{"report_id":"c7af742e-e0ab-469a-bd31-7839c3349a87","version":6,"status":"done","tags":[],"date":"2026-03-24T01:28:51Z","url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"title":"TrustWallet","dom":{"size":4457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (864)","md5":"67068e702fd4c4a33f8af33f6933f68a","sha1":"6dbeed540ce9cfc9cbdc1383f0f00b2855266f81","sha256":"50aa72ebec24d7667499cd757afdfdccbd06242bd6545c1d6151c1c93e5a9cd4","sha512":"7f0bb836dd0d0e5a88b320004563c0c231f5983d38f264598a89309240e5eec1a7afa866747d2cdf7b396b59f038853de2b4b06c7bce40da3ff7deae0262c127","ssdeep":"48:nnk8OGsBzkT6Ey/8n3En32tPcjozlLR0wTwsn8rZUxVYB/1Fy0/rquIgE/Vu8gTh:nk3kev/mukDAqgrJ2u49ge8lIY9ZTL","tlshash":"b791fa9714929a9693024b82ee41332c7547a52bd7097c40beed22799fc8efcc4d3789","dom_hash":"domhashbbf90282ebcb2bb45a211b78c3b0f175","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T01:28:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59128,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.422885+0000\",\"flow_id\":488887147320417,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59128,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":909,\"bytes_toclient\":3168,\"start\":\"2026-03-24T01:28:32.414817+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59172,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.426973+0000\",\"flow_id\":2223843481507575,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59172,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-03-24T01:28:32.415479+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59158,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.432679+0000\",\"flow_id\":1111180663871104,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59158,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2026-03-24T01:28:32.415360+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59148,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.435700+0000\",\"flow_id\":1546926570886647,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59148,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2026-03-24T01:28:32.415223+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.440272+0000\",\"flow_id\":2032429674026377,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59146,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":909,\"bytes_toclient\":5351,\"start\":\"2026-03-24T01:28:32.415113+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-24T01:28:32Z","timestamp":1774315712,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":59134,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2026-03-24T01:28:32.443772+0000\",\"flow_id\":1700729349756173,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":59134,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":909,\"bytes_toclient\":5351,\"start\":\"2026-03-24T01:28:32.414989+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustsvvallet-free.tokens-network-app.eu.org","ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-24T00:00:48.848587Z","last_seen":"2026-03-24T00:00:48.848587Z","alert_count":28,"request_count":14,"received_data":742819,"sent_data":12273,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"errors.infinityfree.net","ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-18","domain_rank":3024566,"first_seen":"2022-05-27T01:14:37Z","last_seen":"2026-03-21T10:59:05.547311Z","alert_count":0,"request_count":5,"received_data":3552,"sent_data":2316,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wallets-connect-appnetw0rk.ct.ws","ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-11-01","domain_rank":0,"first_seen":"2026-03-24T01:28:52.678753Z","last_seen":"2026-03-24T01:28:52.678753Z","alert_count":14,"request_count":7,"received_data":16886,"sent_data":3196,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cutt.ly","ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-13","domain_rank":3479,"first_seen":"2018-01-23T23:29:00Z","last_seen":"2026-03-20T07:58:06.855514Z","alert_count":0,"request_count":7,"received_data":19593,"sent_data":3129,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jejeuk/script.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"58b3b3c15ee4029bb86916e4fb277e7b","sha1":"9108a345f5c44eab8ad5253d9c818bfd090b7f10","sha256":"83f2149986ff480220ad224f6e21394cb710aa2d01116d9ede13b8ddc503f5c5","sha512":"855aabe849a0cae2d92cebf28c77eca74c3049c5bf1eb90f0b32c41f9b39690f790334921a35ae9c621d244841405fa52c4df0e0d64a6ab5f8f114390e2c5a55","ssdeep":"","tlshash":"92b02b8f34b0202350e01450284f070808772004b8d11e5ec444007407381fc0023606","size":122,"data":"","first_seen":"2026-03-24T01:28:54.945531Z","last_seen":"2026-03-24T01:28:54.945531Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fd9c1fa9caa8c9d4f17e96e8726ba78","sha1":"a8f133aee98a24552b8b55f8b9299392ce99fa18","sha256":"114fe4835ae62084e816f3a5d4ce71a0bdcc3ff141728ec22e8ce3f85cf12a2f","sha512":"09ade2aa85432f77bd3e6c79b8c0ae959b8fbfcb23f08db7b08577e394dceb5dd96a5bb9560deefca5dfbf150d84b238ac3ccabced936af9eb20b8bf9406f71b","ssdeep":"","tlshash":"1811fe7ce3306194cbc12047046abd1be02517a2f5d3d9fbc40272b05dc1dd90688d2a","size":978,"data":"","first_seen":"2026-03-24T01:28:54.948897Z","last_seen":"2026-03-24T01:28:54.948897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/aes.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"756722c3542f271367cc3b074113a8ee","sha1":"c5c24b4cfc44d597fb7d82d79a7dcea4a8d07e2b","sha256":"ed1d3bd967abe66cff832561cb911c572a2f85fd6cffc32ef3cec68dbc60c7ce","sha512":"ec3293d425646848dc2cf5d3cebae22b91d99461d3565ed17599af961f6f0062167446f732e91ade94f7e589000cda7e85259a217c5ce571bc11c175435a4290","ssdeep":"","tlshash":"8d1150a5034607bcf6cd0ec8c40a321a21f1c04abe2112c9afb36ae77c3b8840034e26","size":1000,"data":"","first_seen":"2025-03-10T10:15:36.223346Z","last_seen":"2026-06-07T07:12:24.56416Z","times_seen":2179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jquery.min.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86926,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-13T15:33:43.816379Z","times_seen":20360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/p__create-wallet-process__choose-model.chunk.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /p__create-wallet-process__choose-model.chunk.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 227\r\nConnection: keep-alive\r\nLocation: https://errors.infinityfree.net/errors/404/\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":1,"connect":38,"send":0,"wait":39,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"errors.infinityfree.net/errors/404/","fqdn":"errors.infinityfree.net","domain":"infinityfree.net","tld":"net"},"ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infinityfree.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 22:09:48 GMT","end":"Sun, 24 May 2026 23:09:45 GMT"},"fingerprint":{"sha1":"03:20:6D:64:B4:78:19:E1:5C:95:30:67:68:57:4A:D1:4C:14:EE:11","sha256":"45:C6:EA:9E:98:1B:FA:ED:DA:D7:99:FB:00:95:99:BD:BB:25:24:FE:2F:09:AE:6A:5F:8C:0D:69:B6:0A:FB:7E"}}},"request":{"raw":"GET /errors/404/ HTTP/1.1\r\nHost: errors.infinityfree.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-ancestors *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izrp9y38BGX54hijAEBHLJUfwVq6JFM4v3N0vVUO9xffA0IJEdD%2BPJYjjl8XurUyMs6h5pjLXdhIuyHiOX%2FuT0%2BX%2BobLL8nVFAVYUnZ9jL2nGBTx\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e11e65398ef75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"5376681f81bde1dbc6866505e9e42636","sha1":"5e4807f5563ab2960af322bc073c679e5177aee7","sha256":"024e59d351265f1922eb332b2f9bdb9af60a28d6997c41e7946d36defa028996","sha512":"1d41322727d571384072a55dd9d0defaa18bd5f4a56f7eca05feea3a60b147fa5e8d4f9ac5c3fe7348315208f1e3a9a7f626ac7c4fa05d711a3581eff5d3d422","ssdeep":"","tlshash":"85d02eef0c83003b4a88056060c03e2a25a28b20e7b3e126a008003ca248da8a64cd18","first_seen":"2025-11-23T23:57:12.059779Z","last_seen":"2026-06-11T01:19:45.049022Z","times_seen":81,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":61,"dns":12,"connect":4,"send":0,"wait":200,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__import-wallet.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__import-wallet.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 2895\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:29:05 GMT\r\nETag: \"b4f-635d018c6a168\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2895), with no line terminators","md5":"4d0a6122b5390e0e4bb83e645b5f35b3","sha1":"24ea00be9c4fd7ef6abe88a58d7654d89615c487","sha256":"319391e2a768674c7b6d6b52e0c0581b0acfb3abb8b000dc7f2e1455a2c25e09","sha512":"596abbdea6233267a46f9aae95da01cc0914b394f5ce3555e4e5d4d1b9ae36e5ab067509f3baae241970761a0ddd50de847827d4ee8a44cc48cf776028709e82","ssdeep":"","tlshash":"f7511462b12a722ef47bce26b4e0baad300085134d53462dedd1fe29cd970a71711b48","first_seen":"2026-03-24T01:28:54.905443Z","last_seen":"2026-03-24T01:28:54.905443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/mrc8GRgH","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /mrc8GRgH HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__import-wallet.chunk.css\r\nset-cookie: PHPSESSID=udatnvm9qr0npffhcg14mqvt50; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e6531af9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":50,"connect":4,"send":0,"wait":158,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"errors.infinityfree.net/errors/404/","fqdn":"errors.infinityfree.net","domain":"infinityfree.net","tld":"net"},"ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infinityfree.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 22:09:48 GMT","end":"Sun, 24 May 2026 23:09:45 GMT"},"fingerprint":{"sha1":"03:20:6D:64:B4:78:19:E1:5C:95:30:67:68:57:4A:D1:4C:14:EE:11","sha256":"45:C6:EA:9E:98:1B:FA:ED:DA:D7:99:FB:00:95:99:BD:BB:25:24:FE:2F:09:AE:6A:5F:8C:0D:69:B6:0A:FB:7E"}}},"request":{"raw":"GET /errors/404/ HTTP/1.1\r\nHost: errors.infinityfree.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-ancestors *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6nyOqLTLNIbzCoaLGQDyusciatmzcqQzJrRIhUpSdY0yM5A0zpNARhAWSUmxHrbVNLAbCNRDzLHbPUytZV6ap%2FuG6YRhFItuZTow%2FsD8dfb%2FXBN\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e11e653b90275ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":45,"dns":4,"connect":1,"send":0,"wait":173,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__disclaimer.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__disclaimer.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 976\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:28:48 GMT\r\nETag: \"3d0-635d017cb9501\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":976,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (976), with no line terminators","md5":"9aeb99b99db81e3dc2dce25b7604efb3","sha1":"a25391a0a8a862f3f54db30859e34caf9afab818","sha256":"81e3a938688f32de940ba9605c25ed13004f16b14d5ca1372b5eec7caf53b390","sha512":"1882b01183d62b839cca382c283d5483dcb2993d72fd9baabf436f3dca6a87bbeb3f68c06e3221341ec52ac04140c8aa46c380974d0dced77c7fb0c4f685c1eb","ssdeep":"","tlshash":"f91125b17222bb75b47ac825b0c0677d7802c4535763e615dad1653de4e70a31b1179c","first_seen":"2026-03-24T01:28:54.908124Z","last_seen":"2026-03-24T01:28:54.908124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":369,"dns":20,"connect":34,"send":0,"wait":33,"receive":0,"ssl":312},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jejeuk/mHYSRfHJEYU77Hde.png","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:33.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /jejeuk/mHYSRfHJEYU77Hde.png HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 78475\r\nConnection: keep-alive\r\nLast-Modified: Mon, 16 Jun 2025 19:38:34 GMT\r\nETag: \"1328b-637b58a9f1884\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:33 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 507 x 584, 8-bit/color RGBA, non-interlaced","md5":"1b7d3dd4e094eb2190b980e1a8d2c035","sha1":"3ee2aac56ba63d741e466940264e84ee9510c1c1","sha256":"689aa3bc47b676ccec5c6d306957945b41c3d49aa7ba98038275b6832d1bee0e","sha512":"cf4cae8d09f2979be245d1c71ebcaf3f30a6214432f04d9c65ccf8c25ec408e238330c640f7e989196898206075fe3dcd13b92713222616395ab5ec47dbacb71","ssdeep":"1536:pdayK/RCrgY54sjlSzfBuvVAXgBuOgRW7dZeZpl1ZyQjB:Dal/RCZDczfBuv8ugo4nl6m","tlshash":"f273e0221d72b014d8e8394d8da8dbf9cc9ca3c9b9da8b22872cb4f61f1713d254971c","first_seen":"2026-03-24T01:28:54.911491Z","last_seen":"2026-03-24T01:28:54.911491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/2rc8GS1n","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /2rc8GS1n HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__wallet-name.chunk.css\r\nset-cookie: PHPSESSID=fem7io3dv9n03cifsv05vpbts1; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e6530ae7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":51,"connect":4,"send":0,"wait":153,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jejeuk/kgokeur84uf74rewewe.png","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /jejeuk/kgokeur84uf74rewewe.png HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: image/png\r\nContent-Length: 16933\r\nConnection: keep-alive\r\nLast-Modified: Mon, 16 Jun 2025 19:38:33 GMT\r\nETag: \"4225-637b58a951d91\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 47, 8-bit/color RGBA, non-interlaced","md5":"0e2a8b3692e4d9c758119d9a1d3e3da7","sha1":"37a090b6a9d45b6a8bec28f3b3036e1364189918","sha256":"a4dda1dae80e75f78bd8fd3d08bfd84b9da2ddeb60c08f299d053133afbe8681","sha512":"7003e35a09815aec8d003d9d4322f76a11ae32f4367b25ba974d2d9dc37f628125491e96145cfe00c0f21076f6235dc7f68f75ad2677cdefcb679c398598ce39","ssdeep":"384:q1IUGJln+KV3Gy3pClMdp0J3nCYPn2zpQ9Cd/vW8r:2iF12y5ClMLgCG2FSCd/vH","tlshash":"8c72d1386fbb93193bb652004bea35026394b4f553eb36d6b105a3c8859df743e0f919","first_seen":"2026-03-24T01:28:54.915011Z","last_seen":"2026-03-24T01:28:54.915011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":710,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__create-pwd.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__create-pwd.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 1506\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:28:43 GMT\r\nETag: \"5e2-635d0177badc0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1506), with no line terminators","md5":"c54f5515a83cd71a1a233cd8ac3fc038","sha1":"7c1604404fb677000f4613d322fabee42bb3eca7","sha256":"8653dc542a44e6626bd82b99d520c1cb5796af01ce10ba770bc6772d1161d8af","sha512":"cd09fae0a6f7c720a900cb8c33fbd3a5c101aef63e3891d40d74cbdaf8f2d278cb5c74eb6a00ffdb51c07e597edb1e6cafcb78af7cceee6af46fc8fbd03fc4d5","ssdeep":"","tlshash":"de31c92175bbe13970b6c47620907bedb84d8102c567af3ad486fa6ed5c20d31e31798","first_seen":"2026-03-24T01:28:54.917586Z","last_seen":"2026-03-24T01:28:54.917586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":370,"dns":18,"connect":34,"send":0,"wait":43,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__wallet-name.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__wallet-name.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 3759\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:29:11 GMT\r\nETag: \"eaf-635d0191cbac3\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3759), with no line terminators","md5":"0265c1ffd52734e5af22821e9d3add61","sha1":"82726eecf050957bb410402e000d4b7619a362b0","sha256":"7c7faf64122ffc3fdacb165eba0db5898c9b06d909782911c1f615671d3447cc","sha512":"1d6073351d3274572598d093328b677b89e5df8a077da00b47cff4029379b2172611b8cdebb092d5bb5aeead3b4b353df8737e45500402673ebbfdc91f9ae726","ssdeep":"","tlshash":"c171e000927af21ea425db2674e0adbd79108b368d4f413bffd0791486d66774736b4c","first_seen":"2026-03-24T01:28:54.92046Z","last_seen":"2026-03-24T01:28:54.92046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":379,"dns":18,"connect":34,"send":0,"wait":34,"receive":0,"ssl":317},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/antd.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /antd.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 549363\r\nConnection: keep-alive\r\nLast-Modified: Mon, 16 Jun 2025 19:38:43 GMT\r\nETag: \"861f3-637b58b2c6046\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":549363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2aa441ffaf69b5797b6f2b0ed541422b","sha1":"382c32d980a7a65b6f5cf6b8f1715cdf186cbd8c","sha256":"7ccefc64d379c2bfedc7dee85acf59da88c7cf2302a3ae2d267f1841926e18c4","sha512":"de2bd8066d2df050ba5bc4d3a714608cd22bfbf3e310c31374796112b70d4bcdaf73fbc0fd5a464d0ca0ad15f5fe0468d39e643222f1a68bab4a7e391a510291","ssdeep":"6144:da8cncRlRxR05vQtVOI3uEQUQ9r4jJzsDNLV:6mrG","tlshash":"ddc4a7586b41206ed1ebc33b64e0f9695d318903d67f8a7ff3e13a584f4968e41a3e06","first_seen":"2026-03-24T01:28:54.924707Z","last_seen":"2026-03-24T01:28:54.924707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/Jrc8FZKE","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /Jrc8FZKE HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__choose-pattern.chunk.css\r\nset-cookie: PHPSESSID=55pnep4vqe01i2umldjk5mfngl; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e6531afe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":109,"dns":53,"connect":1,"send":0,"wait":144,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"errors.infinityfree.net/errors/404/","fqdn":"errors.infinityfree.net","domain":"infinityfree.net","tld":"net"},"ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infinityfree.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 22:09:48 GMT","end":"Sun, 24 May 2026 23:09:45 GMT"},"fingerprint":{"sha1":"03:20:6D:64:B4:78:19:E1:5C:95:30:67:68:57:4A:D1:4C:14:EE:11","sha256":"45:C6:EA:9E:98:1B:FA:ED:DA:D7:99:FB:00:95:99:BD:BB:25:24:FE:2F:09:AE:6A:5F:8C:0D:69:B6:0A:FB:7E"}}},"request":{"raw":"GET /errors/404/ HTTP/1.1\r\nHost: errors.infinityfree.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-ancestors *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjZUcJeDgdH3C8vFahDLJ071bvpbHHfh5v350MWmCnCQZsTzCQu1DySwDu8uWJtkOrkK8pJg6UtaY1ofc9%2BlKQFK6vVfuRwp5vz090QnpJjle%2BHF\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e11e653b8fe75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":38,"dns":4,"connect":1,"send":0,"wait":163,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"errors.infinityfree.net/errors/404/","fqdn":"errors.infinityfree.net","domain":"infinityfree.net","tld":"net"},"ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infinityfree.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 22:09:48 GMT","end":"Sun, 24 May 2026 23:09:45 GMT"},"fingerprint":{"sha1":"03:20:6D:64:B4:78:19:E1:5C:95:30:67:68:57:4A:D1:4C:14:EE:11","sha256":"45:C6:EA:9E:98:1B:FA:ED:DA:D7:99:FB:00:95:99:BD:BB:25:24:FE:2F:09:AE:6A:5F:8C:0D:69:B6:0A:FB:7E"}}},"request":{"raw":"GET /errors/404/ HTTP/1.1\r\nHost: errors.infinityfree.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-ancestors *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etvd11aOI0Joe18sNAYM2QBvL1%2FLkseyCZFEMi44SQ%2BhzeX9FpRWsglErd7yZ1ImeEG1hZZA%2FNrF%2FF6CYLM5nOZaTtnJ9r%2BdOopV2IejEqoB6Ad6\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e11e655aa5b75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:28:32.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00 HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 4494\r\nConnection: keep-alive\r\nLast-Modified: Sun, 22 Feb 2026 19:11:31 GMT\r\nETag: \"118e-64b6e6c0a7b7f\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:31 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4494,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (794)","md5":"c270a839d0f876e86a46ef4315a6d8f6","sha1":"e13e62cf343b3f31457d4a2d289bbd4a3702cf67","sha256":"5d6b099262db11d78d318cebbe85e58fe24715c3b32bb9fb53b56621103c7457","sha512":"43f2d6835b89ddb7f9cf29fb8080fffeab85894e8a3b30546b8a1a4779ae3ba028c0eac3c895e9bce0ce1058fdc97a4b2f27bb99f4ccbfde898caaad01d214a6","ssdeep":"48:nnk8OGsBzkT6Ey/8n3En32tPcjozlLR0wTwsn8rZUFVY37/1Fy0/rquIgE/Vu8gT:nk3kev/mukDAqUrJ2u49ge8qUIY9ZTj","tlshash":"ee910b9724929a9693024bc2ed4132197147a43bd7097c40feec21759fd8efcc4d3789","first_seen":"2026-03-24T01:28:54.931697Z","last_seen":"2026-03-24T01:28:54.931697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/Brc8Gcho","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /Brc8Gcho HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__get-start.chunk.css\r\nset-cookie: PHPSESSID=v9dpd0el7bsk0b4u8717ggglpr; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e652faa1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":49,"connect":3,"send":0,"wait":146,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/p__qrcode.chunk.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /p__qrcode.chunk.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 227\r\nConnection: keep-alive\r\nLocation: https://errors.infinityfree.net/errors/404/\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":38,"send":0,"wait":35,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__get-start-next.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__get-start-next.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 2081\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:28:59 GMT\r\nETag: \"821-635d01873917a\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2e032a7c1ce9fb9153514a5a128f0221","sha1":"ba183e5f433d841f2b8a03942ebe1a63e537f037","sha256":"f33c52d92ba44b3f431b6f0ee1280fd3d81cb52de355fe4544adcf599a8b52ec","sha512":"d6c7bddad142550285a1e5373e2d2d99e22163e4a7dc8d74011e9dd91d8f7045e4b30f63ffd8f9ddad87376f92778b4089631aee2dab2dc1931546ac670618ea","ssdeep":"","tlshash":"24410f1371736c05a21b0e512e457bc9f20e8b52a216703d0ec7b804e38d88697fa7ce","first_seen":"2026-03-24T01:28:54.936957Z","last_seen":"2026-03-24T01:28:54.936957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":395,"dns":45,"connect":31,"send":0,"wait":35,"receive":0,"ssl":321},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__choose-pattern.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__choose-pattern.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 1745\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:28:38 GMT\r\nETag: \"6d1-635d0172551fc\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1745), with no line terminators","md5":"9f67c6ec67c209ed843c954c6c6ad114","sha1":"81f3793ab05a551eabed677351a691aa5f07d700","sha256":"7518cbd0ac4f1fb08842f035ade051ed350c036163086ae66ff00e525b15c833","sha512":"fdd420fb5c3c6b97ff9f8fddae03edc3fa45edde8406daa09344ac530d4ebcba279c2cb915fbca9ab24546188085b09a5f6dd0ca64a0590bbd7fa6804611f784","ssdeep":"","tlshash":"5d31a21165a2ac2df85f8033715017ad71aac2236263beb7ef679534d9970b30735788","first_seen":"2026-03-24T01:28:54.940024Z","last_seen":"2026-03-24T01:28:54.940024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":385,"dns":17,"connect":34,"send":0,"wait":32,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:28:30.543Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00 HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":67,"dns":0,"connect":31,"send":0,"wait":0,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/umi.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /umi.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 866\r\nConnection: keep-alive\r\nLast-Modified: Mon, 16 Jun 2025 19:38:54 GMT\r\nETag: \"362-637b58bd2783f\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":866,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (866), with no line terminators","md5":"e9cafac82d8e62e1f0d393a7fbda0bd8","sha1":"c91cb71d052480002b53318c74b29c221e58e7ed","sha256":"835c21e346b3a68977550aaf328ed55fdfdf66987ef472bf8f80978672b3192c","sha512":"268f4cae43c705d313c712e8972b955dbf0c9ce7a126410f184653072202bd36782679e656bccc40827df5d5d8f07dca6294849a72beda0cf47777ffcc1cede9","ssdeep":"","tlshash":"1011673656e932bae9ffec095dd2c248806c9443c08219dca9363b3887d799b0bb524d","first_seen":"2024-08-19T14:48:53.672289Z","last_seen":"2026-03-24T01:28:54.941384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":88,"dns":1,"connect":35,"send":0,"wait":35,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jquery.min.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 86926\r\nConnection: keep-alive\r\nLast-Modified: Mon, 16 Jun 2025 19:38:49 GMT\r\nETag: \"1538e-637b58b851989\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-13T15:33:43.816379Z","times_seen":20360,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":88,"dns":1,"connect":37,"send":0,"wait":36,"receive":71,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/rrc8F8j3","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /rrc8F8j3 HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__create-pwd.chunk.css\r\nset-cookie: PHPSESSID=kv6iu7to5mcb258upt57nm64bb; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e6530aec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":100,"dns":52,"connect":4,"send":0,"wait":146,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/Orc8GdZY","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /Orc8GdZY HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__get-start-next.chunk.css\r\nset-cookie: PHPSESSID=bm37381qm6fi24ldipln8imvi4; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e652faa9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2081,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T01:28:31.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /XtRm46dnFwjrfmRwu.html?i=0%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00 HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 1217\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1217), with no line terminators","md5":"ab9af43ec1885570363650adbee887af","sha1":"36f4d247830e60f63019256df2b42714c38d5e35","sha256":"fabfa57db683589757dad1bedf79d910ce35d24d8d42d8da5fb472733b710885","sha512":"eca148db64cb73cab2019ff9e536f871f989d7ae33bb6013e6c692eb78ab3e425bc042a543094004ea9bc98b1ad2fd07c80b0c514856e587b437e1cb6be56135","ssdeep":"","tlshash":"5d21dca99f60e084da8014c30476fd2ae01597a5e5d2d9eb84c172a45990bdd0e45d2a","first_seen":"2026-03-24T01:28:54.943943Z","last_seen":"2026-03-24T01:28:54.943943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":77,"dns":1,"connect":34,"send":0,"wait":33,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/0rc8Gtwb","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"GET /0rc8Gtwb HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__disclaimer.chunk.css\r\nset-cookie: PHPSESSID=d00sg8uc2n90dl32q9g42u93iv; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nx-robots-tag: noindex\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9e11e6530aea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":102,"dns":52,"connect":4,"send":0,"wait":144,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/p__create-wallet-process__choose-model.chunk.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /p__create-wallet-process__choose-model.chunk.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 227\r\nConnection: keep-alive\r\nLocation: https://errors.infinityfree.net/errors/404/\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/plugins@view/sinop.min.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /plugins@view/sinop.min.js HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 227\r\nConnection: keep-alive\r\nLocation: https://errors.infinityfree.net/errors/404/\r\nCache-Control: max-age=0\r\nExpires: Tue, 24 Mar 2026 01:28:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":86,"dns":2,"connect":37,"send":0,"wait":39,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/jejeuk/script.js","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /jejeuk/script.js HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 122\r\nConnection: keep-alive\r\nLast-Modified: Sat, 21 Feb 2026 20:35:17 GMT\r\nETag: \"7a-64b5b79c25ae0\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":122,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"58b3b3c15ee4029bb86916e4fb277e7b","sha1":"9108a345f5c44eab8ad5253d9c818bfd090b7f10","sha256":"83f2149986ff480220ad224f6e21394cb710aa2d01116d9ede13b8ddc503f5c5","sha512":"855aabe849a0cae2d92cebf28c77eca74c3049c5bf1eb90f0b32c41f9b39690f790334921a35ae9c621d244841405fa52c4df0e0d64a6ab5f8f114390e2c5a55","ssdeep":"","tlshash":"92b02b8f34b0202350e01450284f070808772004b8d11e5ec444007407381fc0023606","first_seen":"2026-03-24T01:28:54.945531Z","last_seen":"2026-03-24T01:28:54.945531Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallets-connect-appnetw0rk.ct.ws/p-create/p__create-wallet-process__get-start.chunk.css","fqdn":"wallets-connect-appnetw0rk.ct.ws","domain":"ct.ws","tld":"ws"},"ip":{"addr":"185.27.134.137","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ct.ws","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:2C:C5:32:A6:7F:C0:46:04:6F:B3:F9:B0:63:60:B3:6C:F5:B5:E3","sha256":"31:47:05:0B:0C:EA:61:8F:5C:5C:AA:C8:96:20:DE:1B:9F:08:20:97:38:A1:D1:7E:AC:07:25:92:FA:64:8A:0A"}}},"request":{"raw":"GET /p-create/p__create-wallet-process__get-start.chunk.css HTTP/1.1\r\nHost: wallets-connect-appnetw0rk.ct.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/css\r\nContent-Length: 1440\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 May 2025 16:28:54 GMT\r\nETag: \"5a0-635d0181b9f6b\"\r\nCache-Control: max-age=2592000, public, proxy-revalidate, must-revalidate\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"db22bf416f8bbd60e6f6bbb53128de2e","sha1":"c27231ee9ab81b09dac03953bcaaf52812f897a6","sha256":"e202a299d8f591255b56e8a4d16570456534a22e7f6f203d1085530342d09447","sha512":"5592546e90a8c7084d2d74c347842c0a5ad737d1e7bc57d20388d361b9652f3bee33437d36071523b3415860ee6dc7b8817d7a9ca77396dbf8ba9ef007a1cfa4","ssdeep":"","tlshash":"822112236756b51231e3c8687653bb1da31cc952a315f27959a53478c1cf82a03fb38a","first_seen":"2026-03-24T01:28:54.94723Z","last_seen":"2026-03-24T01:28:54.94723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":399,"dns":42,"connect":31,"send":0,"wait":36,"receive":0,"ssl":318},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"wallets-connect-appnetw0rk.ct.ws","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustsvvallet-free.tokens-network-app.eu.org/p__qrcode.chunk.css","fqdn":"trustsvvallet-free.tokens-network-app.eu.org","domain":"tokens-network-app.eu.org","tld":"eu.org"},"ip":{"addr":"185.27.134.230","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustsvvallet-free.tokens-network-app.eu.org","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 17:54:15 GMT","end":"Fri, 22 May 2026 17:54:14 GMT"},"fingerprint":{"sha1":"CD:A6:22:71:DF:28:13:30:50:DF:AE:41:0E:AD:5B:B9:1D:C3:9E:38","sha256":"EC:F0:08:41:89:D8:2E:C6:7A:DB:D3:3E:B7:41:CE:15:2D:91:F2:27:2D:3C:53:C4:6C:0B:99:2B:38:5A:33:72"}}},"request":{"raw":"GET /p__qrcode.chunk.css HTTP/1.1\r\nHost: trustsvvallet-free.tokens-network-app.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00\r\nCookie: __test=22a90c6ff37e75802202bbe593c0bd76\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: openresty\r\nDate: Tue, 24 Mar 2026 01:28:32 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 227\r\nConnection: keep-alive\r\nLocation: https://errors.infinityfree.net/errors/404/\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 23 Apr 2026 01:28:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"trustsvvallet-free.tokens-network-app.eu.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"errors.infinityfree.net/errors/404/","fqdn":"errors.infinityfree.net","domain":"infinityfree.net","tld":"net"},"ip":{"addr":"172.67.71.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustsvvallet-free.tokens-network-app.eu.org/XtRm46dnFwjrfmRwu.html?i=1%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00","date":"2026-03-24T01:28:32.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"infinityfree.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 22:09:48 GMT","end":"Sun, 24 May 2026 23:09:45 GMT"},"fingerprint":{"sha1":"03:20:6D:64:B4:78:19:E1:5C:95:30:67:68:57:4A:D1:4C:14:EE:11","sha256":"45:C6:EA:9E:98:1B:FA:ED:DA:D7:99:FB:00:95:99:BD:BB:25:24:FE:2F:09:AE:6A:5F:8C:0D:69:B6:0A:FB:7E"}}},"request":{"raw":"GET /errors/404/ HTTP/1.1\r\nHost: errors.infinityfree.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustsvvallet-free.tokens-network-app.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Mar 2026 01:28:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-ancestors *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXJl7UHJ39qzgEskpHXCwX9cVGI3LxMwv0QWnUlWXdD4ReM%2BcQ85D3MPYVXwnxCVyeIgkA1WX63apKF91li%2BxrwZefcdQ1lObTENjuiwGIESWOiP\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e11e655aa5e75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}