{"report_id":"d0dac4d1-8e4a-4b9b-8b12-a5369b55d304","version":6,"status":"done","tags":[],"date":"2026-03-23T08:59:07Z","url":{"schema":"http","addr":"trustwalletpassphrase.com","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"trustwalletpassphrase.com/","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"title":"Trust Wallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwalletpassphrase.com","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T08:59:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"css-style.com","ip":{"addr":"104.168.140.156","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-07-16T23:33:34.959146Z","last_seen":"2026-03-14T14:49:41.842004Z","alert_count":0,"request_count":1,"received_data":363,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"trustwalletpassphrase.com","ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-23T08:59:08.236524Z","last_seen":"2026-03-23T08:59:08.236524Z","alert_count":12,"request_count":6,"received_data":2029249,"sent_data":2945,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustwalletpassphrase.com/","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0aa8f7a21b49edf7e9008494b4f85ce","sha1":"0e45fc431d979272534aa9fc9e5d7693ae091b88","sha256":"4973987c7f672167003ffe791d3622e9bc8d00dca4095e90de7292f12fce7891","sha512":"683ffd14e463d2c93614199131f4ebb5b10d69ec1a04b4748d0a8aef32c02fcb64619929539ee8f51a410f60a0d4afb354d2bc7934b681ba2aa1a4506cc425b4","ssdeep":"12288:dlhPWs2RFtmpsDI5d0t6wW5gsk4TyRyEyvyBy+gpD4YxDujiLz5aT7zT4uxZ9t1O:B","tlshash":"bf150b1e457452e8ff29988cc747389a83ea7051bfdb55ecceba8c074774a1d2306e1a","size":957082,"data":"","first_seen":"2025-11-02T13:37:33.440476Z","last_seen":"2026-03-23T12:39:27.881904Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"54bc338675fb95e4f0cade43cd1cc1c5","sha1":"b050142c9ff0612cba5f8e174dea2eecf1309c04","sha256":"6a0e78e74a2e6f69c0b8eeceb503a2e1d4a71cf6db6028356487fa3d07c15f3c","sha512":"e52cb095902da01879a3d61a204e673d262ad7aa052bcc0d8adb30a2c0a1b69addfb916726e0390a2aed71434688a5f6cb5d2cc4f85946d3db09f85a66a1400c","ssdeep":"","tlshash":"2f51763d2ab56632523642b8530f97557535206b3700ee2cb6cc46481fd9ce548bbddb","size":3148,"data":"","first_seen":"2025-11-02T13:37:33.44152Z","last_seen":"2026-03-23T12:39:27.882914Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/lottie.min.js","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-07T07:15:30.767597Z","times_seen":2330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"css-style.com/%66%6f%6e%74%2e%70%6e%67","fqdn":"css-style.com","domain":"css-style.com","tld":"com"},"ip":{"addr":"104.168.140.156","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:42.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"css-style.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 03:58:10 GMT","end":"Sun, 14 Jun 2026 03:58:09 GMT"},"fingerprint":{"sha1":"3E:F0:CE:D8:01:DC:3A:D1:C0:45:21:3F:84:8D:3B:12:A9:87:E5:4F","sha256":"19:6D:E8:4C:8C:BF:DE:D8:35:25:2A:43:1F:F3:1C:60:E3:4D:F7:37:3E:5B:D4:CB:35:2F:3F:35:97:59:EA:9B"}}},"request":{"raw":"GET /%66%6f%6e%74%2e%70%6e%67 HTTP/1.1\r\nHost: css-style.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletpassphrase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Mon, 23 Mar 2026 08:58:44 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":2587,"timings":{"blocked":697,"dns":234,"connect":150,"send":0,"wait":1191,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/lottie.min.js","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:42.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET /Folder/lottie.min.js HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletpassphrase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 19:04:53 GMT\r\netag: W/\"69669755-4a987\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-07T07:15:30.767597Z","times_seen":2330,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/favicon.ico","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:43.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET /Folder/favicon.ico HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletpassphrase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 186813\r\nlast-modified: Tue, 13 Jan 2026 19:04:53 GMT\r\netag: \"69669755-2d9bd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186813,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"f31065f3cd27ee747f132dfb9f3004ca","sha1":"b1f3cc4a67b0b7c4cc1c8aaa594f4b141e574794","sha256":"aad2a3e5c939abd19c4960dbf40300fcfbf4b1a97b23aa08877f9ca689e20b38","sha512":"e6505d407245ec6a74b73604035572c9ffe3cbb314318e30e0c2aac3a355983d4c250066e25fafbf438fd6989ba70285e30572e7eda117a47e09dae7c40f81bb","ssdeep":"3072:jUcVblV61/KfYGyjVoEovkLYqFYUU9PoPZXLNnYfKDKwM0w+W3:jHVblV61/iYGyjVrovkLYmYN9PoPZXLe","tlshash":"dc04f44aba56d92be01137bcc9b3d1f0e49a6d40fa13b48366f47d87f8318a9cc095d6","first_seen":"2023-12-20T05:41:30Z","last_seen":"2026-08-07T08:21:18.880321Z","times_seen":312,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/5f36217efbb124e1f06e.otf","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:44.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET /Folder/5f36217efbb124e1f06e.otf HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletpassphrase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 124572\r\nlast-modified: Tue, 13 Jan 2026 19:04:53 GMT\r\netag: \"69669755-1e69c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124572,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"04490825e9c5c0a9121ea343727bba6d","sha1":"dcf9cd7f1399b73f974452e7f206a11c4d9148f5","sha256":"b57676888c12c1c5fe37cb3b46297c3fd455e0f80473aeab535edc25be1ff304","sha512":"c45fe2542728d94222f492484981301902739af130d0e3bcbc38169bf5b4a5ee7f86993a5b9581dee200ac92112c8ef8f09be4fb0cf41737f076e07ef53d8a5e","ssdeep":"1536:UPiMqLTcX4Bs1Qc4zHVPcJB0gthTQAQJyThXFWhmfrh0iH63PhL8FahWPS5e9yPN:F4X4IQ9z1YzthTZbWwZH4mPsmSj62","tlshash":"0bc36c55b9422301c013aa35aeead331b733fa0b4fa7d65cf4e249b404cd28a5f5a6d7","first_seen":"2023-11-08T12:29:51Z","last_seen":"2026-07-28T18:20:47.813458Z","times_seen":35,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/850da36ebaa95f783ceb.otf","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:44.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET /Folder/850da36ebaa95f783ceb.otf HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletpassphrase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 129860\r\nlast-modified: Tue, 13 Jan 2026 19:04:53 GMT\r\netag: \"69669755-1fb44\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":129860,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"5b46049f6ac5e0edc5c3208ec5bd08da","sha1":"41a561f5a28a023dea2563bfa2af49ce822ff22d","sha256":"7affb9abef8faa60ddbf1dca59ee237801b4ea8fff9ab5283edf00d469168200","sha512":"bb7265fa84e730e26516134c11cb58f9fcc20e4b98655d7343d51df92c97271dfd6c4a3ba0c3fb025f98a3385d320d811d845a063992c80babcc22a8b7a9accc","ssdeep":"1536:vb5xeKfXjaMSroJfy5hSU6UTGZgvXe05Au4g3vC/WgzH+uM+8WMZ2CGd/sLGTetk:v77GYfy5/51UrK0d/oGTetwlYF+S5pw","tlshash":"5ac39d52b5022b05c4115c369ee2d3347322fe0b5f1bcf1ef0c17b6529ca589aeba9d6","first_seen":"2023-11-08T12:29:51Z","last_seen":"2026-07-28T18:20:47.812172Z","times_seen":39,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/Folder/6563999da1964c37c508.otf","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustwalletpassphrase.com/","date":"2026-03-23T08:58:44.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET /Folder/6563999da1964c37c508.otf HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletpassphrase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 130276\r\nlast-modified: Tue, 13 Jan 2026 19:04:53 GMT\r\netag: \"69669755-1fce4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":130276,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"b3abf3c42b8ba895d5eea47b1a897c5c","sha1":"d6de34bf8f2bd3e0852a4edda9f56bf135a6c7fe","sha256":"764befa8d285d29d174344e8fefc6961d3a084cc00e231c1d31422fcf532df4b","sha512":"bf75b2d10b5a1e862c0ef3b9741f594da95f5677284cc2528db6eae753ef77ec0f108feb5b6bc06f952833bfd52760ad2f34ebec84fdc03adfb4c7e8df6907ba","ssdeep":"1536:Jwqh4hTmn3EEn7qHXLvuKP/4gih7N6xOQEtq6UXHE1/OEPsyicJQJo1NKVV:JwD9m3drKP/4giJN6A9UOsyicJCoKX","tlshash":"eed38d66b8021702d4529d3a9fd1d6307323fa0b9f67c71ef081b6e0158a6d2df7a6c6","first_seen":"2023-11-08T12:29:51Z","last_seen":"2026-07-03T09:16:29.471228Z","times_seen":37,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletpassphrase.com/","fqdn":"trustwalletpassphrase.com","domain":"trustwalletpassphrase.com","tld":"com"},"ip":{"addr":"45.74.47.68","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T08:58:42.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletpassphrase.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 13:51:11 GMT","end":"Sat, 20 Jun 2026 13:51:10 GMT"},"fingerprint":{"sha1":"81:DF:F3:E1:61:71:AC:1B:31:AB:41:1F:DE:07:D1:DF:04:31:11:44","sha256":"25:84:CB:CB:4C:FB:38:C1:E9:36:03:48:8A:B1:B6:03:FE:62:BB:92:F5:8B:79:1F:42:7D:9B:17:2E:0F:99:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwalletpassphrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:58:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 22 Mar 2026 20:43:07 GMT\r\netag: W/\"69c0545b-118eb3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150643,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e0239b6e1eaceb44dc6378f0e32c4a70","sha1":"808774e09f9aa557c92c5865d01615fcee364174","sha256":"94ad80da55c9e1b61b6446e79d29db29ca334706cc9645660d86502ad981231c","sha512":"948bf1d919aa8bc1c058278f98bd6db30f83a97791304fb7f6cb38644edcb7de2c1050909d6e6daba7f11911f586f5907f68d6c9144c700579c89c8cd88add6f","ssdeep":"12288:V8R9HeglhPWs2RFtmpsDI5d0t6wW5gsk4TyRyEyvyBy+gpD4YxDujiLz5aT7zT4s:7","tlshash":"1e25501a467442ecfe25988dc747389a53da7041bfdb56ecceba9c0747b4b1d2306e0a","first_seen":"2026-03-23T08:59:12.067939Z","last_seen":"2026-03-23T12:39:27.874231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":102,"dns":56,"connect":20,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"trustwalletpassphrase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"trustwalletpassphrase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}