdb182f856b0486e260732ffe35b51d32cd87","ssdeep":"768:OU4PTCDfjV1oSqxlKqUnAHM9zwvT2+ZoNF/bF4x:OU4PTCDfjV3qxheAs9zwq+CNFzFS","tlshash":"a3d2d9584b5910ed0283935960426747222ea1fb8f44719c37acd6b92f4f5afb0fe1af","first_seen":"2026-08-31T08:20:06.539472Z","last_seen":"2026-08-31T08:51:18.188828Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/trust-logo-BFahXSns.png","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.816Z","timestamp":1788166236816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /assets/trust-logo-BFahXSns.png HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 74527\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-1231f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74527,"size_decoded":74761,"mime_type":"image/png","magic":"PNG image data, 1026 x 291, 8-bit/color RGBA, non-interlaced","md5":"9a969ea9c3dcc8038aefe69162a40b2e","sha1":"781c9a8d74702911ffc34de0831b8b88cb3d212f","sha256":"dfa7fca3bcc8a996cf626bb2f1ad89c47ef918affb0b26e391e1634319b1ec41","sha512":"02ad1e96b18b6fe08f9a6c143b1fb4f90cf3351824f455f36fe9e6f267c9cd4bf15ccc4d5287e5b3d1576f6417976b6feada815cd3dd4f1cb59dc45da323cd9f","ssdeep":"1536:lM2rjbPNeQUjWFiGVFO21LHOSHhhxSWWMsgp7QbGyYQD02TaBQRjM5h:lM2rN2sbsSLuSH5xWbbGyY802e+M","tlshash":"1173f18ce6b2a45c9ed0745b87860660db2d11f663d2b9a4b0d1e7085cdb93fdc21e8f","first_seen":"2026-07-18T17:42:15.204265Z","last_seen":"2026-08-31T08:51:18.191249Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/coin-5.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.824Z","timestamp":1788166236824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /coin-5.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 652785\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-9f5f1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":652785,"size_decoded":653024,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1acce58393b8d5f1c6385c697a24ce06","sha1":"0b48578d14a22345b3940aa0b2d29ccbc546167a","sha256":"f1dbf46ff029294134b06f60fd4eddad1137d2c942abff449e62fa6bb060eb19","sha512":"96b9ec645765af648719350ef4ef6fd9bbce0e29714ce80d50b25c5ae2c34da320900f340b2cc27967d4fc481cd55e9f9cd36d4e1912f843581679dffce30478","ssdeep":"12288:2EL4JuXNMFrS0Ghr7LF1uB2IyTA84fNCuLEJ20IFbvsXsMHFQ:uJudwhs7LF1uB2X141eJJIFbvsXsi2","tlshash":"cfd423218ca71e3f46e5424960db0f4a524187f2c0b2ddc869ebaa679bbbf074447df0","first_seen":"2026-02-11T15:17:55.591499Z","last_seen":"2026-08-31T08:51:18.192254Z","times_seen":72,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit5.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.832Z","timestamp":1788166236832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit5.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 13335\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-3417\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13335,"size_decoded":13572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59713ef77a363413e687273f3c145458","sha1":"c85e8654571a7cd077a5e1b33776ae5d12289298","sha256":"70ab05b92fc860eadd89931c47f692666948dd7c27717968c09661f534791e96","sha512":"78a5ac9cb055867ac0399a25cff36de30a53b14a3ff3a69973cce6d2aac5ebbedb66fc48bc997414b907f4d00df0a49407da83246199803bbfb4ceade5fff0d4","ssdeep":"192:W9KM8HsKM8HmHna3jP7U0KSq0cS0XVcBqhdqvrXqVNdxn8DD1SHSfWnznyH:kintzjUTRXV4q3RxnUD162WnQ","tlshash":"9052b6dd33a44ab8f42287e1d703a1b5205e60f7aa95a370cb656f7a245615ecc7bcc0","first_seen":"2026-02-11T15:17:55.650976Z","last_seen":"2026-08-31T08:51:18.193295Z","times_seen":79,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/panel/public/site-config?host=trustcard-application.com","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.655Z","timestamp":1788166237655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /panel/public/site-config?host=trustcard-application.com HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustcard-application.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 189\r\ncache-control: no-store\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), geolocation=(), camera=(), microphone=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189,"size_decoded":590,"mime_type":"application/json","magic":"JSON text data","md5":"0b1c0720434ba7997eb23355f638ab42","sha1":"ba97dc5bec21ea02cb42f24b0499ac641912c4d3","sha256":"7fae2856e27d70ff290565f7e702b0e8dbb89a11869f3be818b291814ae87113","sha512":"a46d600384133dea30106a4dce59f048bb23b5dbccbeee8d7a65395a657465bec54d7233231be11386022eb7d5f301bf15adf30616570f1f522ec48e7bd74238","ssdeep":"","tlshash":"bbc0128684159e746572195901923d78482e936703549e681b86b92811bcd26121b01b","first_seen":"2026-08-31T08:20:06.525728Z","last_seen":"2026-08-31T08:51:18.194452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.688Z","timestamp":1788166237688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 425953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T13:31:51.743781Z","times_seen":272692,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":30,"dns":1,"connect":0,"send":0,"wait":22,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/index-zXMmog4c.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.589Z","timestamp":1788166236589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /assets/index-zXMmog4c.js HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 479466\r\nlast-modified: Sun, 16 Aug 2026 22:11:24 GMT\r\netag: \"6a82358c-750ea\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479466,"size_decoded":479714,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43071)","md5":"d2e1b8fbb72739dfea1f0d3c3417cd3a","sha1":"d59467c5fcb1b32b7125f14948210e12d6ccd52e","sha256":"b5db2346a2b142bf74d32b77da94a656fc691b786c45bc75d6af35095b22d471","sha512":"78aa7784489dd6588d3b0679473c514106dde486ea80f4fe263180c83216d0fea3bfeb8d79989f71af84ea5cfc80befb5926b1452562b43f07a4377065c84f0e","ssdeep":"6144:WEihW/M95vsNaXfo8P+QeDsJgE50cRoqfyCjaLHnUZg2YF:Kh1FuDsJgE50cRosyCaLHUBYF","tlshash":"6ba48ee83294b161579342a6805f0a0a733954b5ac4ec538b560feef35f0489d1bbfbe","first_seen":"2026-08-19T22:38:11.288867Z","last_seen":"2026-08-31T08:51:18.197947Z","times_seen":6,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/coin-3.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.823Z","timestamp":1788166236823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /coin-3.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1524782\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-17442e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1524782,"size_decoded":1525023,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"154b07812705f948c5f0fb9ea7f8a647","sha1":"3cd47cba0a9b1890832a8b005da438d713b6b7d5","sha256":"f7e34ebffd3f342aa7980e55ddafc647d3b5f8b3eedac37f07c27884d96bf73b","sha512":"8e9c5b98c1bd4af6e12eefaa780b7961d1b6e4c790fa9f1a989674ad01aa482e578cd629d3c48f34d8fc6006068a68a03d59446653ae82e0ddff48fc17c1dd12","ssdeep":"24576:wBF3Y6bvUpI8a4tHdGwxErQ92Y7DicZQismJ8hut2f7vH:wBF3ZO9kwxd7tsjH","tlshash":"512501726ecaac8f1f889828f1df8ed65f6c573784096eb114133f475a5860a53dc88e","first_seen":"2026-02-11T15:17:55.579705Z","last_seen":"2026-08-31T08:51:18.198848Z","times_seen":72,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.690Z","timestamp":1788166237690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 425953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T13:31:51.743781Z","times_seen":272692,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/css/card-flow.css","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.588Z","timestamp":1788166236588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /css/card-flow.css HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 17159\r\nlast-modified: Sun, 30 Aug 2026 03:26:53 GMT\r\netag: \"6a93a2fd-4307\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17159,"size_decoded":17391,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b934cc58c2e7453ce9ebf701f4037ac3","sha1":"a1dd666912b414813a0b1a33f7a0d22750483875","sha256":"4f53e26d7725f6082dbdbd770e237917edabb846d796b1cca7022b2d8e9489c8","sha512":"61ab2fbcdab9d7a6cd0e112fba8e7ece4825f0b7d6be11247f12aa34070646c0cce0827b1d5af383468328fe6a10ba9a5bec80f8f36cd4ef57552284e674db19","ssdeep":"192:RkT1Vb2oKbqctiuaDEg2Iq/u12BLdB9ir/PyIp5j6CnzXjepV4Pj+ibBsWuOotUZ:iKqkFgnYxorC0XDCV6vlvo0J/","tlshash":"4b72439367661524782bdca43a539f8773dd8643e58bcabc9be0201c8ec91ed2572f4c","first_seen":"2026-08-31T08:20:06.53493Z","last_seen":"2026-08-31T08:51:18.199598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/coin-1.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.822Z","timestamp":1788166236822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /coin-1.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1793518\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-1b5dee\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1793518,"size_decoded":1793759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8010fb3f37959329af30771296fa662","sha1":"58713455d38aee27a070785f50376c4a8c9e721e","sha256":"01c8a476cfadf19e594674877e4d7f97d72138b773bf9c5d26e2ed751ede6989","sha512":"a6dab64d93a1b02d9f0a45482786a8777e2d39a765d11901c6f92a53a8ffc4b40e2bee0df5007c60a8f8fc39e44fed9eae17bf40b31cb2e34e881215fa363fcc","ssdeep":"24576:D3nW0FZBu8LVyNHsOMuaiUZqtSHgGM7djEHLG:bfuyyP8FgFhB","tlshash":"0f252371eaa8cd6c5918c651b07e1ac48ef08de3cfcd6e8073393276a18df19856dc5a","first_seen":"2026-02-11T15:17:55.647458Z","last_seen":"2026-08-31T08:51:18.201483Z","times_seen":70,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit6.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.833Z","timestamp":1788166236833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit6.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7118\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-1bce\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7118,"size_decoded":7354,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09a9977bfe977ac4e405eb0ba43f07d2","sha1":"90d4b8bb58683e2076e248a67759331f883befbf","sha256":"278edfd8be3da161082664057cfb31bf4f2c416238b9380f47427495c9d69db3","sha512":"52020259721f5b96b18870d0ec8710418ea7798a64b3a2aff1956f8daa105a0fd3dc60a951d81122c1a456f6413911bd9feb8d24b65f02f21a81af60c5983ab0","ssdeep":"96:cqhVKlr2fNV0338FAFfIDzIZrCfhUYa44VHH5ObSGmEOQa44VdbJQXiCKX9V4id1:BZNqnUmNJ5Ob3RuZ5jvqW","tlshash":"83e10cca3758497cbd369382eb02b27a606a44e317c4e630cb32593d285191e9dbfed5","first_seen":"2026-02-11T15:17:55.588479Z","last_seen":"2026-08-31T08:51:18.202121Z","times_seen":79,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/panel/public/site-visit","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.653Z","timestamp":1788166237653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"POST /panel/public/site-visit HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://trustcard-application.com/\r\nContent-Length: 144\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":144,"data":"{\"domain\":\"trustcard-application.com\",\"session_id\":\"s_ojp6d4it6jmth00bf7\",\"referrer\":null,\"event_type\":\"visit\",\"path\":\"/\",\"detail\":\"lang=en-US\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\ncache-control: no-store\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), geolocation=(), camera=(), microphone=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":423,"mime_type":"application/json","magic":"JSON text data","md5":"f0f5bf3decdf1af9577e0bebedfc3d00","sha1":"01ea65cc2a6d0af82d616dd47249aa2408f7f3bb","sha256":"352b2a2b1a79d7f1e9986dbb308e9b10596ecf27b90cf2ac8bb915f034beb4a2","sha512":"6123473a39a0d915ae428218caac1336b9589f7dfd0c1b0dc0abf2fca9256ef1941c0837acc0ff271b22030dda9ac3ef5cbe0e6c4b9baaea1313c91337368649","ssdeep":"","tlshash":"ea700000000888e880808a020200ba08a82f02a2808000082288a200022a00e2202803","first_seen":"2026-08-31T08:20:06.524187Z","last_seen":"2026-08-31T08:51:18.202726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/trust-3d.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.834Z","timestamp":1788166236834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /trust-3d.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 198868\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-308d4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198868,"size_decoded":199107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6b416e21b6eb6802ef0eb49df77e2a3","sha1":"702da2208a3c46ab97e56c090aac208174054631","sha256":"f3406c7d3b9ec1ae7b41f49533d2986658c0d9a9e139e10fa57135501e613c38","sha512":"bc61f6172655197df8de1d9693e786ef36daf50c424598f4bbd6d3f19f3c0b849ddd010168c75cd343159090bbf8ecaea0dfa656fd51b7a83aa6130e8c814586","ssdeep":"6144:X7wj0Hgf5ocXCDli9Smpr/JpVDs98mVhTaiTo:Mj0w5ox40CpVDs9Fa","tlshash":"8e1412889faa999ec1cc203583ea0596bc2d20c33ec7dbeef63570d492cca555294d72","first_seen":"2026-02-11T15:17:55.603515Z","last_seen":"2026-08-31T08:51:18.203496Z","times_seen":81,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/assets/index-BLG9OfPR.css","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.590Z","timestamp":1788166236590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /assets/index-BLG9OfPR.css HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 32209\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-7dd1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32209,"size_decoded":32441,"mime_type":"text/css","magic":"ASCII text, with very long lines (32208)","md5":"c53f4a3d7359a23a959e9215a82da572","sha1":"62691e1f4bf6c9f48dd2133f628d5d3672be52cd","sha256":"20c45569f9b13be4607f2021538fe7045329b44d81b77ad2d231a7b1a5395356","sha512":"5349df05917fb69e7f6a73923e2a2b508a7972f623bf69eae921f88f591a9fcd2c009c4d5e93dbc27e76f52b5d3a262cae5e6e7dcf61536107d6b689e10ac4f4","ssdeep":"768:QhlmPhDu0+GD8Vfr+0o+XvfrFLFuY0Xj6Si1K:/g0+GD8oeXpLFcmSik","tlshash":"94e271a4b326c87fac2364f6e76c788cb6197181de7556e4fe42221266d73f00d8ab14","first_seen":"2026-07-18T17:42:15.23983Z","last_seen":"2026-08-31T08:51:18.204069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/card-flow.js","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.601Z","timestamp":1788166236601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /card-flow.js HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 25802\r\nlast-modified: Sun, 30 Aug 2026 03:26:52 GMT\r\netag: \"6a93a2fc-64ca\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25802,"size_decoded":26048,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (531)","md5":"3cf33a306ee381700f4fcb3b4bf9b3e2","sha1":"f7c44f4c07c51675f2171bd21e89db767f34f4db","sha256":"4d3d7bf068f44b81d638b9c1bcc001dd7cc441079860d11bbdb1696a47ef58b6","sha512":"0d7161ed6e76657a2d22450d928ab6b45e992ce12acf6e3665efbd1810e932015aba53bbf79976f3f69110f1c3c6fd9965c71c90d7b9cfe48ce65c2916d1c7f4","ssdeep":"384:9Vz70OOsNDkZN+XEHl+alC+KNexC+Jos5tvvzxasMmV0zPNKPKn+w0B66:/fP1D3nzsQVW66","tlshash":"c6c2d72811f41d3d0273109d8797a2173536e643e98e8909764c87b20feada9f9bb3dd","first_seen":"2026-08-31T08:20:06.527964Z","last_seen":"2026-08-31T08:51:18.204608Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit2.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.829Z","timestamp":1788166236829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit2.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 13419\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-346b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13419,"size_decoded":13656,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a4bf8d0dd48561b2b531f16994573da","sha1":"9e5547a87fcf112dfb398bfb61ebc00e7025558b","sha256":"5884f2c20f92ec8866d09edda61027e0ce2e6666e0bf45b6ecad192bfde48f1d","sha512":"dd50bd6762d7dcb5290f02d8dadd26426d47dc6820979ed38a4ff0e7122fb6ceaf1318792ec2666d6d5f35d414e8fcd83eaeb6eccb19023556e1489870d8a1e0","ssdeep":"192:35nvZrCCypp07LmxZRkaVuVefXg9NT4X4w3RM7GKcmxZnefXgykaVut8:3pxr2pO/m6aAm2eX4wh4GfmE2aA2","tlshash":"665294ce33188dfcf95297d6d30371a9316680f75a8192a4ca361e3e244648edd6bec1","first_seen":"2026-02-11T15:17:55.632619Z","last_seen":"2026-08-31T08:51:18.205432Z","times_seen":85,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/phone-5.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.820Z","timestamp":1788166236820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /phone-5.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 211470\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-33a0e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211470,"size_decoded":211709,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3868b22ca7f77068f2edba51cb879f5d","sha1":"fe91e29b99959eb88558f4e78bece76ce23bd0fe","sha256":"4e58e1a299c1ce83b1695fe172ef5ffe3196da11e66ba6a2c28c79ce0451235f","sha512":"6b25bd1312de3bfa16ea450f081e27a0167c46cf4ff73cbfd5e5401875213dadb431d69c81d431b87e08ce9128b330cb1f6579ab2e322ee597325b95a101496f","ssdeep":"6144:7W7gNT/WbJNlDDxTtYOGwj4WYIUZVbeucmj:isJ/WbNxZYOmn6s","tlshash":"1324d0334547fdefbb278dd8e11a62209dddba93d684d24caf8458c126fb428cc615b8","first_seen":"2026-02-11T15:17:55.63009Z","last_seen":"2026-08-31T08:51:18.206001Z","times_seen":87,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/benefit3.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.828Z","timestamp":1788166236828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /benefit3.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5914\r\nlast-modified: Sun, 16 Aug 2026 18:04:34 GMT\r\netag: \"6a81fbb2-171a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5914,"size_decoded":6150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf29f6b43683fa8462f27d6b643cc872","sha1":"0ca16d391a77d59bebad3d80ad8392d714b16465","sha256":"0cd370c7deeb7481811226d092c3854796df2a5fb58390f5298483bb22f8aede","sha512":"f44ca85002088eaf763b07480166e2593ba5485223000ee566104f5591cb18088d45696cccf9a7182dfd53582d7ca7f5e757de252a9ae452b28fc3ef182ce1ea","ssdeep":"48:bx0B6A+Ld2JJZdLXj3fALg3XLRDYL/atJJZUYb0ENQ+F5HgUBVJAohL8SLbFX88t:qBJJZpDFTJJZhBlGCZfvcUmckJiUcBcQ","tlshash":"c8c121aebb68dc37f559d3eeca01e139115641ab7580c260c1a8ef1f14164e6ae2fac4","first_seen":"2026-02-11T15:17:55.633592Z","last_seen":"2026-08-31T08:51:18.206607Z","times_seen":85,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.687Z","timestamp":1788166237687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 425953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T13:31:51.743781Z","times_seen":272692,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":18,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.691Z","timestamp":1788166237691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 425953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T13:31:51.743781Z","times_seen":272692,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":34,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:37.692Z","timestamp":1788166237692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://trustcard-application.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 425953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-31T13:31:51.743781Z","times_seen":272692,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":45,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/phone-4.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:36.818Z","timestamp":1788166236818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /phone-4.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 334865\r\nlast-modified: Sun, 16 Aug 2026 18:04:35 GMT\r\netag: \"6a81fbb3-51c11\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334865,"size_decoded":335104,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbbd3aab77cb5df884cf3a3b4aaa4c21","sha1":"c9442ec1d483e4e76b4506b5f23d9b15f1474656","sha256":"715103f9615c025f8758f7b2a514a93effc6b6ad62e508de1b6177e91d1a8763","sha512":"ff89024db537159b90d260d70735c193bd49b0b98c92352c146709198e895932cdb4ea72dd707d6b04c336590c70c34c37893fcac92f1ecca6ec96b6d76d0911","ssdeep":"6144:GUiwM0ajDICgS5J6B/oZ0+FtnK7DpyWFGLdDdPr+3CBmwvQ2tcD:GVYeZVOBQu+FoXpyW0ZrQWIX","tlshash":"3d642352de434d1ea5705d8e402ca4dcfbb809dca68064f89bd4b993c1cae62c769c7f","first_seen":"2026-02-11T15:17:55.607976Z","last_seen":"2026-08-31T08:51:18.207154Z","times_seen":73,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustcard-application.com/favicon.svg","fqdn":"trustcard-application.com","domain":"trustcard-application.com","tld":"com"},"ip":{"addr":"149.3.170.168","port":443,"asn":213373,"as":"IP Connect Inc","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustcard-application.com/","date":"2026-08-31T08:50:38.019Z","timestamp":1788166238019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustcard-application.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 18:04:36 GMT","end":"Sun, 22 Nov 2026 18:04:35 GMT"},"fingerprint":{"sha1":"D0:CC:0B:DD:36:93:24:95:4B:C4:D3:29:05:FB:74:00:86:1E:53:F9","sha256":"4E:3C:31:91:D3:DE:1B:0D:F3:F6:0B:BF:E0:FA:C7:FC:17:B4:6E:46:4B:31:C5:FC:CC:78:B6:A0:EA:C5:2F:08"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: trustcard-application.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustcard-application.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Mon, 31 Aug 2026 08:50:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1214\r\nlast-modified: Sun, 16 Aug 2026 19:55:09 GMT\r\netag: \"6a82159d-4be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214,"size_decoded":1449,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3d6c2b61ac4510ae8fa2419438c5d33","sha1":"f1dd28d44da59cd85b6dac1ffcb26182c63e589e","sha256":"62c830b2a83ee7f9be93d00e9b5e2c267d3a936cf52cc18831c7f640aa71ef20","sha512":"d3cb6a1d552db27b38f5255e6d1ed71c375c4cd4b263a03f60035cf6bdf810b830b9864fb806468e046bde52a763a5d055dc6b5e03d0130dba548dee78a4e0dd","ssdeep":"","tlshash":"65217f17bb5adb37e699c14ce804d4a4116ac1dba9c1c391d2e5ef0f14586c32d0ebc1","first_seen":"2026-08-19T22:38:11.287435Z","last_seen":"2026-08-31T08:51:18.207784Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"trustcard-application.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}