{"report_id":"b97ca198-1d91-4d16-8fd6-742f8667e832","version":6,"status":"done","tags":[],"date":"2026-03-15T07:29:36Z","url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"title":"Trust Wallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T07:29:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-15T07:29:12Z","timestamp":1773559752,"ip_dst":{"addr":"172.67.217.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":48316,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-15T07:29:12.489260+0000\",\"flow_id\":725065100972979,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":48316,\"dest_ip\":\"172.67.217.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"white-net-b75.cf-eb0dgs6f.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2638,\"start\":\"2026-03-15T07:29:12.480179+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-15T07:29:12Z","timestamp":1773559752,"ip_dst":{"addr":"172.67.217.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":48308,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-15T07:29:12.496133+0000\",\"flow_id\":131998836871944,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":48308,\"dest_ip\":\"172.67.217.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"white-net-b75.cf-eb0dgs6f.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":939,\"bytes_toclient\":1654,\"start\":\"2026-03-15T07:29:12.480008+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cardstrustwallet.info","ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":55,"request_count":11,"received_data":1734477,"sent_data":5104,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":2,"received_data":25708,"sent_data":953,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2170347,"first_seen":"2023-10-18T22:23:56Z","last_seen":"2026-03-12T18:33:49.846497Z","alert_count":0,"request_count":2,"received_data":2007,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-03-12T19:54:34.716692Z","alert_count":0,"request_count":2,"received_data":1829,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"white-net-b75.cf-eb0dgs6f.workers.dev","ip":{"addr":"172.67.217.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":3422560,"sent_data":1128,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-03-12T16:56:16.16664Z","alert_count":0,"request_count":2,"received_data":2883,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2856799,"first_seen":"2025-06-28T18:40:21.321537Z","last_seen":"2026-03-12T19:54:34.604809Z","alert_count":0,"request_count":2,"received_data":2155,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":2,"received_data":87940,"sent_data":1112,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-10T18:12:06.643592Z","times_seen":3275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d7d7cdeeacf2c12aaa05de606eb961cf","sha1":"a85210a5946006f1b13a68883855e2e3cbf56046","sha256":"98e7f00cced0780876825a8a55ab6335e1bfd306c80474db8bff5b3ecc50d67d","sha512":"f9375abcaa4c7a05585c86e25bc2b6483d4169f6b9b96e41c8b03cc9fe4de5f62efc8a27047e1fddafe87d7072bf442e9d0f3330436d3a150e061bdd721f0324","ssdeep":"3072:C14foloVnD7abpMkGbBZ1VS0p3UccRkHI:CAC5o3UccRGI","tlshash":"fd3431e9db8784ec4e4512dec4b3f849e0144e27ceacb457a92eddc17629f62808717b","size":244303,"data":"","first_seen":"2026-03-15T07:29:47.710429Z","last_seen":"2026-03-15T07:31:48.769196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-10T18:12:06.59839Z","times_seen":3491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-10T18:12:06.653143Z","times_seen":3449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/bda9831a-ee80-49b4-8993-3a6225469317","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5c8a642fb27c74b8fc3f2a09bbc877","sha1":"86200cb235ae1941272d1e3aa174b84a0526a715","sha256":"1051631591c117e6400df5dbad1744402e639bce787543ad32936894558ff826","sha512":"347989da8c890dc1e171b285bbd9227a8a84fcffbc5e15b37c3cd698ae764e6238bd6b93a922af1df8b3da707f1e54e4b8b1b776c815f19942c299a194142004","ssdeep":"49152:F7OwPEZJsIclgwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtrtuCBykP1YTR:EUykP1Yt","tlshash":"0ef523823c57aaa2cf84426470b7ad0764950d13499df0dbf6acf9c134adf6181ebe2d","size":3421255,"data":"","first_seen":"2026-03-15T07:29:47.712853Z","last_seen":"2026-03-15T07:31:48.771391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-08-10T18:12:06.588023Z","times_seen":1582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/app.js","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec9c538aa098226dedea15839ccf0ea6","sha1":"626328bbd3208ffea0ae25d7b816f4b8c81c8b2e","sha256":"a99ba8af5cf102ab76a8e8a43e1766ca5a40d03100c32cb0b4c9a568bc9dadaf","sha512":"759fa33e861ddb8d361aadde44e4dc61e91cac9d8791c446a8b63272472286a7f9ddb5a85deaf26e30dd0ff6ec0ef36ceba751062ce56c46af65ba310108885a","ssdeep":"","tlshash":"0641485b7279113348bb68a7578b73897b2100036287e9fe39adc7d50fd0aa0947b5c7","size":2318,"data":"","first_seen":"2026-03-15T07:29:47.691857Z","last_seen":"2026-03-15T07:31:48.767231Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-10T18:12:06.590327Z","times_seen":3406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/aos-2.3.4.min.js","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e6c85325c7e067c27ec47966f4f11f7","sha1":"82ad3d93232b2add5390ed5b50bd7a1a9d25c056","sha256":"5387885c7cac9af305324d05cce6883d2eed8c5aec71ddaf59a5cbc11abbf106","sha512":"4e00d335017815bccf1fb8532cfdc48f27dea358e95d487f46a139594af1d9820a5dee26775176cc6a72153411491b503e4cb16c6c4fa2883154a47e706d7329","ssdeep":"1536:HwlGzdEtVT39kTTpa0/7Vm+3W21/Ll+pKycy9VIGr3DRXMnstIds5q5HsEYhJB9w:HwlpT3KpzE+3WQb+TtksM5V","tlshash":"f76421da594690a97e0542decc72ed04e0154d23bdacf097a6edfdc1712af22d08b36b","size":315383,"data":"","first_seen":"2026-03-15T07:29:47.701535Z","last_seen":"2026-03-15T07:31:48.754662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3d16709d652a92290ae122af3432ed97","sha1":"d358b621a2eaa32fe8998d5c438514122def7ab0","sha256":"cae51aa5d27111935b2e9449f537743889b611051075a26b8fec7566a100446f","sha512":"b02e89ffcc647dfdc15321923759214956e132926be354f2d9773756a8eaa9ce06ab22d89474ba40346bf381554e2573ae877319ec3c2279bf1712eb9df58eef","ssdeep":"49152:27OwPEZJsIclawW2QUSvhjG+EyY4bfO3xrQanJfCpszVtj3dhykP1Yhf:gykP1Yl","tlshash":"73f523822c17aab2cf84525474a7ad0794990d13599de0cbf6ecf9c034adf61c1ebe2d","size":3418700,"data":"","first_seen":"2026-03-15T07:29:47.715567Z","last_seen":"2026-03-15T07:31:48.77877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-10T18:12:06.64719Z","times_seen":3237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aabb574ed563d72a850527e968550f6b","sha1":"f7e942e7426917080aa12bd25fdcb56ec0ddcd22","sha256":"37f826858ff4026d2d5997b768354ca5077c50b2a621d8046df9e00ff6c766bf","sha512":"faab92039ce01dc32b52fd187915d48c4d8c9f6837bf018861384f9ccdbb3d7fafc27a8d825f9291f40d6185fe0ca67f1d45bc6196a41e4bf15291dd45c050f2","ssdeep":"","tlshash":"3ac0c023c6a088a4090c00f770f823803880182d804570cbc2fdfcc5448df834dccd50","size":186,"data":"","first_seen":"2026-03-15T07:29:47.717601Z","last_seen":"2026-03-15T07:31:48.77313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92ea75b3bdb7fa86e376c023b67b45cf","sha1":"3618b12d85d09a77419feefd10eb7754b4360d62","sha256":"59c2c15884fdddba375a03206f85cce7fe72fed4e3aac07d2c252ec99a05c00e","sha512":"14220d30dd424d26703dba073589dee3a2520c9008ff4270a0eeb4b544ed27eacaa04d91f0463a63e33f91a0fdb99a780841e571928dc8c19423867b3f5c7e36","ssdeep":"","tlshash":"73c08c6c62a28874132ba87701f447ce3830403faa85345f392c483d0b86a91eac04b2","size":161,"data":"","first_seen":"2026-03-15T07:29:47.718697Z","last_seen":"2026-03-15T07:31:48.775703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-10T18:12:06.593474Z","times_seen":3342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/secureproxy?s=%2Fipfs%2Ffgr_5ULKRncN-b4ooVg83Qd3a82b0340280d74eb6f4e95319a2267%3Ft%3D1773559751169","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b23048ba5d731bb6f8b3a40c52713bff","sha1":"a90ca00e4aa0bb4619b565cb6a811e5b8ba3f7a5","sha256":"b55e7cdd399c65615e4010b10f4012ee7b2736e237ba049d0ad2c82cb6ea7d9f","sha512":"6a04aad9dcea6001e08416235ef6e7895c6c4929a91247d7e281aff300ef5fe42d0ac94fb49face4c2c4e0cd1edc87415f02fd9b8804c1c830639b7a6d3ebcf8","ssdeep":"6144:qh5gDI6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsIZunzvlzSWP8p0Q+Bz","tlshash":"98d499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd098b5e379b8351e5998","size":634368,"data":"","first_seen":"2026-03-15T07:29:47.693122Z","last_seen":"2026-03-15T07:29:47.693122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cardstrustwallet.info/secureproxy?s=%2Fjmpd%2F","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\ncontent-type: application/json\r\nContent-Length: 1472\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1472,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBLQMfAysADgDyArUCKwDHAi0AAAECWAMAAO8nhn2XtsKCAVlRFSoy16wU14-7AWwCAAATgLWSAhzXcLROikKue42UfaXZJhAjI2f1e0UAsUAUa_9dKBbznd4fupWbBzZPpSjBtUUir_EcENeRipaMEUS3L1QQBeRrodiXKldcE8r0zrlDf__J_Jbqvzl0ZqTF4gBDzzK_GjX-oe1_se3heafIWT0WoArrecmoq5nBI9drlaYyNv-KrVYQ_B756n6YNDMnSGyuWYLV8bmzGjtKVOu3SEP-jhveS9OoaRbRSBKtD0PeeLJVyPUdX1Cjt81_EMav_rYaWuCj-YnrzNpH0jFf-sMIReGghVCrjchS8Yu21_M2HHVobuXHBYXVBSev7HeGHCiAyE2LhHTDNaAjAjwQvmGCZXiLE2MJm2uEBcqrwya2utvQHcZbotwNe7ubzY5_SQGxvIJbkVrYM20qt2eLiGmrqJUCOBHXp-BddllEqTz9sqHuzpSVi09pfiNQLJ2BfefhIFHr8P3k9AgoPDlh6DOgIaJloL3WRqW9-sVa7Lm7Wr_sZoPr-Ut2gnwJN6yAIYDLvVdPJnCHy3I2isL-vNalQXssapwB2LzzBfZAm3vl52KikzsBV7skSh-HjbN9Ij0j0xnOZu6ysthH40uCyJNFE23IkYuplbiTEBqtXQ_a0tqb44WUtG592KvegBDmRQg-dLanpjajMlTDtCKN77RoQPAK-BaJLk40fqTONvV3Yem2jDCnEqCJIVnRiVqtHhNJixBVqhqiHWJ-tL6TkKwIOShh2SaawpkDjLRJPc4_m1Do-2Mq722aHRsp2Fmg2AR71759L3dVrKFfGehy_7rEX03IOSmcbxOdPnMMrgLzuX7idJ8QJUrcpGV-uvuRcQ1oGGxGEi7mcrL3FiFipts5zp6GXtEcQpWZuUmzD7n3wv84gKzgU0le8FFUCAwa4vNwln1eRyq_CTwOqQyKmW_hxr518jYgtE5_oM45aGTlsDzPuAxcloC4NIseOI8JtrYhs_GeJUyqKTApFBFrzQIlqB96Ph27uTlcx1NrRDNNaV99HGVTt5BHet8N0i4LuVN4VFjjwu2gHH-E0DI4u4lP6X3l3Xl8ixcWujFD3dYzfSpDEbm5_Ut0GY12QH1SwzdhJ5D95vG9mxDMcu9JIU0jAwzPtag619mp4Z819GfWKDoB7zHxRaOs9rx2KAhEE1mCKoFkFFlR5jzURBIQ\",\"challenge\":\"eyJpZCI6IjdtVmZCUHJsT2pwRUF1OXZsMlh0RGciLCJub25jZSI6NzcsImhhc2giOiIwMDZmNWJjZWFjNmIwYmM4MmRhOGQ2ZjZlZTljNjgxY2ZhMzBjNWYzNWUxNmY5MmI3OTRjYmY4MWEzZjRkMTI3In0=\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:13 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1773559813191\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/15/2026 07:29:13\r\ncdn-edgestorageid: 883\r\ncdn-requestid: c94eeefd3167f86e46ac0bf701d1d255\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKlfY%2BXHzWRXYINgVJC4USO9le0zr%2FqfXUo7z5ks9RQ4umlsni%2BKeGMueVZvv66KpjsngOSkrH8YLmV78q%2BXbU%2BiE%2B5aBT%2BNeNXUjcJQ%2BK2WGVsViA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc9ce482df7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/assets/f_41ffce8e.png","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /assets/f_41ffce8e.png HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 111066\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: \"69b4959f-1b1da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eveL9yR%2BKIVnqMLvcxKWtLFgT39f%2FAh%2BAe4%2BUge05foIYKfd1tD8UaL0Gjniyz7P6O%2FH0Iu7usiEIqCZvF2eyAWuWBdn18P5mU%2FcUmkioXCTpBUDZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc9ce3cfba7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111066,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 486 x 429, 8-bit/color RGBA, non-interlaced","md5":"bf7815553b052f106719dd4864758187","sha1":"9c4a6191087e5a45dea41f44a25ef9301423f718","sha256":"84445f55d0d97cb3aadb37f72238604d0d9571769de4fc909ed9d7177c614b6d","sha512":"433fdd6322735e4628307649ee0e3ac305fd443592cc31b98ed71dbaa9da0de48c78c4c200b8b73d3e1df4984042e659dcf12f267dc64e305aa59e387d42a1d3","ssdeep":"3072:nTZ2BcW2ebC9V5ZZmtV9IS9g5vm5wS/E6IFPHXYROO76R:OcW2ebS2bmT5vmaC6FPy7e","tlshash":"6bb31250a55441ed5e5864c37c741831abfbdabe313461e9cbb1e9fa20763f20eace48","first_seen":"2026-02-28T00:33:53.806002Z","last_seen":"2026-04-05T11:05:10.858571Z","times_seen":40,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/assets/f_12baca5e.png","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /assets/f_12baca5e.png HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 592373\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: \"69b4959f-909f5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juUARzAR2fayOwmoaRfNKyzVhC4QPKZn83i4APvemNVV10tdysPdSgDTdzwAFv4WhwppvJGZ2cMl3y8kjiey3bIkf59lHE1aEhe8Y%2FuP6HXzvMfdqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc9ce3cfba8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":592373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 797 x 782, 8-bit/color RGBA, non-interlaced","md5":"e554d40fd0aaf4532fe3035a79658b44","sha1":"32c1bc7dd6d3aedfe6d89fee43114ab5e7da0899","sha256":"d93963c3c444e4aa014f580aa4d602365ae004383941a7b1f31c6e2460cd55a5","sha512":"755c8e7e481502fd30588355ebddb32b93cb49aa84580cea86bb929761fe29ed41d9ce84cd31226830784b67a824d956c58db39a48ea9921bd02a7eaadecf94f","ssdeep":"12288:6IynXgvx47jvbEoOKqCEBauKKBWc7f71d5XbzyqaeI/UyX1hws/agWEq:6Imgv6jvwoOnxcDKBf7hbpaJbFhwsige","tlshash":"88c42331902b95af2838c117be54d716cd7ed69bcf3829a301ace0c96a77a35640e739","first_seen":"2026-02-15T08:27:17.960419Z","last_seen":"2026-03-15T07:31:48.766703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/app.js","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: W/\"69b4959f-90e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4xV5H7t88%2BXVcZAOZMF3b10tiGxeof%2B98p0F%2F990MgImSS1Lm0U6B0PqlS%2BsEKRfuaDLzek3fRXS4OFXtCvbNWbTKa3ZnqSXg%2BBBTnZcnyH9fqBtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9dc9ce3d0baab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ec9c538aa098226dedea15839ccf0ea6","sha1":"626328bbd3208ffea0ae25d7b816f4b8c81c8b2e","sha256":"a99ba8af5cf102ab76a8e8a43e1766ca5a40d03100c32cb0b4c9a568bc9dadaf","sha512":"759fa33e861ddb8d361aadde44e4dc61e91cac9d8791c446a8b63272472286a7f9ddb5a85deaf26e30dd0ff6ec0ef36ceba751062ce56c46af65ba310108885a","ssdeep":"","tlshash":"0641485b7279113348bb68a7578b73897b2100036287e9fe39adc7d50fd0aa0947b5c7","first_seen":"2026-03-15T07:29:47.691857Z","last_seen":"2026-03-15T07:31:48.767231Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/secureproxy?s=%2Fipfs%2Ffgr_5ULKRncN-b4ooVg83Qd3a82b0340280d74eb6f4e95319a2267%3Ft%3D1773559751169","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Ffgr_5ULKRncN-b4ooVg83Qd3a82b0340280d74eb6f4e95319a2267%3Ft%3D1773559751169 HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9ae00-qQygDkqgu0YZtWXLaoEeW4uj96U\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=tSxXza_ELUykJKlNiL-gVA.js\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/15/2026 07:29:11\r\ncdn-edgestorageid: 883\r\ncdn-requestid: bba0499fb16972b8421f6ea56f71ddd5\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbyOu3%2F7wY9cE0dBI38Kd4YhQUyjpBKFAVQzX%2BBJXFSSp%2F4OGE0rLB9uPjWEWBiY930l%2BISJt6g%2FfDkkJ7sdlkQcx2VYN8OTHri%2BqZKSBAtk1O4W1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc9ce3d0badb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634368,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b23048ba5d731bb6f8b3a40c52713bff","sha1":"a90ca00e4aa0bb4619b565cb6a811e5b8ba3f7a5","sha256":"b55e7cdd399c65615e4010b10f4012ee7b2736e237ba049d0ad2c82cb6ea7d9f","sha512":"6a04aad9dcea6001e08416235ef6e7895c6c4929a91247d7e281aff300ef5fe42d0ac94fb49face4c2c4e0cd1edc87415f02fd9b8804c1c830639b7a6d3ebcf8","ssdeep":"6144:qh5gDI6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qsIZunzvlzSWP8p0Q+Bz","tlshash":"98d499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd098b5e379b8351e5998","first_seen":"2026-03-15T07:29:47.693122Z","last_seen":"2026-03-15T07:29:47.693122Z","times_seen":1,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 07:29:11 GMT\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4c8ef72eb043b6205edde8d9e910787e","sha1":"fa8b1cd29ea6e9bd2113a33d10ab096306430f37","sha256":"0031e12119f0b0e9820611dc4e888b0decf9c9924e4b2bea291397e70105305a","sha512":"80bf1edac61df533f32176b490302e90a6213b72b5ea335092fa25128a4229cc7967e5c4cdc6cec06c923335260d0ecb779fad1b36a26ff616b4eb4465e34e7f","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/O:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVs","tlshash":"8c721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:44:13.889102Z","last_seen":"2026-08-11T09:12:32.580695Z","times_seen":6833,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":160,"dns":37,"connect":21,"send":0,"wait":34,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cardstrustwallet.info/\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9dc9ce42e9478deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":31,"dns":22,"connect":1,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cardstrustwallet.info/\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncf-ray: 9dc9ce434e31a0f0-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://cardstrustwallet.info\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":85,"dns":38,"connect":10,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cardstrustwallet.info/\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncf-ray: 9dc9ce434a8d2efa-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=2M7fwkrjheTjCE2Xcfw4W4hPUMd_lrUeUT517liN0oY-1773559752-1.0.1.1-hnr59wLv06ZpTZ5YN__UT7TgxXg4lNDmRlmagaMgWBmHyCuDgo8jj21RMj3KUnapc3JWXb0xTGV_nuwbAH.k865JupmXd6sW0QfELezjdf8; path=/; expires=Sun, 15-Mar-26 07:59:12 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Yf3OxKJmTj%2F%2Fsm71rzbY2kO6loaGOZXGrg9bhxrotd4Qb0SDNvdDkE5BQqyVZMrs0uW8h1xMBCtvbVKuqyLpwZa7DY7ZcloIF7q5AJKI8VRagqLOhq3Lziv6m59VrIp4gkU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":58,"dns":22,"connect":6,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/style.css","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: W/\"69b4959f-6960\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRNo7Ixz3FOzZ7XI5Vr%2FAnnCkE%2BF1E%2FbMjnYQgn5rqoftSL5JeeV3WrmRzDOsYzJ6mksO6EoluDGC9GZUkXDC5vW%2Boe2L%2Fl9TuM13VFPEe5qpEMMow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9dc9ce3cfba4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26976,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26975)","md5":"9498e7bda2089e74a1629fca4b6f81a4","sha1":"c3feae6c889acfb693d9699245562260510f723a","sha256":"c8d504d123e89d6733e0b7677e9f4a67b5f1f53498166eef48083e089787c83d","sha512":"c2d044505dc765ca1c3a3dc27f2227372918a9cbb6c8554cde09c0f91820d350f8543dec4e37860d5c41fed7c183eb959433a0a355d99896548e50f73f83bd6e","ssdeep":"384:MGdxyayBf1YzBPCVcdrQQKIyq/OTxPhMBF66x8VeH9HveoPgSXgtvX+UQ:MGdxyayZ1zVnXY+JMn66OVeH9PFXgtlQ","tlshash":"7ec2c5319154213cf227c537a9d1be9e7028c807d6ab17fef65a7569c9c32ab1b2234c","first_seen":"2026-03-15T07:29:47.694832Z","last_seen":"2026-03-15T07:31:48.762114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/assets/f_bf6ce74a.png","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /assets/f_bf6ce74a.png HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 28146\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: \"69b4959f-6df2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLhmuD6lvMiPO5LOjNNl%2F8rEQIhum%2Ff4oDsOX0xhzyk%2BRr8HeZBXC4gVip7nqx%2FTPGRAGwzWSJRdRpXFp25GaEfUnbIaDBh92z8JR91dz9IJ%2F2zL0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dc9ce3cfba9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 753 x 673, 8-bit/color RGBA, non-interlaced","md5":"3515fad471d01d38e7484bca9494cbcc","sha1":"d0d99b3c06f0fff18c566bfb9289db0034565faf","sha256":"885f7417b13e3d57c613434fa950d1f6283024a87f5de7d77b437a2a069c5667","sha512":"f6b8cebc20034b00bcdc2b4add9ca5015c4e6b3540b9af42260799df66215716a8a65fdd5af6513f72d39d254a58bc9d558d652ca4b6fe35a1051dbabc67e41d","ssdeep":"768:e9P2FpwRPBIIsjp3eAn22FyzVVRMhoT79:ewFpQ6593eAVcVF1","tlshash":"bbc2e141655668a19d4ec9133e1b29d97778923be30c3fb02d095e2a33d61f2242f63a","first_seen":"2026-02-15T08:27:17.955241Z","last_seen":"2026-04-05T11:05:10.851119Z","times_seen":41,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/libmodule-1.3.8.js","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /libmodule-1.3.8.js HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRuVWF%2F2MiZ4uaatyizg%2FWV6KW%2Bb1sNNFPFXw%2BJ74OnJSiKfKnyOPIAbnbo325P06Vuwj6%2BENUnmrjElAcEzZu%2BvX238iAo9ao4oMxIyMVz%2FYHBJcQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9dc9ce3d0babb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 07:29:11 GMT\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"75d871927f5e58b96f7bf7b5de083ae0","sha1":"ba1c473216e2bfb9613075ac3729a7b976118e04","sha256":"0014d56cd9cf8b2d3da043344ee9c6e4c4ad96ad62cb3d167b838ea5dfbd2ffb","sha512":"748385a376279efccc77e2d9e1126f22d4f9c4329772c63c0f9cf383ec71a00caa6d0caf93536b8a0c836f390cb5e2ebb0b53f9aae74fbf92fbec704298d6445","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:vXuM1+4","tlshash":"cbf17792002ba400ab971dc223cf7e3aaece10896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-10T19:11:46.108203Z","last_seen":"2026-08-11T10:04:22.97951Z","times_seen":4505,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":157,"dns":36,"connect":21,"send":0,"wait":36,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"104.18.40.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SbOgQxAdRDa9J08x7i7yaBKaHv88FjKe.CwTjERO590-1773559752-1.0.1.1-Xh._mQIwfTBIKz6fQkDz25iNGteNByrkn385F8BAMq4nOJNqf3JHflMvfxsd92UCuPaE3ewx7X4cQP4Eyh7dgtZdv.qffaHFd1hcuUpj3nU; path=/; expires=Sun, 15-Mar-26 07:59:12 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n2hiatVi%2FD6irKhigxghVEQjZhIAEglqMgPPjyVSU7QpsXkjzidOk8BMQH4zpxbG4ZkHWOJ7N2wBAUawRA6u66%2FLDhXT%2FOrSSpAl6LfJ3F1wA1QsUKm3SelcNTYa1CNi0IQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9dc9ce441eda2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dabd752f95d3053f6c19748a0bbd8964","sha1":"b2e678e4a0f12d702269225a064f3265d97ace18","sha256":"827cf5a874f80c3e209c0a43f1cd69b07bfb91093c1abc586453ebb7b2ed9ba8","sha512":"21431f8d351f97c79b2e5c022691c05fb0994c64fe41b5e7c9fa67cb2db174c1eccfe44d5c1204e5d1b66b50922a69e8b6dbd68d4a9465b94eda599fe635bd7a","ssdeep":"","tlshash":"3b11d0d0e6179541e3791f21b27cfd0874143202dad81f97903823e917ea611fb0e789","first_seen":"2026-03-15T07:29:47.698256Z","last_seen":"2026-03-15T07:31:48.755545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 70c1994acd5eeb2100980a6c66620e07\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9dc9ce444b66a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"30d3415a40b5a0d260282374dc8876e1","sha1":"2289ce6cf297c26ae7e711d247edd7debe81a552","sha256":"79054a972b90bb4801cc8f158396b3546305f4b38595c4cd2172bafa0b000c99","sha512":"a61a3240646abc5e7bb626567a027ca5402c6fb9e8e2834fd06ee4e12c0a35abaa779c82db5d1e1be2e2e4c9328333917367f355c807c3654eb417bb558261c6","ssdeep":"","tlshash":"9611d0d0e6179581e7691f20b27cfd0974143302dad81f97903823e517ea611fb0e689","first_seen":"2026-03-15T07:29:47.699855Z","last_seen":"2026-03-15T07:31:48.753656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"white-net-b75.cf-eb0dgs6f.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"white-net-b75.cf-eb0dgs6f.workers.dev","domain":"cf-eb0dgs6f.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.217.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-eb0dgs6f.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 06:16:42 GMT","end":"Sat, 13 Jun 2026 06:16:41 GMT"},"fingerprint":{"sha1":"5F:56:D3:33:C6:53:06:BE:B0:D5:FE:B0:0D:89:B0:EC:F7:9E:04:6B","sha256":"6D:74:C0:EB:6A:58:CF:11:6D:9E:97:F9:F8:12:38:0C:60:68:A5:7D:15:9E:03:42:CB:1F:A2:B1:1A:E8:E1:A5"}}},"request":{"raw":"OPTIONS /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: white-net-b75.cf-eb0dgs6f.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cardstrustwallet.info/\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83BEy4jdMnKqogkXhQODAQOy%2BEQNQZwtazI16ECMGTEfoM7LG79XMnr%2B1I%2FzRY5fnyzrgWKky57qW%2F%2Bh6KhSmMd5CPTVx602DhYNkGjqwRp4TlIRlI1ydbSk8bV7g0IAjHeq1Ao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dc9ce452cfe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":52,"dns":31,"connect":1,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/aos-2.3.4.min.js","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /aos-2.3.4.min.js HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\netag: W/\"69b4959f-4cff7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0SbR8bZISHvr9EsTrr5TRK763Cgrn0sIfJ2wkQyp8afFDYNHEjXsdyn30YKqRBAHF9p1iWkumVEnFFPI6tOu6MKOS4FOWuv6z93UCRj%2B%2FhHrb0Ecg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9dc9ce3cfba5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":315383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2e6c85325c7e067c27ec47966f4f11f7","sha1":"82ad3d93232b2add5390ed5b50bd7a1a9d25c056","sha256":"5387885c7cac9af305324d05cce6883d2eed8c5aec71ddaf59a5cbc11abbf106","sha512":"4e00d335017815bccf1fb8532cfdc48f27dea358e95d487f46a139594af1d9820a5dee26775176cc6a72153411491b503e4cb16c6c4fa2883154a47e706d7329","ssdeep":"1536:HwlGzdEtVT39kTTpa0/7Vm+3W21/Ll+pKycy9VIGr3DRXMnstIds5q5HsEYhJB9w:HwlpT3KpzE+3WQb+TtksM5V","tlshash":"f76421da594690a97e0542decc72ed04e0154d23bdacf097a6edfdc1712af22d08b36b","first_seen":"2026-03-15T07:29:47.701535Z","last_seen":"2026-03-15T07:31:48.754662Z","times_seen":2,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cardstrustwallet.info/\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KmxEjQjs8esStp4YxuJ6%2B2P%2BgJQjmfGP9UWs%2Bq5wx6WgiDMkn6QdxugVIrVbjBdw1NW2cdybK7t1Lk9PYpln1dXuSrLs2jnJsPvS9ngsYk4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dc9ce430b5edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T10:57:27.173281Z","times_seen":17835087,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":56,"dns":25,"connect":4,"send":0,"wait":410,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9dc9ce434ad58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9bbc54698d55c63f66928df704f8631a","sha1":"3225c12627137eb95b6cf08b982d7bf7c7851769","sha256":"3f89fbf5fd87c2fc4469f58fa4b5a0c724cb6a1fe7dba054de895dd75a915a2e","sha512":"b537075618e3a00c5c391f4c1a318b6a35a46108615b70b9e461813c3e163cd92237970d57757834af188a946ceae3a3c185f785d5c0a120ff40c18c0864a604","ssdeep":"","tlshash":"4e11d0d0e6179541e2691f20b27cfd0974143202ded81f97903823e917ea611fb0e685","first_seen":"2026-03-15T07:29:47.702704Z","last_seen":"2026-03-15T07:31:48.761203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/icon.svg?d57da504207bc776","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET /icon.svg?d57da504207bc776 HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardstrustwallet.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b4959f-356\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgUkLsTSv0YaT6YpZFTyG9h7ZvQxffvzfsUgWiW9HvIGWidGwOX5duIycvu0Me%2F2dFOv%2F8YT9INwVy14qsg8lVL7tRVGCRmpb518kOV0gv1oWWc1QQ%3D%3D\"}]}\r\ncf-ray: 9dc9ce46cdb6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a2ea22e9e3715f46aa10c5d5d515802","sha1":"8a1c176baabdea1858dbbfa49ebdd2bd08e84fa7","sha256":"c3729a732e44aec8b096f4b888d211efe395566452e3eccc7c6743467158b148","sha512":"150f8e44dbc8627b7a6b06b4098facabd4465b6bbd4279a7fe8a15cce065607bc65e3787d6497a530b9defe1c8c79d105dfc87549b47d7ed230d91c07f997038","ssdeep":"","tlshash":"4a0108268798e62bed5ed20ed058e420312650e76bc8c245f2be9f4f5f145864c477d9","first_seen":"2024-01-20T14:08:29Z","last_seen":"2026-08-09T14:00:53.539549Z","times_seen":257,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardstrustwallet.info/","fqdn":"cardstrustwallet.info","domain":"cardstrustwallet.info","tld":"info"},"ip":{"addr":"104.21.28.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T07:29:10.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardstrustwallet.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:17:18 GMT","end":"Wed, 03 Jun 2026 09:17:17 GMT"},"fingerprint":{"sha1":"3C:57:3D:FD:5D:A0:6F:2C:3F:E4:E4:4B:C6:B4:2F:99:34:7C:AF:FA","sha256":"3F:30:89:15:66:B4:AB:CD:42:28:DD:D5:54:30:28:FE:02:AE:3D:F5:43:1F:E4:A6:35:A9:56:CE:A6:AC:47:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cardstrustwallet.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 13 Mar 2026 22:54:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dw0x4MJfiJ1qG2F47a3x31HlvoNQ3xf4uZlownn%2Bu9DtlUXV6DOSaiJ70%2FpIzz1YKaZD6jPQez7H7GqVvkEFjoxUAZsfwy%2BadIAIA%2FCFLP7ZBzT3rg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dc9ce3a9e4e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11916,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (480)","md5":"4cf7db9830f804d3dde7309a9fa3f8cf","sha1":"91dbbd94741c088a91e8d8a15a711d6d90b30e6f","sha256":"52e63e4bc7a3ac9ff61468f00510ab84b337dc086886602646f63bd76f3e2191","sha512":"f99c7ef43365eb64a14c1306febec87e5032a3249014435ae4d82d624d004d05ed3ca51753e99ac35b42d269111d7c4213126f1f32800a246581c609af78e967","ssdeep":"192:oNCFbzXLztttlNV1dAmP6KwDhUUp8oOMa5RMNeiX/FQZb6u:SCFbzXLztttL6r4USmMRMtNQZb6u","tlshash":"2b32833155f84462d1438296aeb0a71b3eb0d267c3ab5298b6ec17e45fcadd2cc0b46d","first_seen":"2026-03-15T07:29:47.704465Z","last_seen":"2026-03-15T07:31:48.757534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":42,"dns":28,"connect":1,"send":0,"wait":211,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-15","alert":"Phishing Block","trigger":"cardstrustwallet.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"cardstrustwallet.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 94289\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T10:58:24.484913Z","times_seen":259516,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":84,"dns":1,"connect":8,"send":0,"wait":8,"receive":10,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:11.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 94289\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-11T10:58:24.484913Z","times_seen":259516,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":8,"receive":4,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"white-net-b75.cf-eb0dgs6f.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"white-net-b75.cf-eb0dgs6f.workers.dev","domain":"cf-eb0dgs6f.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.217.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-eb0dgs6f.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 06:16:42 GMT","end":"Sat, 13 Jun 2026 06:16:41 GMT"},"fingerprint":{"sha1":"5F:56:D3:33:C6:53:06:BE:B0:D5:FE:B0:0D:89:B0:EC:F7:9E:04:6B","sha256":"6D:74:C0:EB:6A:58:CF:11:6D:9E:97:F9:F8:12:38:0C:60:68:A5:7D:15:9E:03:42:CB:1F:A2:B1:1A:E8:E1:A5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: white-net-b75.cf-eb0dgs6f.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"iy0fbm5hcl8jorfd0ij6\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4VrwgSrOkT5LXddT05Ku07LVlumatseFAcjQ1IHcX6mnY61wZ%2BliCEdusGXCkC5WJsTEswIyVvyae0pU7zHJcApnfTKkpxYEJd41f5M4WC04HVRl8gUNBBex5Gz8hw%2F7Qpefos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dc9ce454d9549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3421255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89d2ff9303900709c0be25b9e483b03a","sha1":"b85c93356b67e5e0ec57b9e69b302f7117fdb932","sha256":"daada1d4d6d7e189d38cb062004da78458c33c60a65ef0a014d4abdda283e792","sha512":"1eee6a06b134a1f134836077e16878e994a8f89673e999fe7d2ea5c517e698964e10f9c985a46688e0c9eb6edb21825889d07d6ad66777f25384d0f23ae20613","ssdeep":"24576:FV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdrqcP:F7OwPEZJsIcP","tlshash":"3c2523506e6bfe960f8cba75347bbe436a410b82848c54df6976edc4109c3774287e2e","first_seen":"2026-03-15T07:29:47.706317Z","last_seen":"2026-03-15T07:31:48.756295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cardstrustwallet.info/","date":"2026-03-15T07:29:12.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cardstrustwallet.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cardstrustwallet.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 07:29:12 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPPyjKq82cxL8YH%2F202WD2v7aj2XFG20Z%2BE1kfBzkVI63MQPiGqD87q5vJi7YoDUJHx1bVUOSs4Z9qUf9x9XmitXVX8s7%2FY4cr5JcOrpO%2Bw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dc9ce45af76dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5773bc7c57c0df09539c444f2564a3e2","sha1":"0687b0d69e01a3261c1a6a8ac05cac8651bb703e","sha256":"91f34e265426e85a0b6f00757d540f2014ead5636e2f6774f0e57590a2b738d3","sha512":"b5cd09bb6f38bfafd5d58c1e420a7dc4621f59a17179f36f16bd72db2e7214a7cb079e04332244823adecd15449a17bce23e2702a3e1d68166ed454294648a02","ssdeep":"","tlshash":"cd11d0d0e6179541e2691f20b27cfd0974143202dad81f97903823e917ea611fb0e685","first_seen":"2026-03-15T07:29:47.708086Z","last_seen":"2026-03-15T07:31:48.765843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}