{"report_id":"ca25ab5d-3a38-4f74-8489-fc24c0e0e039","version":6,"status":"done","tags":[],"date":"2026-03-19T00:41:37Z","url":{"schema":"http","addr":"trustwallett.pro","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"title":"SSL Unavailable","dom":{"size":1927,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"884e41c8c012efa646091a4cdeb29ce8","sha1":"8d2aa0d250e989fa360464001b999297ce3b03b6","sha256":"b4cfa03c79545fa6e4cdca121e8eda03610db8f890e39cde792d594a5d1a56a4","sha512":"ec688d79e1c0f8ddfd423ae603b793c193624c56d062d474957d445ed8a7cb2d691c94995a189825847e2cba9ae380cc59768b84cf1f025aea5c4fc03bcc7bd9","ssdeep":"","tlshash":"d34142df62f3100229a3a55577a36344f2219097510ecc547f8c9348cf8ab9ac5d378c","dom_hash":"domhash1bf67d03795bc7efde63555e7d8def04","first_seen":"2026-03-19T00:41:41.590296Z","last_seen":"2026-03-19T03:16:58.479347Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwallett.pro","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-23T00:41:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustwallett.pro","ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-19T00:41:38.070095Z","last_seen":"2026-03-19T00:41:38.070095Z","alert_count":12,"request_count":12,"received_data":24164,"sent_data":5457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f76049733e9b432353ea3b730703ed58","sha1":"bcd2c6724ed74e231ad04fdf4a89a3d89730cfb3","sha256":"845c2d78b64b6efa1e2044e19472c4c747091a047b76bbe2ebcbff221b435a23","sha512":"5a720e8cc94a239100377741ac3aa5d5f1d50b638923a31348419cf51aaefbbc00ce0f24b4c6e0bacba67c005184c5454a01f52368ff1a3be2911c1bfb4f0224","ssdeep":"","tlshash":"e25000003000000c00f0000cf0000000c0300000000c0300c00c0003cc000030000000","size":10,"data":"","first_seen":"2024-06-09T08:50:09Z","last_seen":"2026-07-22T16:33:00.072314Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"15adad257fbc6dc6e83519a9b3cdd01f","sha1":"78b7360aafad5e33af5de6ba8003c6ed68e8a374","sha256":"e1bd6c5442c8fbfa5997a3191b7a373625e4dd1f60e3979544bd39f27a549a1c","sha512":"aca324f3315b78384ad6bc5ac5ab4b54105ab9555d6385ec40c31d54b29e7d2bb663d25dee49e2e3c6551b7a3c79c7f750e3ce210bcd17d91e7b849986c2245e","ssdeep":"","tlshash":"21014c9d16b351842ae3241bb3972344b03321a73449d408ba4c8740dfdaf5fc157bd9","size":697,"data":"","first_seen":"2025-11-09T22:51:30.257354Z","last_seen":"2026-03-19T03:16:58.484147Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f76049733e9b432353ea3b730703ed58","sha1":"bcd2c6724ed74e231ad04fdf4a89a3d89730cfb3","sha256":"845c2d78b64b6efa1e2044e19472c4c747091a047b76bbe2ebcbff221b435a23","sha512":"5a720e8cc94a239100377741ac3aa5d5f1d50b638923a31348419cf51aaefbbc00ce0f24b4c6e0bacba67c005184c5454a01f52368ff1a3be2911c1bfb4f0224","ssdeep":"","tlshash":"e25000003000000c00f0000cf0000000c0300000000c0300c00c0003cc000030000000","size":10,"data":"","first_seen":"2024-06-09T08:50:09Z","last_seen":"2026-07-22T16:33:00.072314Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f76049733e9b432353ea3b730703ed58","sha1":"bcd2c6724ed74e231ad04fdf4a89a3d89730cfb3","sha256":"845c2d78b64b6efa1e2044e19472c4c747091a047b76bbe2ebcbff221b435a23","sha512":"5a720e8cc94a239100377741ac3aa5d5f1d50b638923a31348419cf51aaefbbc00ce0f24b4c6e0bacba67c005184c5454a01f52368ff1a3be2911c1bfb4f0224","ssdeep":"","tlshash":"e25000003000000c00f0000cf0000000c0300000000c0300c00c0003cc000030000000","size":10,"data":"","first_seen":"2024-06-09T08:50:09Z","last_seen":"2026-07-22T16:33:00.072314Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f76049733e9b432353ea3b730703ed58","sha1":"bcd2c6724ed74e231ad04fdf4a89a3d89730cfb3","sha256":"845c2d78b64b6efa1e2044e19472c4c747091a047b76bbe2ebcbff221b435a23","sha512":"5a720e8cc94a239100377741ac3aa5d5f1d50b638923a31348419cf51aaefbbc00ce0f24b4c6e0bacba67c005184c5454a01f52368ff1a3be2911c1bfb4f0224","ssdeep":"","tlshash":"e25000003000000c00f0000cf0000000c0300000000c0300c00c0003cc000030000000","size":10,"data":"","first_seen":"2024-06-09T08:50:09Z","last_seen":"2026-07-22T16:33:00.072314Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"trustwallett.pro/favicon.ico","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://trustwallett.pro/ssl-not-enabled/?return=/","date":"2026-03-19T00:41:18.987Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:19 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Mar 2026 20:37:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69bb0d27-52b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"332cf9633c004ded3ccee65c90f270cd","sha1":"e101fdf2f38abdd13e525e143b6343b5152d5729","sha256":"7fd288fefee321e72d84b8d6cff0f1efc5f946542eab30cc5ba56f8f09cf19ba","sha512":"02352b7d3a1d40866f8121921c6d2a182db7f9f1f684c61e31f18c8daadd3747e9810980064dc5b063453c8c91a83fa5d0d22fc31729974eeeaf6bcad6b93118","ssdeep":"","tlshash":"0d21109343b71002b8a1c8581f61a780668da9171607c87937dcb25d8fcba94e6b368c","first_seen":"2026-03-19T00:41:41.591506Z","last_seen":"2026-03-19T00:41:41.591506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallett.pro/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:23.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallett.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 03:16:21 GMT","end":"Sat, 16 May 2026 03:16:20 GMT"},"fingerprint":{"sha1":"DC:6B:22:23:06:6E:70:68:25:D2:42:BD:04:B6:03:C1:E2:B7:04:C3","sha256":"03:B1:B0:9A:CB:53:54:B6:A7:B0:E3:60:88:40:AE:44:87:40:2D:AA:6F:2D:ED:BD:9C:DE:AD:49:95:DA:3E:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: openresty/1.29.2.1\r\ndate: Thu, 19 Mar 2026 00:41:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 159\r\nlocation: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:24.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ssl-not-enabled/?return=/ HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://trustwallett.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thursday, 19-Mar-2026 00:41:24 GMT\r\nCache-Control: no-store, no-cache\r\nStrict-Transport-Security: max-age=0\r\nUpgrade-Insecure-Requests: 0\r\nX-Robots-Tag: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2d2f85862fd7de65cfe157f6ee601f2c","sha1":"16fc7237a7a4334bf2345aa20b58c24d5b076a60","sha256":"501ceddf49efe290baa5ab5b0368b77132bc9896e734fe0aba061a21208d2a95","sha512":"bf57c753889ae4c96f1dbe93ba1f7cf504089d701e9b6106e22c75a422f88812c6938f0465579ee44c4ca6066f59e57fee35bd3751a17da1fd5ebf04b1f01727","ssdeep":"","tlshash":"634140db21f3100229a36159bb976304f222a097110ec8587f8c9348cfcab8ed5c779c","first_seen":"2025-11-10T01:31:38.114201Z","last_seen":"2026-03-19T03:16:58.480654Z","times_seen":50,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallett.pro/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:29.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallett.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 03:16:21 GMT","end":"Sat, 16 May 2026 03:16:20 GMT"},"fingerprint":{"sha1":"DC:6B:22:23:06:6E:70:68:25:D2:42:BD:04:B6:03:C1:E2:B7:04:C3","sha256":"03:B1:B0:9A:CB:53:54:B6:A7:B0:E3:60:88:40:AE:44:87:40:2D:AA:6F:2D:ED:BD:9C:DE:AD:49:95:DA:3E:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: openresty/1.29.2.1\r\ndate: Thu, 19 Mar 2026 00:41:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 159\r\nlocation: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallett.pro/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:13.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallett.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 03:16:21 GMT","end":"Sat, 16 May 2026 03:16:20 GMT"},"fingerprint":{"sha1":"DC:6B:22:23:06:6E:70:68:25:D2:42:BD:04:B6:03:C1:E2:B7:04:C3","sha256":"03:B1:B0:9A:CB:53:54:B6:A7:B0:E3:60:88:40:AE:44:87:40:2D:AA:6F:2D:ED:BD:9C:DE:AD:49:95:DA:3E:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: openresty/1.29.2.1\r\ndate: Thu, 19 Mar 2026 00:41:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 159\r\nlocation: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":136,"dns":59,"connect":34,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/favicon.ico","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://trustwallett.pro/ssl-not-enabled/?return=/","date":"2026-03-19T00:41:24.086Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:24 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Mar 2026 20:37:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69bb0d27-52b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"332cf9633c004ded3ccee65c90f270cd","sha1":"e101fdf2f38abdd13e525e143b6343b5152d5729","sha256":"7fd288fefee321e72d84b8d6cff0f1efc5f946542eab30cc5ba56f8f09cf19ba","sha512":"02352b7d3a1d40866f8121921c6d2a182db7f9f1f684c61e31f18c8daadd3747e9810980064dc5b063453c8c91a83fa5d0d22fc31729974eeeaf6bcad6b93118","ssdeep":"","tlshash":"0d21109343b71002b8a1c8581f61a780668da9171607c87937dcb25d8fcba94e6b368c","first_seen":"2026-03-19T00:41:41.591506Z","last_seen":"2026-03-19T00:41:41.591506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:29.124Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ssl-not-enabled/?return=/ HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://trustwallett.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:29 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thursday, 19-Mar-2026 00:41:29 GMT\r\nCache-Control: no-store, no-cache\r\nStrict-Transport-Security: max-age=0\r\nUpgrade-Insecure-Requests: 0\r\nX-Robots-Tag: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2d2f85862fd7de65cfe157f6ee601f2c","sha1":"16fc7237a7a4334bf2345aa20b58c24d5b076a60","sha256":"501ceddf49efe290baa5ab5b0368b77132bc9896e734fe0aba061a21208d2a95","sha512":"bf57c753889ae4c96f1dbe93ba1f7cf504089d701e9b6106e22c75a422f88812c6938f0465579ee44c4ca6066f59e57fee35bd3751a17da1fd5ebf04b1f01727","ssdeep":"","tlshash":"634140db21f3100229a36159bb976304f222a097110ec8587f8c9348cfcab8ed5c779c","first_seen":"2025-11-10T01:31:38.114201Z","last_seen":"2026-03-19T03:16:58.480654Z","times_seen":50,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/favicon.ico","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://trustwallett.pro/ssl-not-enabled/?return=/","date":"2026-03-19T00:41:29.191Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:29 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Mar 2026 20:37:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69bb0d27-52b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"332cf9633c004ded3ccee65c90f270cd","sha1":"e101fdf2f38abdd13e525e143b6343b5152d5729","sha256":"7fd288fefee321e72d84b8d6cff0f1efc5f946542eab30cc5ba56f8f09cf19ba","sha512":"02352b7d3a1d40866f8121921c6d2a182db7f9f1f684c61e31f18c8daadd3747e9810980064dc5b063453c8c91a83fa5d0d22fc31729974eeeaf6bcad6b93118","ssdeep":"","tlshash":"0d21109343b71002b8a1c8581f61a780668da9171607c87937dcb25d8fcba94e6b368c","first_seen":"2026-03-19T00:41:41.591506Z","last_seen":"2026-03-19T00:41:41.591506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:13.639Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ssl-not-enabled/?return=/ HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thursday, 19-Mar-2026 00:41:13 GMT\r\nCache-Control: no-store, no-cache\r\nStrict-Transport-Security: max-age=0\r\nUpgrade-Insecure-Requests: 0\r\nX-Robots-Tag: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2d2f85862fd7de65cfe157f6ee601f2c","sha1":"16fc7237a7a4334bf2345aa20b58c24d5b076a60","sha256":"501ceddf49efe290baa5ab5b0368b77132bc9896e734fe0aba061a21208d2a95","sha512":"bf57c753889ae4c96f1dbe93ba1f7cf504089d701e9b6106e22c75a422f88812c6938f0465579ee44c4ca6066f59e57fee35bd3751a17da1fd5ebf04b1f01727","ssdeep":"","tlshash":"634140db21f3100229a36159bb976304f222a097110ec8587f8c9348cfcab8ed5c779c","first_seen":"2025-11-10T01:31:38.114201Z","last_seen":"2026-03-19T03:16:58.480654Z","times_seen":50,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":35,"dns":1,"connect":34,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/favicon.ico","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://trustwallett.pro/ssl-not-enabled/?return=/","date":"2026-03-19T00:41:13.884Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:13 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Mar 2026 20:37:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69bb0d27-52b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"332cf9633c004ded3ccee65c90f270cd","sha1":"e101fdf2f38abdd13e525e143b6343b5152d5729","sha256":"7fd288fefee321e72d84b8d6cff0f1efc5f946542eab30cc5ba56f8f09cf19ba","sha512":"02352b7d3a1d40866f8121921c6d2a182db7f9f1f684c61e31f18c8daadd3747e9810980064dc5b063453c8c91a83fa5d0d22fc31729974eeeaf6bcad6b93118","ssdeep":"","tlshash":"0d21109343b71002b8a1c8581f61a780668da9171607c87937dcb25d8fcba94e6b368c","first_seen":"2026-03-19T00:41:41.591506Z","last_seen":"2026-03-19T00:41:41.591506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwallett.pro/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwallett.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 03:16:21 GMT","end":"Sat, 16 May 2026 03:16:20 GMT"},"fingerprint":{"sha1":"DC:6B:22:23:06:6E:70:68:25:D2:42:BD:04:B6:03:C1:E2:B7:04:C3","sha256":"03:B1:B0:9A:CB:53:54:B6:A7:B0:E3:60:88:40:AE:44:87:40:2D:AA:6F:2D:ED:BD:9C:DE:AD:49:95:DA:3E:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: openresty/1.29.2.1\r\ndate: Thu, 19 Mar 2026 00:41:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 159\r\nlocation: http://trustwallett.pro/ssl-not-enabled/?return=/\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trustwallett.pro/ssl-not-enabled/?return=/","fqdn":"trustwallett.pro","domain":"trustwallett.pro","tld":"pro"},"ip":{"addr":"195.201.179.80","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:41:18.913Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ssl-not-enabled/?return=/ HTTP/1.1\r\nHost: trustwallett.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://trustwallett.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.29.2.1\r\nDate: Thu, 19 Mar 2026 00:41:18 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thursday, 19-Mar-2026 00:41:18 GMT\r\nCache-Control: no-store, no-cache\r\nStrict-Transport-Security: max-age=0\r\nUpgrade-Insecure-Requests: 0\r\nX-Robots-Tag: none\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty:1.29.2.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2d2f85862fd7de65cfe157f6ee601f2c","sha1":"16fc7237a7a4334bf2345aa20b58c24d5b076a60","sha256":"501ceddf49efe290baa5ab5b0368b77132bc9896e734fe0aba061a21208d2a95","sha512":"bf57c753889ae4c96f1dbe93ba1f7cf504089d701e9b6106e22c75a422f88812c6938f0465579ee44c4ca6066f59e57fee35bd3751a17da1fd5ebf04b1f01727","ssdeep":"","tlshash":"634140db21f3100229a36159bb976304f222a097110ec8587f8c9348cfcab8ed5c779c","first_seen":"2025-11-10T01:31:38.114201Z","last_seen":"2026-03-19T03:16:58.480654Z","times_seen":50,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"trustwallett.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
