{"report_id":"c9027ff4-144c-4516-8638-37c64c334633","version":6,"status":"done","tags":[],"date":"2026-03-14T21:45:14Z","url":{"schema":"https","addr":"www.trustwallet-zh.org/","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.trustwallet-zh.org/","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"title":"適用於 Web3、NFT 和 DeFi 的最佳加密貨幣錢包 | Trust","dom":{"size":270803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64762), with no line terminators","md5":"0902c97e78f42083701e7da0f76c418e","sha1":"f102acf1825c3c4bf3f0dd02c262610a9d0ed9e7","sha256":"28b75a6d1b11cf815d9d35ae1aa21238d305fbc4adc1cac61bff31303f054abb","sha512":"ae680e4c2851906a4983648c9b665939e477726d031db8571895e701276dc985c9028a82c6b61ac511f6515e9debdb65add43f33766c4187ad5804837cac8d6f","ssdeep":"1536:JzDVpYtarTjqUYI17VDVuAtarSjqiYL1doemy7EtwgP5XK/Bk0ExQNRKCpwtyash:HYkRYBKxMxh","tlshash":"a944e562eb80636b9407d7ecb78ea271b13fac5dffd3ca47a2989515660acc01512fc4","dom_hash":"domhash041295601dad363dc06ef1ed335725a2","first_seen":"2026-03-14T21:45:19.229181Z","last_seen":"2026-03-14T21:45:19.229181Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.trustwallet-zh.org/","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T21:45:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.trustwallet-zh.org","ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-03-14T21:45:15.300125Z","last_seen":"2026-03-14T21:45:15.300125Z","alert_count":10,"request_count":10,"received_data":537912,"sent_data":5410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"strapi-cdn.trustwallet.com","ip":{"addr":"172.66.138.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-10-14","domain_rank":6171525,"first_seen":"2025-06-09T11:43:39.438592Z","last_seen":"2026-02-05T12:16:08.928114Z","alert_count":0,"request_count":1,"received_data":380179,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-08T22:22:58.987044Z","alert_count":0,"request_count":1,"received_data":350146,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.trustwallet-zh.org/static/js/mega-menu.js","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bc3187d1ed8d43caf868243012cf482","sha1":"82a98a0dfafe3ea9dc8d32b72ad17ec8941d30b1","sha256":"f4d84c458abde5f62fbc37139be90bc37cc5100c3957b84b529e58f9b00262f8","sha512":"8478e544daa4af0fd4db176b06ae081115d3e10af5589a7818ffb5ef7e2f2416b4fa7a6f3e8d34890912c6a40c5e0e0ab013109664b419134aa6e5a40e5ee4bc","ssdeep":"","tlshash":"8d71240aaed22537983731b58faf758973e1550b8245c8007e5cd2ca3fc49229bb6fd9","size":3659,"data":"","first_seen":"2026-03-14T21:45:19.249557Z","last_seen":"2026-03-14T21:56:30.817638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/static/js/local.js","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d2c66377944ffbfc2caed997b4b4a3a","sha1":"7d24885f60c852e30c1d80e90cae490de2a31002","sha256":"c1bd20cc28479f817c0ad28604d9646705d5364a1551e399b56c27e02849fc39","sha512":"fc079f221233fe9a61abea4f7e4bfa6fadf359ac6aa714d593a0acff0e870070502a2b624413f7ed5c8bc7a414c3d7cf23cde682eaca8ff6aa7d7511b3d537b7","ssdeep":"192:Muvn1NqoJZfpc/ErRqxjRT1LEH3tLqLgiBxtj9SHp5tSlTmOjcgjyatJ9ySEn6/J:MuN8ovpwbBRT1AHeB/jUHpL5OjcgNJ97","tlshash":"36224169b0b32273457b21fe5b9fb9d43224600ba102dd093e4cc2856fd58346ab9bed","size":10691,"data":"","first_seen":"2026-03-14T21:45:19.252561Z","last_seen":"2026-03-14T21:56:30.812466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/static/css/2f7913397c035eed.css","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/static/css/2f7913397c035eed.css HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:59:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2b8ac-16983\"\r\nexpires: Sun, 15 Mar 2026 09:44:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92547,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64600)","md5":"e959a5995b34449f0df9632dfd60b721","sha1":"d0c44fbf9b3bed6b550a5532fc3ed6e0c0874c51","sha256":"cf69edd89a8b6ab0f0b58e2b8ae1d4c9ba34d8a18f3f3e61df787727b65a13f0","sha512":"51fb7f3d12c1ebb09018b0e97968354842ef08ac9eadb3fbec892ede89a9b1677306a381dbde03cf1dc271dd530475f1a15420dce1aa935c1d9ddc42dfafdf0a","ssdeep":"1536:Ow9yVzMjmXEWhaaszf0qIqJDy0FYk9Wd4ohRITVHL25YqhtGCs4B73NFb/4xk9UE:Ow9yVzMjmXEWhaaszf0qIqJDy0FYk9WH","tlshash":"2793955f7b4531be6c27c0f2d0e5befc912f69c0ef2656f6aa4272200f953d60aa2514","first_seen":"2026-03-14T21:45:19.231569Z","last_seen":"2026-03-14T21:56:30.822559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/static/css/749d3038ce3a57cf.css","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/static/css/749d3038ce3a57cf.css HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 12:35:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2b305-2d14\"\r\nexpires: Sun, 15 Mar 2026 09:44:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11540,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11540), with no line terminators","md5":"08c1cfb352ae99b65e4d4242b600be9e","sha1":"56281470c0ad013bbab6ae0a19e0cb0434332b3f","sha256":"101810a61dc5c7ad61e7b5fddf1f74671ba23e9d7cf60c12fdcedae88e9ee0ec","sha512":"ae7da136c09805be814a83062698abba7eeaf66871eb38c2eed2e02d2a4630a47654b7711739db9a3a4c483cf8e3d548f7676a814b972875be1cc7da6f268055","ssdeep":"192:nmUJbiKne1nJIH+KSme+jeHCkz2GTR3v1zsfufG:mUbexJO+KW+SiM2894WfG","tlshash":"6f32fda86310281352134f3247b59bb4dd74489207d3ce7ea1c0bd98d6bacbd276f679","first_seen":"2024-08-29T17:23:50.650908Z","last_seen":"2026-08-09T14:00:53.554158Z","times_seen":165,"resource_available":false,"data":null}},"time_used":7151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/static/css/mega-menu.css","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /static/css/mega-menu.css HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 287\r\nlast-modified: Fri, 13 Mar 2026 03:59:19 GMT\r\netag: \"69b38b97-11f\"\r\nexpires: Sun, 15 Mar 2026 09:44:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a00e0cccb2a9d1ff3bbb257c743300dd","sha1":"f7b17790301a644062bd3571eebf3dcc89661031","sha256":"0f3a3697c62e78dc92ff897dac2891d5f2da20c8f5837c830184df26efa92db9","sha512":"9c1e92947b39304037a47eee5cd7718979d42dc2ddfcc7984c370a38ab3360e386351333b909abbc492f96fef5866fa9e850de87fbc5bdefab5ebc651fc567e0","ssdeep":"","tlshash":"77d02be7b9e423746a1642b152f336be7eedb006c7089ee266113364ef447c1b945886","first_seen":"2026-03-14T21:45:19.233253Z","last_seen":"2026-03-14T21:56:30.806205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7148,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/static/chunks/webpack-418e6849b4ef1e7b.js","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-418e6849b4ef1e7b.js HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 12:35:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2b303-ed8\"\r\nexpires: Sun, 15 Mar 2026 09:44:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3800), with no line terminators","md5":"d9ac14cd6e7f486c4fd6845fa5702990","sha1":"9989f98fada8a9fefab1e7d08b6ab5e36a1ba3aa","sha256":"475c70204f657c625eec0533e18ed159e99d98abd5e9f71d9c6c8eb3b26f9f22","sha512":"ad668be4b15abba9248aadc8839a6e58299151b96343253e7a90c27a36fe5da41c25c7f9d1ddf0137b9b0a02a0936d73063ba997dc3ccdc7200289da78121248","ssdeep":"","tlshash":"8971a7dd71a1f8b9179360a1043f9046f13f68b2281ee4a0db15d8f5fc7454d8123fa8","first_seen":"2026-03-14T21:45:19.234216Z","last_seen":"2026-03-23T16:07:39.272002Z","times_seen":12,"resource_available":true,"data":null}},"time_used":7150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/media/11bf447c34a2180c-s.p.ttf","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:45:01.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/media/11bf447c34a2180c-s.p.ttf HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/_next/static/css/2f7913397c035eed.css\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:45:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"69b2b0e8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-12T02:02:45.3643Z","times_seen":318745,"resource_available":true,"data":null}},"time_used":10190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7896,"receive":2294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/media/e21d6bf08459d7e0-s.p.ttf","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:45:01.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/media/e21d6bf08459d7e0-s.p.ttf HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/_next/static/css/2f7913397c035eed.css\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:45:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"69b2b0e8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-12T02:02:45.3643Z","times_seen":318745,"resource_available":true,"data":null}},"time_used":10191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7897,"receive":2294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strapi-cdn.trustwallet.com/Cash_Deposit_Desktop_be7f5b42b2.svg","fqdn":"strapi-cdn.trustwallet.com","domain":"trustwallet.com","tld":"com"},"ip":{"addr":"172.66.138.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:45:01.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 01:57:44 GMT","end":"Fri, 17 Apr 2026 02:57:40 GMT"},"fingerprint":{"sha1":"4D:55:8E:D7:CD:1A:D4:A5:5D:E9:F1:73:CB:27:D1:02:27:E8:88:24","sha256":"84:98:D7:D5:35:B9:85:78:DF:2B:C6:37:5D:1F:E8:3D:CF:68:EB:A1:3B:0E:7F:37:25:5A:ED:9A:D1:C9:F7:4A"}}},"request":{"raw":"GET /Cash_Deposit_Desktop_be7f5b42b2.svg HTTP/1.1\r\nHost: strapi-cdn.trustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 21:45:01 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9dc676865efc95bd-ARN\r\nlast-modified: Wed, 18 Feb 2026 10:12:45 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: \"93c68123114290b41a62d39c5a818fa9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ef955f95d080740af1e658b6929731ce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: JdboOkhcMrDR-xPJc6GbuAqQ6vshffohWcG8vdTTTWSQ9uC4rdxbXg==\r\nage: 3404\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":379490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93c68123114290b41a62d39c5a818fa9","sha1":"536358efe3da157554d64b7a27ed57c9f49b3a0c","sha256":"15d74f27fbec575e6cd8cbf5efaf5008b32ea9054e05616b917bef98e288aff1","sha512":"975aac72edbe4b1a351d7e5f62bbbd040e8e4450e09cc7a073566dc5a249988c3fcea12e4f919f3672cdf0632e7a3b8077fa4efcc5fe39f9d9e2a8298ba12ca6","ssdeep":"3072:WNktqI/TOFC49tTGIcUZtAXioAqIcNZqL8Mz5SgoevTXD7fCB:WNkfkC4HT/cQPBPL8y8goevT3fCB","tlshash":"e78459fe1f3009d95ac84ecb3e6204186df7f9f75958cd06e08ccb8a5099c5ca857a9b","first_seen":"2026-03-14T21:45:19.24463Z","last_seen":"2026-03-23T16:07:39.242195Z","times_seen":12,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":53,"dns":20,"connect":8,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T21:44:52.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Mar 2026 08:37:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3cccb-426cd\"\r\nset-cookie: server_name_session=260bb815f5501487c7b1679f8dcd957e; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272077,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64762), with no line terminators","md5":"967f038865db035626b46d565f30427a","sha1":"a56e05282e2b8cf05295ffe3df3141a21aa9c347","sha256":"ea646e90dae2d4d5228b076ef43fec613e4b70197884fbad12f7a67739a6bf2f","sha512":"7515f16b50381737af97491ce4e6995b4039637ef5a753b897aacd0f4463979ea4f36cc0145d33901c07812abff1fddb81e0e40c22b3f55c76c8155437a10f52","ssdeep":"1536:g3DVpYtarTjqUYI17LDVejtarJjqdYBL1doeHLBLnL3smMDQh040289EKCpic/a1:MYk4Y3s20SQ","tlshash":"2d44f661e780636b9407d7ecb78aa271b13fac5dffd3ce4ba29895156a0acc41512fc0","first_seen":"2026-03-14T21:45:19.246012Z","last_seen":"2026-03-14T21:56:30.809556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1202,"timings":{"blocked":495,"dns":80,"connect":205,"send":0,"wait":206,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PCRXDF4H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-PCRXDF4H HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\nexpires: Sat, 14 Mar 2026 21:44:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 14 Mar 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 116810\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":349496,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15951)","md5":"51115f52ddbb5a7e0bf36fb452b8e547","sha1":"a61e8c45880a1eb730b3aa2a507ec234d34af49f","sha256":"72b3f2077eab8a1165a63c405084769a993e50d240cb39a935b250620a7e1d4c","sha512":"cb81d02a355acce7c543e58dd2c0828c79b55d024cbd6dc4cfcaa33e7e7ae89f45232bf2a1ed938226d3ed53a4d0a29aeaf4ed7f2efbf35f93e30387787171b6","ssdeep":"6144:bGTET0k+TCNF08vIE8cvTVsgXBGOYs/Juz+9r:bGTa3CCNCvE8w/sW","tlshash":"0d7418ceb3dbb0629392a478503f018bb57a7992f44cc895f186d8d42e7469a4237f7c","first_seen":"2026-03-14T21:45:19.247151Z","last_seen":"2026-03-14T21:56:30.815315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":169,"dns":25,"connect":8,"send":0,"wait":21,"receive":26,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/static/js/mega-menu.js","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:55.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /static/js/mega-menu.js HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 06:26:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3ae2e-e4b\"\r\nexpires: Sun, 15 Mar 2026 09:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3bc3187d1ed8d43caf868243012cf482","sha1":"82a98a0dfafe3ea9dc8d32b72ad17ec8941d30b1","sha256":"f4d84c458abde5f62fbc37139be90bc37cc5100c3957b84b529e58f9b00262f8","sha512":"8478e544daa4af0fd4db176b06ae081115d3e10af5589a7818ffb5ef7e2f2416b4fa7a6f3e8d34890912c6a40c5e0e0ab013109664b419134aa6e5a40e5ee4bc","ssdeep":"","tlshash":"8d71240aaed22537983731b58faf758973e1550b8245c8007e5cd2ca3fc49229bb6fd9","first_seen":"2026-03-14T21:45:19.249557Z","last_seen":"2026-03-14T21:56:30.817638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/static/js/local.js","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:55.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /static/js/local.js HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.trustwallet-zh.org/\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 02:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b37ba0-29c3\"\r\nexpires: Sun, 15 Mar 2026 09:44:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4d2c66377944ffbfc2caed997b4b4a3a","sha1":"7d24885f60c852e30c1d80e90cae490de2a31002","sha256":"c1bd20cc28479f817c0ad28604d9646705d5364a1551e399b56c27e02849fc39","sha512":"fc079f221233fe9a61abea4f7e4bfa6fadf359ac6aa714d593a0acff0e870070502a2b624413f7ed5c8bc7a414c3d7cf23cde682eaca8ff6aa7d7511b3d537b7","ssdeep":"192:Muvn1NqoJZfpc/ErRqxjRT1LEH3tLqLgiBxtj9SHp5tSlTmOjcgjyatJ9ySEn6/J:MuN8ovpwbBRT1AHeB/jUHpL5OjcgNJ97","tlshash":"36224169b0b32273457b21fe5b9fb9d43224600ba102dd093e4cc2856fd58346ab9bed","first_seen":"2026-03-14T21:45:19.252561Z","last_seen":"2026-03-14T21:56:30.812466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trustwallet-zh.org/_next/static/media/e21d6bf08459d7e0-s.p.ttf","fqdn":"www.trustwallet-zh.org","domain":"trustwallet-zh.org","tld":"org"},"ip":{"addr":"154.89.71.205","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.trustwallet-zh.org/","date":"2026-03-14T21:44:53.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustwallet-zh.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 06:11:13 GMT","end":"Thu, 11 Jun 2026 06:11:12 GMT"},"fingerprint":{"sha1":"7B:20:96:39:12:B4:82:8E:78:5D:8A:B7:52:0E:9E:84:AB:2D:C4:52","sha256":"08:DE:35:9C:F3:5B:B4:C2:6C:96:98:9D:2C:73:C5:6C:D2:FB:1A:E6:17:43:D4:B4:CF:C8:97:8F:C5:3E:E1:2F"}}},"request":{"raw":"GET /_next/static/media/e21d6bf08459d7e0-s.p.ttf HTTP/1.1\r\nHost: www.trustwallet-zh.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.trustwallet-zh.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=260bb815f5501487c7b1679f8dcd957e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 21:44:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 139932\r\nlast-modified: Thu, 12 Mar 2026 12:35:20 GMT\r\netag: \"69b2b308-2229c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139932,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"86f44ffcad4c77660b93f25e4afcf518","sha1":"df46cc6cc52e2687d708c1d9e5916f1ffab5bc08","sha256":"f78ac8c43268a386fbdfb28cceca39c65a275cbf59d2418a72040a1350aa2cee","sha512":"5ba62d55727d9edfa8de3d41203b38b6b1ef7f786feb746d7df79b7f4fb437d07a08426852389ce784ab4b4bbfc78d723260394126834667f3ac576d3303f3af","ssdeep":"1536:s6+uOthy35iFVpC0xTl2JD7jR7N3+MEYWBWEO/H/DknTI:ouODy0FVflm7xzaKSTI","tlshash":"f1d3c503fb52cb46d01a2f7ca5f7cb607e69a819ee16030fa09b64298d5a7b15d033d7","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-09T14:00:53.548095Z","times_seen":289,"resource_available":false,"data":null}},"time_used":18071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7195,"receive":10876,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"www.trustwallet-zh.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
