{"report_id":"bd826b4b-9ee6-4489-8737-aac9f7a54077","version":6,"status":"done","tags":[],"date":"2026-05-21T22:28:18Z","url":{"schema":"https","addr":"trustwallet-payments.com/","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"104.21.10.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trustwallet-payments.com/","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"title":"Global | eSports and Gaming Community","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustwallet-payments.com/","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"104.21.10.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-25T22:28:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":4,"received_data":124927,"sent_data":2232,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trustwallet-payments.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-05-21T05:04:36.843889Z","last_seen":"2026-05-21T05:04:36.843889Z","alert_count":45,"request_count":15,"received_data":5866511,"sent_data":7580,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"dokisap.world","ip":{"addr":"2.26.75.244","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-21T05:04:36.845964Z","last_seen":"2026-05-21T05:04:36.845964Z","alert_count":0,"request_count":1,"received_data":403,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/js/main.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45e050bc382350dd9dd6dff724d53647","sha1":"1d01df884ef6d3d7346dd18416433b82683fad5a","sha256":"0769d1022b0c16160cac2d5d6456a5669cf97ba6270c91b6a2a4536286281974","sha512":"cc4f6cdc286c2806c6d4b771422196af1dc9477f449c8b3fb277b3fe91aee811d75a3781cac0bbe9254e98406aa6dafea1482b2ffa1c7265b3111bd754327dec","ssdeep":"","tlshash":"1ff02b8565eb711006ba1dfa10db9475d777d163319a0b047c9c89a1cf25478a396878","size":639,"data":"","first_seen":"2024-08-19T17:48:05.026572Z","last_seen":"2026-05-23T15:09:12.991229Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/js/transformator.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ff36a50763a6cb4daa722a9b6a735fb","sha1":"d9589e6504dcfc875020a4f7033765bad932999a","sha256":"25c234d228d48a7069884f0de5c45877529df68441795fff21bd36e23d64d185","sha512":"f1d22c91552dc82de02fe569436876f3d7590597f985ff5f58ecc0c5fbd69ba52f8b425eb0d607420f9a6f6252dc4432cf36e5ffe81b55ba5083e26175add4b1","ssdeep":"","tlshash":"98b012a7fdcc651842c33530ca37bd8c5a3334823c9d7409d41c18505419a2c1d53a4e","size":102,"data":"","first_seen":"2024-08-19T17:48:05.023543Z","last_seen":"2026-05-23T15:09:12.983954Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/srdg46m8gx8p.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d2a68dbd08144475c8df6af9ac0f94","sha1":"0f166ec82b630809c84f2af257e61261014571d2","sha256":"e4bd3c17ee4695538fdb2fdaad9450641b53aca4694f827293784bbb37138c39","sha512":"b160d1d3df48466234636e1998c6815e18ce6c3dcdb5dc144691a86f883ae92ccfb78044cabc2e4da66d89595224536931b85669a426c2fc43803a516b18235f","ssdeep":"3072:5j3Vx3hsWsuoj8PgByac5KMW/3N+nuR4BPiyGBMUiAO+J1gwaf6dEURoWZM:13Vx3hVsuoj8PgBoo3N+ayGBMefcpIzM","tlshash":"0794b2603bd0a85853ab8fb7732bb8d4fc1e186f2c5409a7d240fc5469d562beee1931","size":417899,"data":"","first_seen":"2026-05-21T05:04:41.850208Z","last_seen":"2026-05-21T22:28:21.096626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/code.jquery.com/jquery-3.6.4.min.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-05-30T01:05:05.289009Z","times_seen":24357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://trustwallet-payments.com/\r\nOrigin: https://trustwallet-payments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 01:43:43 GMT\r\nexpires: Sun, 16 May 2027 01:43:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 506652\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-05-30T03:42:13.137057Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":75,"dns":1,"connect":7,"send":0,"wait":14,"receive":4,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://trustwallet-payments.com/\r\nOrigin: https://trustwallet-payments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 01:43:43 GMT\r\nexpires: Sun, 16 May 2027 01:43:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 506652\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-05-30T03:42:13.137057Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":60,"dns":0,"connect":9,"send":0,"wait":16,"receive":3,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://trustwallet-payments.com/\r\nOrigin: https://trustwallet-payments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:07:09 GMT\r\nexpires: Sun, 16 May 2027 15:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 458446\r\nlast-modified: Wed, 27 Apr 2022 16:11:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-30T03:59:59.042124Z","times_seen":251925,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":147,"dns":2,"connect":9,"send":0,"wait":15,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/code.jquery.com/jquery-3.6.4.min.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/code.jquery.com/jquery-3.6.4.min.js HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqkFrvRvKdoE8K6yMh3%2BG0ObfVYrlIRbzxEbPJQdaAPMajNA1Cqf1aE35f0SNh4Uhue5ue3jntJZjXPxP4iw4RIfuYNniUatxYmIBG%2FqyjHdjL6RkTrJNGacR0QR3Pnrv1QzunrM7%2BSME0E%3D\"}]}\r\netag: W/\"6a09fdb8-15ec3\"\r\ncontent-encoding: br\r\ncf-ray: 9ff702da2e434c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-05-30T01:05:05.289009Z","times_seen":24357,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/f.png","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /f.png HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:40:28 GMT\r\netag: \"6a09fd8c-2b4\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKG3R2ZHjz9kj4mdmXG4YTzHUXKVr9qdg4One2Vti3gZeB90su6nziHk4x5RzZtcM1ItN5t4dnvlJ9EjTn3t24MuYxI5GrYA7vjdNHcER0VoLxpkuzgEZLwOgxgV%2BiuibLR96i%2BqByPl6jc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702da3e474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"eeba43aa30fd4a79f8827fc116f8acb1","sha1":"08e9622c8b2e97b1244d1a3375a744cddab0dcc7","sha256":"9408a92c41ffc981009a6e1365e2cde0e3cfb4ca27344e358fda64881c1a0ee6","sha512":"7fa486f7f8da5d2bbbc11e3d631a915da723bdb4c2d1d74b2e4613c00c38ccd826771865d0ee9aa21b80ee190779b10a9296a86c68c66a8eda091ca9832b3e83","ssdeep":"","tlshash":"e90144ba3a651cd79c0f156fc9aa60e4ce7b9d944c33a416b128e75a280612504c5c90","first_seen":"2024-08-19T17:48:05.01247Z","last_seen":"2026-05-23T15:09:12.993355Z","times_seen":143,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/srdg46m8gx8p.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /srdg46m8gx8p.js HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:40:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZiZIuiif6kb6%2BQXl%2BKPeKOvogcPBVCipDsRrYl8Xe0n9vXA9f6OMFSVlRn0kZ4ckJUyAZ0NxZMOy9Pn1aY8UUBJTMtW5Urk16u8ADYggXmyN4ShdvxQrn6BCbA%2FpNJ1IvdfSaeNVDBaTEM%3D\"}]}\r\netag: W/\"6a09fd88-6606b\"\r\ncontent-encoding: br\r\ncf-ray: 9ff702da6ead4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417899,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"36d2a68dbd08144475c8df6af9ac0f94","sha1":"0f166ec82b630809c84f2af257e61261014571d2","sha256":"e4bd3c17ee4695538fdb2fdaad9450641b53aca4694f827293784bbb37138c39","sha512":"b160d1d3df48466234636e1998c6815e18ce6c3dcdb5dc144691a86f883ae92ccfb78044cabc2e4da66d89595224536931b85669a426c2fc43803a516b18235f","ssdeep":"3072:5j3Vx3hsWsuoj8PgByac5KMW/3N+nuR4BPiyGBMUiAO+J1gwaf6dEURoWZM:13Vx3hVsuoj8PgBoo3N+ayGBMefcpIzM","tlshash":"0794b2603bd0a85853ab8fb7732bb8d4fc1e186f2c5409a7d240fc5469d562beee1931","first_seen":"2026-05-21T05:04:41.850208Z","last_seen":"2026-05-21T22:28:21.096626Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/img/dicki.mp4","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/img/dicki.mp4 HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://trustwallet-payments.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 21 May 2026 22:27:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 12205287\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:00 GMT\r\netag: \"6a09fdac-ba3ce7\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-range: bytes 0-12205286/12205287\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lne5TUaSGdOf%2F%2Fc49cdupkSbXCwaFiUUNzQHJIz8u1HgWWBlQKAUs0EOUhJx9DHi4PpfYVgJffxmJwDSLPrFcuqkXWAkdRYU4jZkMjmQBPtFIGiFgsRxeATQpaSm1nsF%2BNipi%2BD%2B28%2FkJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702ddbd5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239937,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"50eb3f105fda232a370c3ec40a61c017","sha1":"3cb4d0146d6a9b930b19e712678ccfd32a79e9ec","sha256":"99b4be731ed8da5719d5603f66e5879222ea29169e8f99ee56fa0d29e890d3dd","sha512":"83ead25c457c43dd6d64d2dd50f8044781c90eb2e6794d13d633988144426b26430814e76103f2cfdd9023143f3f934902d2105be0846ea314e32031c9e8c47b","ssdeep":"3072:HGhIFE0CQybBuS7WsG3PWpVcSn+ngfD553vIMfWj/cwCPwInZ1iS9sHHOMHn6KXu:HGhIFVybB2jOpySn+ngncRIZ1+HHrn6Z","tlshash":"703412c0deda2b83b17827b4a5e722ab304a1242d7515a149fef060df5d6ce9ec36907","first_seen":"2026-05-21T22:28:21.098466Z","last_seen":"2026-05-21T22:28:21.098466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/assets1.challengermode.com/portal/videos/marketplace.mp4","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/assets1.challengermode.com/portal/videos/marketplace.mp4 HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://trustwallet-payments.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 21 May 2026 22:27:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1987835\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:42:12 GMT\r\netag: \"6a09fdf4-1e54fb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-range: bytes 0-1987834/1987835\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fux7Wv7BEDaNt36kYT3x8UOH5Pi9Na3cR%2BNK%2F1CjySS3vX3ENLZNLOHaLNXUDEmNpEL9u8v72JIYCXOpWkVahY8ly5x9YRNj9Lilfour3Bp%2FCL7rZrX4cZFSd%2FcKoZCbBLZNcAr96ynw81w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702ddcd6f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015858,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8e4ec70ed585c82ee466234fee91d8dc","sha1":"0461c902aa1001fc4dbecd64d58c4bfdc274ad4b","sha256":"3c76254721b4a7a1663cf9bf93945433b134fe5eb45f49ebe62f688133cf8631","sha512":"7f3da89172ebdadb04830092d1cbf2ee26490630715eba7e60f588c8a1962be634d64966835fe5f14f12adeb877e82c48c4aee7d234025040c551ef115ac78eb","ssdeep":"12288:DbQRGu02ni6lDWiFTKtoUbK/qBRmLnAIZBTCcsfHDc2PR4:PQRy6lDWqmto4eLVZhEjcOR4","tlshash":"66251398bf145da6d28124ba8d52d7201d213a66c9b4e84b7ec479df06f47c6ef72303","first_seen":"2026-05-21T22:28:21.100533Z","last_seen":"2026-05-21T22:28:21.100533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/assets1.challengermode.com/portal/videos/marketplace.mp4","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/assets1.challengermode.com/portal/videos/marketplace.mp4 HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://trustwallet-payments.com/\r\nRange: bytes=1966080-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uv=mpg2ah2o-lpt2ipcq\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 21 May 2026 22:27:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 21755\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:42:12 GMT\r\netag: \"6a09fdf4-1e54fb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nage: 0\r\ncontent-range: bytes 1966080-1987834/1987835\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIfjG7pz8xdthSw%2FqgQg5CDSqRBhgN7yA9hhKfebLzAGOK60pJrOwRH5ZDbjU8KQGB0zRlymRBjf69iaE7GdthfTq4y9d1V0qrikKbBhdBXWeB1VMHLSEDnLmUw%2FiVEGjPKhoUjxtiRoqMQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702dedfde4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21755,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"a468d4ba7cb7871a6ecd667cad00dec6","sha1":"3748f501f2ca5437bbd9b86dd493a08c6faa4a99","sha256":"a30fc18a0b1e1674d73b78b3f5dad796aae7715dca3d085df1b07a9664105f59","sha512":"b38db993d83f1b4b5b78d35fc500ea226b7e9fe9decc3af94aa5bb99bc88197c5c80d9e126abaee07f146174254bd669f485d1ec5791bad482539bdd6d2889b1","ssdeep":"192:g/n+oJeGZE2G0rnfFRVG14uCjGPQBhCeZnyhEP4Sme3chVi+JiW:GveGvdrnfFRVJX/BsIyaw/HhVi+wW","tlshash":"c0a206ddef204506d740717cddd283117b30d8e86e87d78b1a802179ae763e42f9e6aa","first_seen":"2024-12-05T19:56:07.821757Z","last_seen":"2026-05-23T15:09:12.986536Z","times_seen":139,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-21T22:27:54.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tZO2FVeYY8J4ojFegBPFcG3dOPX0c9fE5G4Z6r4cfC1lUQkd537i6wq%2BdZZIns%2BcUqt1A7B6JQpBmBIAM%2BblbhEa7PIKD33GKNbfhEobm5INGB%2BeamjVtBrAQXjgwPH%2F242TAW6z%2Fto3Uk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ff702d7dcc52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":3701525,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2137)","md5":"edf183465c3942cd0866f020acd78e4c","sha1":"e097abe4b55dc26dd5cdaf3c807e136a690c6855","sha256":"86b6a74572a066883f1b553b743ae91ec24792375777a1099f517537c238520c","sha512":"0ce876e6e97532d195f465046ab9e76d1d6e8b46dcdcc8d1d268cedfa97e7b360ff0ef37311d3601eaadb672d72da4e598214bffc73626c946300689ff35076c","ssdeep":"24576:mcN8NEX3mAIMRxbqLPWvV+T0kV1vqp5WbrkNVMesU:mOP5RxbkPvM5kkn8U","tlshash":"6325f16105bd2076019e40a66aaf1a1e3b61f537cd19dfc6f6bc7a984f8fd84eb43048","first_seen":"2026-05-21T05:04:41.858221Z","last_seen":"2026-05-21T22:28:21.103306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":37,"dns":22,"connect":1,"send":0,"wait":151,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/image1.challengermode.com/ed08e059-bfb1-4e7f-ab09-08db2f848527_64_64.jpg","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/image1.challengermode.com/ed08e059-bfb1-4e7f-ab09-08db2f848527_64_64.jpg HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1624\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:41 GMT\r\netag: \"6a09fdd5-658\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d26Jyh1i0u0QrpF67%2B17HVWC4%2FTaSY8cliLONeh5phMnoxUSPznICS578GQg7Y7SIpaWgK5b1JxMikgY%2BkmzbJIiwIT7fq20sJDjUH93G1%2FsLb%2FpVn09OubK5a8EWOxOuNRisUpQ6V7IR1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702da3e4e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3","md5":"7e094fe9d837aad1eec9932e011bdcbb","sha1":"eec4bbe18b7db79f1d32c59a7012bf5d53c872cf","sha256":"2fd72de620e35d9737b2865d6f15c0fd59574d8a875aac0b54f36bf40ee9e412","sha512":"636ff6a556ddadaa5fb80c3cdb671022baca40012fc56f590a7061f3b72f5c393753aa3afde4f59fde05fa8adf18dfcd5332c3a4da184d89dc2e7778325ceb5c","ssdeep":"","tlshash":"a431ea22d74be1d4ec2347f811203f9d2f866de61be5964406942526c3fb5921f103e4","first_seen":"2025-08-02T23:32:33.946155Z","last_seen":"2026-05-23T15:09:12.99389Z","times_seen":72,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/js/main.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Agup%2FT7fp77X2GW%2BaEj3SFUvoqIJSQSRf6sMzHnQa%2Bt5X1L%2FbuFBbxT3h6ucnVGFiEdmvbrR830NbPLstBD7ozf9H8ruvrVbfXVThcdsiZ81YdWTqHzJQgd1UkBMOTMmgOtEEl3CdpDyKn4%3D\"}]}\r\netag: W/\"6a09fdb5-27f\"\r\ncontent-encoding: br\r\ncf-ray: 9ff702da5ea44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"45e050bc382350dd9dd6dff724d53647","sha1":"1d01df884ef6d3d7346dd18416433b82683fad5a","sha256":"0769d1022b0c16160cac2d5d6456a5669cf97ba6270c91b6a2a4536286281974","sha512":"cc4f6cdc286c2806c6d4b771422196af1dc9477f449c8b3fb277b3fe91aee811d75a3781cac0bbe9254e98406aa6dafea1482b2ffa1c7265b3111bd754327dec","ssdeep":"","tlshash":"1ff02b8565eb711006ba1dfa10db9475d777d163319a0b047c9c89a1cf25478a396878","first_seen":"2024-08-19T17:48:05.026572Z","last_seen":"2026-05-23T15:09:12.991229Z","times_seen":143,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/js/transformator.js","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/js/transformator.js HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04qaUmHUBcC6EX6sML7HEzFAiLtVUAHgngEfHhLRU94Mean4ZeZrLKzvSgjtAeCjCbB9eA6Q1vgLwZkd%2BXBPtLK8x%2BOkcguXIiZR77WcVAIBe3o04Tpw9nQVyNYgFPxsBFLIGwLKGYHQ4nM%3D\"}]}\r\netag: W/\"6a09fdb6-66\"\r\ncontent-encoding: br\r\ncf-ray: 9ff702da5ea64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9ff36a50763a6cb4daa722a9b6a735fb","sha1":"d9589e6504dcfc875020a4f7033765bad932999a","sha256":"25c234d228d48a7069884f0de5c45877529df68441795fff21bd36e23d64d185","sha512":"f1d22c91552dc82de02fe569436876f3d7590597f985ff5f58ecc0c5fbd69ba52f8b425eb0d607420f9a6f6252dc4432cf36e5ffe81b55ba5083e26175add4b1","ssdeep":"","tlshash":"98b012a7fdcc651842c33530ca37bd8c5a3334823c9d7409d41c18505419a2c1d53a4e","first_seen":"2024-08-19T17:48:05.023543Z","last_seen":"2026-05-23T15:09:12.983954Z","times_seen":143,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://trustwallet-payments.com/\r\nOrigin: https://trustwallet-payments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 01:43:43 GMT\r\nexpires: Sun, 16 May 2027 01:43:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 506652\r\nlast-modified: Mon, 11 Jul 2022 20:54:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37924, version 1.0","md5":"e08be6d5d433944f7ad52902e4d24db5","sha1":"e2600c1d60d12d397b3ee44411a021231d71e974","sha256":"450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e","sha512":"9c8de3a1e131cffd6ac63691e6a514d35d978570b9ce63a6861e1ccdb34d3621bfedcd2337ba3854df0f636e5b3d8c490f126e81641cffd20eaa23a976e39f06","ssdeep":"768:tbpjfMGDIjzNlfatl8U5N8ZXJHTXSA3ZOeWBHcmcgGYop2Q71e+go:tbl9DIHjaL13sGQLmcgGxDp","tlshash":"ff03f1d0e429659aed75cef805cab066285f3c433ad49d626f0dec85227e2ae01098c9","first_seen":"2023-04-06T21:06:35Z","last_seen":"2026-05-30T03:42:13.137057Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":62,"dns":7,"connect":7,"send":0,"wait":8,"receive":9,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/img/dicki.mp4","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/img/dicki.mp4 HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://trustwallet-payments.com/\r\nRange: bytes=12156928-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uv=mpg2ah2o-lpt2ipcq\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 21 May 2026 22:27:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 48359\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:00 GMT\r\netag: \"6a09fdac-ba3ce7\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nage: 0\r\ncontent-range: bytes 12156928-12205286/12205287\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFEI5VyXJ4keNtFpOZfFUpyhP%2Fg%2FIZCEmVScJb6TTNXWTAsNwvJ4AWR49ym2ZEh7cNY%2BH%2BIqQDOQKG5Br9FVbYlSt6OB30BujGc6tMQbGtR%2F6xL2ZN5fjxPb6ryFnoBzZX5VYdlJUdXmf4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702deaf594c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48359,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"0c473546241046088544201023584d0d","sha1":"d06b46671a90d95f1ab2597ea3c7e9b9cda56fbc","sha256":"0b8a63e67294510910555a219cb63926f674745257c498db3585cd3c1a3543b3","sha512":"c906b04582a10ccd255562ddd6fbda36693ef5afae050b56acd0576d825ecff690a495e2bf4dd1c593872a5f442b2f46dfab8839023676175eed8c9ccfd2eba5","ssdeep":"768:S1dLIsHfoPhACZ6JV1tGwiIFMabWUYcdJNB38YL/FeVeX6B+wYVt7EN6U6mdzNb:S1tIsMAA6JV1t9tb1HB38YLkVw6AwYbe","tlshash":"8b2348f6431f0605e2a23930e4c1a7306816f8b9a9d1879bd5d1e63f19750fdcb0aae3","first_seen":"2024-12-05T19:56:07.820422Z","last_seen":"2026-05-23T15:09:12.996823Z","times_seen":140,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/imgur.com/CGC5zsv.jpg","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/imgur.com/CGC5zsv.jpg HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uv=mpg2ah2o-lpt2ipcq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18179\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:44 GMT\r\netag: \"6a09fdd8-4703\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqS%2F%2FwEgfCstIReBYzhH5C7O0uHQfL%2BdrB8aaqcQyWRJ7ouOL648vmhO5MOskeZUygmZwgLGt7fLjmVtpGfoA2aN72v7AP%2FONFZlOzQPbgOKBf%2B3qF2R%2B5%2FQT%2Fdf5aLrCsTBuWwZi7du45Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702dfb9a44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18179,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"fd88fb39950901fff944d35e7e4777ff","sha1":"61c9699b8f4d6a4b093b125c3cae6bbced332b98","sha256":"0bce929a051d6cb7dd04015f0671534fe21785aba34fa67b2ebfa3a08a777d02","sha512":"6db6fc01b441d482f71e6bd02b5660e22b2a8445b31c6c68d6b9f17013ac1ab62d610b3b3aa561721a3bbbd660d8388439a6195bc6fad75629ff81941702d41e","ssdeep":"384:cBPhq4lK2AjTHSIbU/VaaD19c0EpzDq2sUF4BNzld+S:cBPha2cgVv9+1DgW4rf+S","tlshash":"14823bf1e7dc2371956f9224d383091a5ef3d294a2f298c51742825de6eebec0467e88","first_seen":"2024-08-19T17:48:05.020539Z","last_seen":"2026-05-23T15:09:12.987181Z","times_seen":141,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/image1.challengermode.com/28bd36fe-3706-4a64-a9a7-08d9bbf43f76_64_64.png","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/image1.challengermode.com/28bd36fe-3706-4a64-a9a7-08d9bbf43f76_64_64.png HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1846\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:41:19 GMT\r\netag: \"6a09fdbf-736\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwe1GW7eBTe%2FE%2BzrTWimeaxptC%2BCCz%2BcPY2%2FMY402pPVkqE9WiCi3KGGsdydK9jjrkWqPFeV%2FkGopsMS76f26ikV2P9qx9EXAnpLNNZ03iiugMW%2FYhyu2Z4PG2M9tttaAG0rDvVy%2B22m4ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702da3e4b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fa912a43bc7c7fc6e2ce2130aea31661","sha1":"12b7d3752235b9eaecf1ada91d27b16083cac30c","sha256":"790e71884420d0ce55fe226959a3ccf4d8ad353fca66dfd6b83a09a0a2133411","sha512":"af354fe2a80d6dfbc184926a97d53de7c13663b6cccfda3030e77b8e0cd9696887ee2c6179b3cec78359288e07bce1fa0d6b29a366769a17fa36511847c3732a","ssdeep":"","tlshash":"b231f9bdfbf650ade1aa62b222990344432b1f06010f7f732db4caed221a465e291790","first_seen":"2025-08-02T23:32:33.944032Z","last_seen":"2026-05-23T15:09:12.990095Z","times_seen":72,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dokisap.world/dpvemrfgbolcnuksfimxsnvrvxradxruxblnispgmuztnn","fqdn":"dokisap.world","domain":"dokisap.world","tld":"world"},"ip":{"addr":"2.26.75.244","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:55.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dokisap.world","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:19:49 GMT","end":"Thu, 13 Aug 2026 15:19:48 GMT"},"fingerprint":{"sha1":"F1:DA:22:4E:85:33:20:A6:EB:9F:65:88:37:8F:40:6C:B7:C3:85:0D","sha256":"D8:66:28:7C:D6:97:B0:D1:88:87:FE:F0:51:59:BD:E9:C0:77:D0:BF:92:44:AB:1A:17:3E:41:51:46:5D:4D:CC"}}},"request":{"raw":"POST /dpvemrfgbolcnuksfimxsnvrvxradxruxblnispgmuztnn HTTP/1.1\r\nHost: dokisap.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 162\r\nOrigin: https://trustwallet-payments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":162,"data":"d=trustwallet-payments.com\u0026u=f-mpg2ah2o-lpt2ipcq\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 58\r\nETag: W/\"3a-eUws8WDwbDJR1492vfmXrp7MOgo\"\r\nDate: Thu, 21 May 2026 22:27:55 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7939475ee688e1c7f3f4fff9df4f2d8f","sha1":"794c2cf160f06c3251d78f76bdf997ae9ecc3a0a","sha256":"8c6b094fe4d98024e057eefa3b1c137596ea32e8fd218686efc3a230f6ea5442","sha512":"8046af9243675a0133fab0d16d3cfa88f34861650cb6adb58608168c1abb1fa6820a29a0f7f4c626c0f74788ecdd28e6c18bd720f93fda08520b59e80cc9606c","ssdeep":"","tlshash":"f5a00281456096fcc513080c836e2f48093c0026adc46047f00c4f4c95b101f8005133","first_seen":"2026-05-21T22:28:21.112161Z","last_seen":"2026-05-21T22:28:21.112161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":87,"dns":22,"connect":28,"send":0,"wait":65,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/css/main.css","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:40:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbOw3u3WC48LHZMHoUhiU2I4HAvVIb%2F9QpR0w%2BRzAWRMiiziJDSy%2B9PU8yDGNIdC%2F3JyPSQp%2FY20a6Np7Ew2Je6luQEm4iYbaJx3NChOLuf%2FvoTFPU05EneuZpPUd6G%2Fa3Zib8VY3FdHF8Y%3D\"}]}\r\netag: W/\"6a09fd91-6a17\"\r\ncontent-encoding: br\r\ncf-ray: 9ff702da2e454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27158)","md5":"8bcbc9dbc4a0e086ce91107a4fb0da18","sha1":"da642f61013112581fadf69009314df6bd38100d","sha256":"c9d486989ba34ffec2223e9597c308d2f3eba6fc92ae7a56138a145117ddfc65","sha512":"442a1db8732d4fd0533b61fc469eb4e29d349674c423315a7ca6e437174a0ded85f8bca08555e3fd96dc943485e4d310f2fbe667d343357b8984bed2d7b248b6","ssdeep":"384:Gwf2uIBHHcL9WJrft9cwkEClHiZFeE2ciHo8rt2egRK+lz25j2FZqw2o:5yIuft9cwku","tlshash":"23c2c672590a20086123cd2331cbf7563b5ea071d6566aa3f1293de4cdca5bf07b7b19","first_seen":"2024-12-05T19:56:07.833154Z","last_seen":"2026-05-23T15:09:12.989164Z","times_seen":142,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallet-payments.com/assets/external/www.esports.net/wp-content/uploads/2023/10/Roobet-Cup-2023-2.jpg","fqdn":"trustwallet-payments.com","domain":"trustwallet-payments.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwallet-payments.com/","date":"2026-05-21T22:27:54.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet-payments.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 13:38:18 GMT","end":"Sun, 28 Jun 2026 13:38:17 GMT"},"fingerprint":{"sha1":"13:17:BF:51:B1:11:BA:50:14:78:1F:0A:2A:C2:44:F0:41:72:6E:D6","sha256":"03:46:94:73:4C:9C:DE:98:06:7A:15:E8:90:C5:A8:A1:C1:52:BF:FB:5D:56:6C:2F:15:06:84:97:55:01:70:B1"}}},"request":{"raw":"GET /assets/external/www.esports.net/wp-content/uploads/2023/10/Roobet-Cup-2023-2.jpg HTTP/1.1\r\nHost: trustwallet-payments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwallet-payments.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 May 2026 22:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 267806\r\nserver: cloudflare\r\nlast-modified: Sun, 17 May 2026 17:42:44 GMT\r\netag: \"6a09fe14-4161e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlpKqe879m7j7i%2BpiByXqVA2qRsbEHxN%2Fg4xSwN1IGA4DjqvZLAXEJdimaGcmtnk2KhtaXgSQ6J0tPiF%2BTH8XAH6c0ONIjWYp4RhataSrmWFGv3HlhTE%2BbcXTCo%2F%2BuVc6VZkhZa46rWCKcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff702da3e514c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x450, components 3","md5":"4b0eae6b768ca5c0a830f9908a237223","sha1":"b5bd0f4ef0b36d531ee04c3630146def6088b7da","sha256":"70097deada0c5dee0c5c1508c05996b7389b4638e820f39769abdb7d9142ab33","sha512":"a2256f2111fbf601a17956107d1b3031a5eb8a9ee992ffd6b07bf74c1cd62abd1d04942c184adb98bcaa7fdf4bac0767ae1c1c2471d1568abb7968e01369bb64","ssdeep":"6144:M244vhhTMqaMXTZGz3nFDoJaIf1ptawqzzS3fwnVLbBcyaI:M2/vra6TZGywIf1pszEChaI","tlshash":"2c441215383b0772d2df8bba03019f956252172449d2e8be5603de8bc6f25d07cdbb8a","first_seen":"2025-08-28T10:50:47.270624Z","last_seen":"2026-05-23T15:09:12.990679Z","times_seen":139,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-21","alert":"Phishing Block","trigger":"trustwallet-payments.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"trustwallet-payments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}