{"report_id":"e2a4d72f-38fb-4252-8f89-76ee34c264f5","version":6,"status":"done","tags":[],"date":"2026-05-07T10:34:50Z","url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"title":"Срок регистрации домена trust-crypto-wallet.ru истёк","dom":{"size":12107,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3505)","md5":"938dd4a0cd9da2fa593a0b1a720e28bb","sha1":"d673462aa59e105be58816f93dd87ea6292e0c95","sha256":"740243a8917182b6b308bf6dac378a3a539e0d2ecee0c687a8eaa758d6d40c1b","sha512":"66b89cc2c0369b822588b5707d733849ec91e0c3399edc3b57fa70f184e6e35867237056fe9cc10f6a47ee342ed1844cef28d56882afe2415b7284f64f610425","ssdeep":"192:HqA+AUNlj5oV0bGagZEBvF7XTrpCPp1JLlQavf+xypVmerCyL5TV9qq:R+r/doezdrpmfd+4Dr/ZF","tlshash":"9c4266677843f17f06831d86e227fb9db197802fdf068944f7ec01a51bd1d619ac2a68","dom_hash":"domhashc8a1df9f7b7e0239b92f6ba4d244a023","first_seen":"2026-05-07T10:35:11.024701Z","last_seen":"2026-05-07T10:35:11.024701Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T10:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"trust-crypto-wallet.ru","ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2023-04-24","domain_rank":0,"first_seen":"2026-05-07T10:34:52.934981Z","last_seen":"2026-05-07T10:34:52.934981Z","alert_count":7,"request_count":7,"received_data":440531,"sent_data":2683,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-05-04T09:15:49.357306Z","alert_count":0,"request_count":6,"received_data":918378,"sent_data":2978,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files.reg.ru","ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":5588631,"first_seen":"2022-11-17T08:46:40Z","last_seen":"2026-05-01T07:30:29.286537Z","alert_count":0,"request_count":3,"received_data":313253,"sent_data":1578,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.reg.ru","ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":279116,"first_seen":"2012-05-30T11:53:54Z","last_seen":"2026-05-05T08:10:48.569903Z","alert_count":0,"request_count":1,"received_data":13978,"sent_data":502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yandex.ru","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-05-06T18:14:37.363901Z","alert_count":0,"request_count":2,"received_data":394543,"sent_data":4969,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/manifest.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","size":4278,"data":"","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-08-11T20:54:01.891846Z","times_seen":2758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"223df5584c6ae20363251af3f42518ca","sha1":"a9fc6f70a65fc4af507feebef6435dc898bcac3a","sha256":"82839328e0573e00fd00bee3854b0f53cd9c83681558a65e7206f5d75cb1e4f8","sha512":"f3fdf1f8a2432d8f691d16af1b08cdab01daad5f39afe49d10b9f1b3e54e4427d3c99f452070468dad5e565715a4578badd0f1cce1583132a9cb0028348bb518","ssdeep":"","tlshash":"1890040c5c40dc7c5c1415433333df44175c05033505dd5141d1141430041434d0057c","size":42,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-08-11T20:54:01.905494Z","times_seen":2843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/parking-crew.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d55e5c13a0f422e6aa93f73f11eb27","sha1":"5be344a71c5ef5e0c1e91a15a76d0058470f53fa","sha256":"bb094ac80e1353aad2bba1345780ab26350dded51010c9e3c0409b32e2024e97","sha512":"7ee0d3eab7a5fda298e9c50e784afbf6cd3368fa9f2f366e3efc0ffc7b65f5b5c0b5c5b7e8c848da44cb2940ccf092bb33be5c72eedd5c90134372807bb492ae","ssdeep":"1536:A17Rb2GXVvi6h6G1c+4mzAbxmyBpdqSw76R6XkGGcsiDya4FEz0uABBxm4thhryI:kRbZUzokXrJuAIqhpyW+BA6MS2","tlshash":"36e307c8b5e17c6113b3206964afa4cbf2375948684d8410b15ef8e5bc7ca6e9233f2d","size":156804,"data":"","first_seen":"2024-12-02T03:59:11.430036Z","last_seen":"2026-08-09T19:47:09.408516Z","times_seen":853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bae51b8e92fcd4a4ae6d8007b20907b","sha1":"2d349dcc80d19591a083ac2989fa2b941e6e7001","sha256":"d8a0560358c51b493362768b5e550e2a0f7e5403e9a5e58f37e0eb28ab75c594","sha512":"965511c40a366a367bcd31fcde5ff53ba352eea23c004732a706f9e90fee8b03473b7253a441febd3f64bdab4c0b883d34bfa7475fa1f1c21b048beb6dea852a","ssdeep":"","tlshash":"39a02208a020220888a230b2c2b3f0280aab000c0c088a0203020008080200b8088afe","size":60,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-08-11T20:54:01.89897Z","times_seen":2884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5c6da5bce6108ea8515af42d32d5dd","sha1":"d8cea6eb8b91bf9bca564e7d7351063a925239ac","sha256":"e35a28c50d412642ab0840c53e99b9c943926e35fca092779dcbdd0c0a40b375","sha512":"6c0945ae37b22038015629a8c7131af3d44ae043923a08fdcd609eff6708f66ff23629f69d0f216693aaf81b525eb330201f589fd3bcb6a29990b09da351ba9e","ssdeep":"","tlshash":"49900271a8d648c8141120005a658515196800220340f9843d4c950a7b81e0b45d55dc","size":50,"data":"","first_seen":"2023-03-07T12:11:07Z","last_seen":"2026-08-09T19:47:09.434559Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/head-scripts.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","size":85185,"data":"","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-08-11T20:54:01.888491Z","times_seen":2747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/d608b6f7b966d1cc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eeb062c4382d057018c7066c97f5a0d","sha1":"558058e2cdadc9087735d229e39bc3fd3e2a5c6a","sha256":"fa8a121ae8f7e64e043495b865fe1949b915c5e620898d8dd9bfcdea9228071b","sha512":"3295d073df9db8e944ad64177bbefe6159e7464e81e7b2c337fdd5264d124e0ec94cf9f73702c31bc019f72c587f741abda2a9a36df7545e23c2e4fa5e1eceb3","ssdeep":"96:s/rjwRO8i2b4XfmP5IWiwYVdFecX65V8iYsyxht7BmaXmp6XTvTv1J0a2qo:s/rjC+27P5IJwYtXHhXQ6Hv1JzLo","tlshash":"c181e7fd3681737587c2159891bb9106b63a0d21980ab162e15e80623db4f9760fbbae","size":4157,"data":"","first_seen":"2026-05-07T08:54:50.627573Z","last_seen":"2026-05-08T06:48:21.370663Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/15df8c4cba173860.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0dd1d5343a7e46c47b6781bfdf6a0dd","sha1":"a4a1042f9f80899cf4074229d531e8128094342d","sha256":"1eb88b00e591fe7ab3edb92c95747223ea4a34e4c8f7fc8af16a297ca65b2ad7","sha512":"0de0b20ba6e266ce3ba22fc70953b4fdfb6e5e0db232cdaee33e3d271281161b7df707d984db688d7134b7ccab61f839107fa73ec6fe1acba6fb40eede1faf55","ssdeep":"12288:ykzUvnhBcnzByzWKDsNoczwvCgb7AsjIxSNBpDyRMxnuOqVA1:ykzUnzrsNokwqgb7AqIxSNBpDyRMxnuq","tlshash":"92e4d78af5e1b07142e7a0f9803f160ff23a791555098094f62ae8e57eb898e5137f3d","size":679154,"data":"","first_seen":"2026-05-07T08:54:50.609724Z","last_seen":"2026-05-08T06:48:21.599877Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"28179e40f28624d93c93e9ac70eb3cec","sha1":"3a355b896644ded584b7680a288efb4805f2b729","sha256":"9521cf39cc121d45a7a369c945affd00cde0f87403a6221753c56b9de135238c","sha512":"441cc99b48a7afc9e2f468696445d8e2c4f47a4160a475fede1a4c87b2a60027ab48d3f6ec4d79c8d1bf046574fcaf055bf0ba302976a935e813fd0239605908","ssdeep":"","tlshash":"679004145c4154545c3415073737ff4517f50401c11cd451c1411413340400354000fc","size":41,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-08-09T19:47:09.443129Z","times_seen":1095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-08-13T22:57:02.852019Z","times_seen":15025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"46eefe1d6661f6a162938dd33d5ba5b7","sha1":"86e56e9d80e40257fe2d1dc54651631d500b61ef","sha256":"1f9a7fbccfbb73a945b42355ebebe0ca5eb9e656d3b72f4001a2392ee97f4152","sha512":"197a47ccbc0062b97dbeae4dba241d26d64227b0c9d395944810268b692b2aacd6b209e0630951b89244b9627f3c53a63c5890f98bcab36372b70c57c01994ce","ssdeep":"","tlshash":"c1d080177761257501d370105c1d04195b530143578d45547f0c305d2ffc15a27d77d8","size":261,"data":"","first_seen":"2025-12-01T15:55:54.172723Z","last_seen":"2026-08-09T19:47:09.436264Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"335f87dc01055c25cf6766131a92bd37","sha1":"454eca5a61ad3190319dab82e0e0c5b5d4b94853","sha256":"0697f90e787799505432a396cdeee312cba674ebc1831fc34f54ff5d4931c824","sha512":"39c832d2f0d4d315b201ff482d7f1c8c99a2958cd466dd894d215279127b9d12b194b6f5b963afeeba6a3db662c49629db788bf4f475876ed9de74567ca017fb","ssdeep":"","tlshash":"88212b48adb7815c048371b5c67e6314a0e29067952ec908fe4cf544af90f693ea6ff9","size":1297,"data":"","first_seen":"2026-05-07T10:35:11.068006Z","last_seen":"2026-05-07T10:35:11.068006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b92f1e584a7799469971dd2e5c96e46","sha1":"1a150e22500e5833125d7492fb082a4327519fd8","sha256":"4ef89a5e7a840e2689887b748050f6f87bb8c3d855601947752dbcaf3e610fa2","sha512":"a8d682cbce4d8574c1714eefd6c58c94ad4a6b8623ea8062bb27307d7ae70db98e08ec1972825b1df02dea5f6c28bf98f92759374c6b099951cd9b5ebc899b05","ssdeep":"6144:SdZ3IBgzc6AAt+kzP0KO22jSk7n3NuzLWOtdQylqJlhvUrN0y4eFdtL00b78Pfey:GncWE2+","tlshash":"5884b69db1e2b4a143d761a4803f5a0bf23a6955780e9090e321e8d5bdbc99f9133f3d","size":388583,"data":"","first_seen":"2026-05-07T10:35:11.041203Z","last_seen":"2026-05-07T10:35:11.041203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"5b057d8aa1e34436f8d5fd111b6491ce","sha1":"02b8cad77321003b4b409e66834f858541576457","sha256":"4ab09ea291b2663ca5bbf7dc04757e161bdbb7ce39a4add0865e5fd5458db231","sha512":"0355002a1535fe31144fd551611d520d2a7189ec7e210962ce3b9ec8f2a055e39a6a5c5b189534e90cb50c0a6c811a2f84a6f12a6e1a6a05719c51aa878c9187","ssdeep":"","tlshash":"d18004043c445cc45c1405013373d3053f5c05051105f4d1c5d3344330411574f1017c","size":38,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-08-11T20:54:01.904878Z","times_seen":2864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4348afe4a531deafab6280fcd575f11f","sha1":"04b42a28d32f09679a2bc9f69d24d31425e3a738","sha256":"e433f46827fae2d3f8f62cb9ff3569c40167e9bf677eb82d43a7ff788d16dba4","sha512":"264ab1613f451e01ed4c649ee101baef4dd265a0df25a9c334da75b14cdc2d6bf8ba91397c70cf9fad3b6bc664f68f15d83184bec7c8275f3135595be4f40c34","ssdeep":"","tlshash":"32118e5c78a5012c96f3726969e87284781a1107aaa2d40cfa5c54040fe0c39aa75fdc","size":908,"data":"","first_seen":"2026-05-07T10:35:11.071148Z","last_seen":"2026-05-07T10:35:11.071148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-b3f8aa7d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfb34149de2d4fa1703203ba3bb26115","sha1":"f6aeb7d5cda7f8cf0e969524b30e3c39efb4736c","sha256":"b370e738d148cee40305e9bb53a2a8ab7337f7c2fea0b33388dfb8ec32997df8","sha512":"b075560a6418993a12675bed5ac5f1c86b7f59bd5b684a81b7e8ce7b299fe8cd4f6fbdee1a82fbf87d299b5c3aeace0e2b6cde9441053d9bd4d653c40f470cbb","ssdeep":"192:emKFHNNSZkrXmIldQs+mLXk5y4OYq7YLYIPZqb4MVA9Xmd:elFn8CXys+6krqcsp8My9X0","tlshash":"de12d9f532a1b8c412f669c1085f557b01ba7e07b90e255e872699927d240ce60f3fef","size":9232,"data":"","first_seen":"2026-04-24T11:53:44.770975Z","last_seen":"2026-05-27T09:05:06.055482Z","times_seen":2892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/c4838fe53f9c7980.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb965392afff268a2819b9e3756a51c2","sha1":"c43877cad074a75cf4636d09098ab4074bba4d49","sha256":"39c05e3344ac373c9e93279b51209eb9bcb5a169f451a630353e471c2076f332","sha512":"9c002a264702dfb01aea48beb4c0ac67a4010df3fa501c0993440325067b967bcc3d0352f4b1fd41d376842336bcfee08487d1ee1e0e9155865596479676a139","ssdeep":"3072:gogjYLLYHfmBWXxw4UYbmfT5aW4+UMWBWx8ncioJAGhXaf10KhCPVByNeyinPaNx:gog0Y/mBWXxw4UYbmfT5aW4+UMWBWx8T","tlshash":"7bf3c68db2e1b47142d7a0f5503f6a0af23a6459a4098094f72de9e16fb898f5137f3c","size":160744,"data":"","first_seen":"2026-05-07T08:54:50.595772Z","last_seen":"2026-05-08T06:48:21.404451Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6357d37a3edcc55461f4e2f0e501316c","sha1":"87ad2975e234cb0cdf779750962c55691b95de40","sha256":"14d02a3502d07296225450c5b4f8eeee501864367bb3885c7bef31763ad2d634","sha512":"fe8e301537d2e6c63e52e941a0c2858f1a7d67cd3824809fd00b3196a15a0a8d78bc3effe3465a1599f3d374c9bbe68b7362a6eb7eb50dc1d1ee14751ade9b59","ssdeep":"","tlshash":"1cf00ea53cdc84398337102267bba2487479a93a2c4afc15f54cc4812f99efc18bb98c","size":530,"data":"","first_seen":"2024-12-31T07:10:36.5379Z","last_seen":"2026-08-11T20:54:01.902054Z","times_seen":2498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-08T13:31:08.348565Z","times_seen":28319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/favicon.ico","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.888Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:28 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 14134\r\nLast-Modified: Fri, 02 Aug 2024 07:05:38 GMT\r\nConnection: keep-alive\r\nETag: \"66ac8542-3736\"\r\nExpires: Sat, 03 Aug 2024 07:05:38 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14134,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c79cecb75624b00f9e69b603e79bb4bd","sha1":"7f68e4de425b71357d0c569a44cd2848754bb8f8","sha256":"7fccb84339fd382be7267a5cf90e04e8fb96c99c82fecaa4a0ccbb36686bf5bb","sha512":"9d10ad7942269e75627302a7b41315dfac62392360b3f7f5f5d7a97dbe7c0485b48b15805a5c5b4f4af6cdb425a5d1311b92a218fc143cbfe2e2e3b7c6f70e6e","ssdeep":"12:j/qs0e3iiii+7777777777777777777777bOnCezeJ0/tRCX+X9Rrl2lb77oIIIk:jysv7HK7qXauUUUUUUNZ","tlshash":"4a52851c2b9eec0ec3162fba6819d29622757cfa89d045373cf66b1f2af52c55c70264","first_seen":"2023-09-15T16:38:47Z","last_seen":"2026-08-10T14:37:27.336593Z","times_seen":3014,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://trust-crypto-wallet.ru/\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31556952\r\nexpires: Fri, 07 May 2027 16:00:59 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nx-nginx-request-id: 1c040fb4d532368b\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nx-strm-log-split: 0\r\nx-request-id: 6a5d4c92abf2cf94\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-08-13T22:33:22.456042Z","times_seen":29178,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Medium.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:28 GMT\r\ncontent-length: 105924\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://trust-crypto-wallet.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"75db5319e7e87c587019a5df08d7272c\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084004\r\nx-request-id: 30f1630dabf187e0615dd67a4e86975e\r\nexpires: Wed, 28 Apr 2027 10:34:28 GMT\r\ncache-control: max-age=30758400\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105924, version 1.0","md5":"75db5319e7e87c587019a5df08d7272c","sha1":"92b30527304b5dc80f45e997e0b1ac4c70110a18","sha256":"1b498b959e5b7decbf9185803591d25bc1fbf83e798372ed30d32d5c79d82ff6","sha512":"4e556d80b52ddbadddf9287f6cdaef0d12113d0fa4a07728fd67767b97806eba5fa0f82711f71e76ee2875192d7618a9b6c277ceb6d69a30f76ca8e3ebb74aa1","ssdeep":"3072:7Jk35GDAni+UzuVEjLH8MSP02J5E4ZjJffp:7ys0iIEjz8MNGRfp","tlshash":"3ca312f46132150feebafcb00b9354415488ea21d39746ebeb74a5a3644dcdb8ea06c3","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-13T20:07:11.455105Z","times_seen":10902,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":339,"dns":21,"connect":44,"send":0,"wait":441,"receive":44,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T10:34:27.946Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:27 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3311)","md5":"8d1597ece103b8a5d8ad8d6dc23c466d","sha1":"b02797e902d15bc6bfabac1a0da546a97c813511","sha256":"e3a79faf887d839e60a3353de939c1a30da54cb0047dd8ece23837ba0cb5fbe1","sha512":"cb4bdb05bc4d751a484a856921dbd394aa4ad48b22bd7ec3e49c17f5e37d5ce61f6faab19f8cdd2739fd9ecdc5e0328d7366ac6bef7e339afed21855b4f4dd90","ssdeep":"192:pQA+AmoV0bGaN98BvFmXTbpCPHby0LlQavf+xypVmerCyL5TV9qE:l+voeOd+pmO+d+4Dr/Zz","tlshash":"6c2267666842f17e02871986e2377f4d7197801bdf078948f7ec00a61bd1d61eac2f68","first_seen":"2026-05-07T10:35:11.037571Z","last_seen":"2026-05-07T10:35:11.037571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":24,"dns":1,"connect":28,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/parking-crew.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.090Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-crew.js HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 48432\r\nLast-Modified: Mon, 01 Dec 2025 15:17:45 GMT\r\nConnection: keep-alive\r\nETag: \"692db199-bd30\"\r\nContent-Encoding: gzip\r\nExpires: Tue, 02 Dec 2025 15:17:45 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10833)","md5":"f5d55e5c13a0f422e6aa93f73f11eb27","sha1":"5be344a71c5ef5e0c1e91a15a76d0058470f53fa","sha256":"bb094ac80e1353aad2bba1345780ab26350dded51010c9e3c0409b32e2024e97","sha512":"7ee0d3eab7a5fda298e9c50e784afbf6cd3368fa9f2f366e3efc0ffc7b65f5b5c0b5c5b7e8c848da44cb2940ccf092bb33be5c72eedd5c90134372807bb492ae","ssdeep":"1536:A17Rb2GXVvi6h6G1c+4mzAbxmyBpdqSw76R6XkGGcsiDya4FEz0uABBxm4thhryI:kRbZUzokXrJuAIqhpyW+BA6MS2","tlshash":"36e307c8b5e17c6113b3206964afa4cbf2375948684d8410b15ef8e5bc7ca6e9233f2d","first_seen":"2024-12-02T03:59:11.430036Z","last_seen":"2026-08-09T19:47:09.408516Z","times_seen":853,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":19,"dns":1,"connect":28,"send":0,"wait":28,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reg.ru/domain/shop/get_parking_info?dname=trust-crypto-wallet.ru\u0026rand=0.2971878974337959\u0026callback=ondata","fqdn":"www.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reg.ru","organization":"Registrar of domain names REG.RU LLC"},"issuer":{"commonName":"GlobalSign GCC R3 EV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Nov 2025 08:59:55 GMT","end":"Wed, 09 Dec 2026 08:59:54 GMT"},"fingerprint":{"sha1":"44:8E:D8:54:C0:26:75:15:9E:B5:ED:77:FB:D0:73:17:AF:CE:AE:F3","sha256":"06:7B:34:65:88:F3:9A:6E:3D:73:2A:64:5C:03:87:9F:5A:95:BA:DF:45:E6:07:0B:F7:6A:56:5D:F7:ED:73:00"}}},"request":{"raw":"GET /domain/shop/get_parking_info?dname=trust-crypto-wallet.ru\u0026rand=0.2971878974337959\u0026callback=ondata HTTP/1.1\r\nHost: www.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: sw\r\ndate: Thu, 07 May 2026 10:34:28 GMT\r\ncontent-length: 13602\r\ncache-control: no-cache\r\nset-cookie: sw_rh=dc7c68c0a509765037a978ed1110fa7c; domain=reg.ru; Path=/; HttpOnly\nsw_rf=XEREQgIaHVZAZNZXHItDStxAKxdPVVpVX0R/RzQeS8rPBA==; domain=reg.ru; Path=/; HttpOnly\n__js_p_=68,900,0,0,0; Path=/\r\ncontent-type: text/html; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13602,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9177)","md5":"e1f2c4fc9a0d479e448fcb683b5114f1","sha1":"769afc3ec42ca148db0fdd7771a8ba444b21fb7d","sha256":"d0db68a344d1ad23628a7baec8bdbdf58a763073717bd3cf01ebba3d3478e8ef","sha512":"4cd45ae652b39a3f56c0727b5ef83b28af1939c2a3ff1cc0b89b519664e6d5f11683cd518e4154d92bc408366afbf0519fd8818846395da4c5bb1e0279c43fad","ssdeep":"192:8I96MKMSnA/3V3TE1WK4JrdqdGqT//PHvOwyW30WAibgrh9kXElz7VUZHUgc5a+i:mMKvSTw49dePHvdE66Q0lzBst","tlshash":"0c526b782807752a575338a91ebf134d6cb705635598f404bc4c93d46fa8f0689bbdec","first_seen":"2026-03-25T22:18:30.064372Z","last_seen":"2026-08-13T16:08:42.711541Z","times_seen":1348,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":246,"dns":1,"connect":57,"send":0,"wait":58,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nexpires: Thu, 07 May 2026 11:34:29 GMT\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncache-control: private, max-age=3600\r\nx-content-type-options: nosniff\r\netag: \"d433434ad6593a81b58f8b44f00e98ef-1304935\"\r\nx-yandex-req-id: 1778150069041093-2573116532481006189-balancer-l7leveler-kubr-yp-vla-249-BAL\r\nset-cookie: pi=aT5U+8Uku2sfDy7PuwPr1ft3pLah9WeBYXVrtl7At6732aOc1dv4Va10LxLMIYVo1RCHuclizW+yW9VSfYgzw7el1Wg=; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=bOSS5n2AOd4Ew/sWFmMcVvg+/JXWEc/C3lodNnuJfX7nT68pG16emenw/F4i3a++zpCfOpaMmJ1nAGSgfWXY4Lj3IHo=; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=4810061891778150069; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=5756492581778150069; Path=/; Domain=.yandex.ru; Expires=Fri, 07 May 2027 10:34:29 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YLXV8c8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Fri, 11 Jun 2027 10:34:29 GMT; SameSite=None; Secure\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":388583,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"4b92f1e584a7799469971dd2e5c96e46","sha1":"1a150e22500e5833125d7492fb082a4327519fd8","sha256":"4ef89a5e7a840e2689887b748050f6f87bb8c3d855601947752dbcaf3e610fa2","sha512":"a8d682cbce4d8574c1714eefd6c58c94ad4a6b8623ea8062bb27307d7ae70db98e08ec1972825b1df02dea5f6c28bf98f92759374c6b099951cd9b5ebc899b05","ssdeep":"6144:SdZ3IBgzc6AAt+kzP0KO22jSk7n3NuzLWOtdQylqJlhvUrN0y4eFdtL00b78Pfey:GncWE2+","tlshash":"5884b69db1e2b4a143d761a4803f5a0bf23a6955780e9090e321e8d5bdbc99f9133f3d","first_seen":"2026-05-07T10:35:11.041203Z","last_seen":"2026-05-07T10:35:11.041203Z","times_seen":1,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":141,"dns":17,"connect":46,"send":0,"wait":62,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-b3f8aa7d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-b3f8aa7d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3884\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"28da4b584da2cf67755881ebbcf6d298\"\r\ncontent-encoding: br\r\nexpires: Sat, 06 May 2056 16:16:04 GMT\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 20 Apr 2026 15:11:46 GMT\r\nx-strm-log-split: 3\r\nx-request-id: b0b00fd568be8739\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9202)","md5":"bfb34149de2d4fa1703203ba3bb26115","sha1":"f6aeb7d5cda7f8cf0e969524b30e3c39efb4736c","sha256":"b370e738d148cee40305e9bb53a2a8ab7337f7c2fea0b33388dfb8ec32997df8","sha512":"b075560a6418993a12675bed5ac5f1c86b7f59bd5b684a81b7e8ce7b299fe8cd4f6fbdee1a82fbf87d299b5c3aeace0e2b6cde9441053d9bd4d653c40f470cbb","ssdeep":"192:emKFHNNSZkrXmIldQs+mLXk5y4OYq7YLYIPZqb4MVA9Xmd:elFn8CXys+6krqcsp8My9X0","tlshash":"de12d9f532a1b8c412f669c1085f557b01ba7e07b90e255e872699927d240ce60f3fef","first_seen":"2026-04-24T11:53:44.770975Z","last_seen":"2026-05-27T09:05:06.055482Z","times_seen":2892,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":55,"dns":4,"connect":13,"send":0,"wait":13,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/17817361?target-ref=http%3A%2F%2Ftrust-crypto-wallet.ru%2F\u0026pcode-version=1304935\u0026pcodever=1304935\u0026comboblock-unencoded-vast=1\u0026ad-session-id=4999591778150069358\u0026target-id=8620156\u0026pcode-test-ids=1387854%2C0%2C49%3B1552349%2C0%2C87%3B1471934%2C0%2C52%3B1534007%2C0%2C23%3B1538640%2C0%2C46%3B1549205%2C0%2C29%3B1513556%2C0%2C8%3B1543959%2C0%2C21%3B1553597%2C0%2C45%3B1485712%2C0%2C10%3B1536912%2C0%2C25%3B1556772%2C0%2C97%3B1513550%2C0%2C30%3B1561863%2C0%2C63%3B1562024%2C0%2C31%3B1550660%2C0%2C35%3B1543607%2C0%2C94\u0026csrf-token=7718e6bc55e567dcc304a390cd6a76fd166919b7%3A1778150069\u0026pcode-uid=6615079171778150069\u0026pcode-flags-map=eJyFVl2P2zYQ%2FC9%2BPgT8lES90eLKJo4mFZKSzwmKhZNcWqBGWrTXokVw%2Fz2Q5TqRXdhPBgzOcHdmdqmvi51OXcp66WCAuKjff138vT%2F89byoF%2FRNxcUbKgiTi4fFy%2FOfL%2FbT%2BLcsCK344vWnh8WgE05gHCAmG%2FycgRNaVMUMzUUpZHVEG5uOUAMpx7BDeMoQvXbYRNDZDoDaYJ8gYuNCAoQBfJ5d8PzP7zNyIRQr5eL14c4Rdq4%2BQqNd0zudASO87SFl3EBeB4NtiLiNuusgYh%2Fd7YslkUIeWd9GXDrdPKKzKWPjLPiM1qS5MkQxXikh66oqS8YoqTlRpGCkkDUlUohCyarmVBWqLCSvORGUME54rRQVhMiyppQQSllJak4rKkhRjscoI6RitKZEECGkYjVnlDNRVbzmjIuSqJLXijNVSCnmTZSUMHpsQhuDdqNXgCvtHMQdWo8e%2BhhGt%2BzK31ajooqI%2F4isX%2BH4k20Yze101BvIENNRYWNTjnbZ58vwXJMWSlW3vR2PTPeCP0ari7C0Bk1vzU1ySSqlJv%2F6BJjGJPhstUMXtBlzONaaHm2HOTzC7Uol5bwi54i1Y7845sgbHKyBgMmFjDmgCZvbTFxQXp3LyjquIGOEdpLOYdcEA%2FcpyhsUg073CYojwQo8RO0w5agzrHa4tXmNodONzbsZyef94fBh%2F%2FFX%2FO3L4d85naCUqiNda59wa70JW%2FQhdCP57UqELItpdB1o04a4SThoZ804vd06%2BDtSCFmK6eqjbndWl1BMXSw%2BWpTyx3ilHEFvTqZuYRkSI7TCgd9TlJDvlvjTrstZN2tMa23Cdob%2F%2BHK4wFeFmPKVUocbbR3G%2FlRFa12%2B0PEKLxQjUx8mdVOqu5Ds1QheASmXcopCp2OCKX5ofRvQ%2BhxOG6IJvrUrHMSM7GX%2Fx8%2FPLxeFcCXVD3xpHa1%2FxDEYyb4DTKGPzT1Tzxxt71xqIoDHlCKuQRuImPoIt7uSXKrJjrXuOushpRE1wA5tcyHJL%2Fsvny52jizpFEpICXwDuAlL6wDbe3NVqBNwdHFyL0Lqx2XR3F2HUhbl6R07mxjaNsH8hfz8ASW5NpGclnMbnlAb3eX%2FeeOudCpoVfDv43P1vTCODL%2F8VmCEjRv59RuftWP1\u0026pcode-icookie=2RGh%2F9jZesU9LG35ZL31tULW96c4dgKeAA8EaFJq%2FXRSPvpI28Chih4px2V0m6fK0TZO0va1k7NuwGPGW89Ayf%2Br3pY%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=en\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=197362337185794\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2Ftrust-crypto-wallet.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A996%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A142%2C%22top%22%3A1059%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1380\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CkqpopAcu-sC1FzDbLkkuJsz9NDDTv324dLIZtkp2UmasEl7WFnq60u6KrW3t_eJRN8hPMkhiizLbgX0mQHuGCFOKLFl0vZ3eMcBZ4QZMUYYYeZYWPmCKBa2QBzF1a-CFhWoGafQC7Mf0CyoxcicjH0EdgaxGMXohXVQjINFKmxEtGrzrCqT2FynujLcQCBoldDmdd0VRmHG0vQUSxPb-K6Ym9hrdhQ7XSIILAtcOb6sNlBqT4AhP7BFvhd6rtfkUQFWY68XSLecylJjTIJS2AsGCiJaHKhvAt-DfQe09SfMOBkrlga329FtXvv5ge9FsdiHpaOV9joSu-HKPLf6eL4kqL7rheGaKCd2XX31wzMJCxDjD2jGKub9ORm9F9q8sgry8DCKCX7PmOdAP0-Yp-6RIS38wS3NjDtiLKuHTD8CFgWbiEOlQu-Zc7ZxxpuzXoRDj6Gb5QSeRjGH53HlERnNxdLl9km1geHZWOJ61XYF8kihfHxera7XNeTzFbh26Nj-lcNVoeDdKcQPrKZCtXyQW8hvYp_H7zp7YQjxkRomrFyn_esnnkgegdG8hjtKCSjNgedfJHSt1RC0mdHMIG1Rr_TZIpV4ZlegVLQQLsXCu3c7RcOR_vmhF6RR4TVdkKf-GbhVScZW6g2cFwwu9QsBhF782vgyxQHjQMi_ZvTCfC9pmglCAvIVoXxOFQHmBjIPhLxexewZ6_VF_inqNhKiyJ3aMAtKf7FG5nfMVMD3LoNwyb8r7ZBW2NkvSBJtrSwZozD-g71w5kFj6FJ_HgvH6eOUBHR7QE-C0VMSb0fODrqyKwBVK2Daj_5uNRuWL2kI1UPMCKyL2m15EDLWAPrruzo3CgrRAyhvNfVzPt_1NLFNz-gT2Mhf71k_Ubh1nSxnpD49zJU5NyHOoIp7c2Y7twf3ZLA55hTWGMM648AnaGpC7_WhG9cjgNlBpxt9KszeeimZhbBUkpHEFJfPYU-ktDuwYfueSIbnurXZqvxBVeff2imI-fROkYyUx0tcy3DtwHGaTRWMZLmdPehTFfOUNNV06GDBQRixZDyAGplfPdFGs0lK0vdCRUQj5RWaXvjd_yKSyoryEzaJ_6AKXd8iI90kTQC4FtxLuAEAIwCmy7PxPVFVCn170tYE-nOwN3NfaMxV-3fcGUCDAzpp99AvoXuOOZlGvBvYJwhPUDUxwJHECjIDweVhqtdsPaXhZUjjlhgQ1upY4EmlBGJ3cbfWYPmDqKeM2BIe3_nNkDKMjEOFsaeyj0SFdXjAhD-QHLC6DqlqAFInzUcFJ_gmp2mTehM6ARHfm0ZPOSRd8lD3N5GIjJEQQxdc8nmaMGfShA2SDnYEkA%3D%3D\u0026uniformat=true\u0026callback=Ya%5B7008471165494%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /ads/meta/17817361?target-ref=http%3A%2F%2Ftrust-crypto-wallet.ru%2F\u0026pcode-version=1304935\u0026pcodever=1304935\u0026comboblock-unencoded-vast=1\u0026ad-session-id=4999591778150069358\u0026target-id=8620156\u0026pcode-test-ids=1387854%2C0%2C49%3B1552349%2C0%2C87%3B1471934%2C0%2C52%3B1534007%2C0%2C23%3B1538640%2C0%2C46%3B1549205%2C0%2C29%3B1513556%2C0%2C8%3B1543959%2C0%2C21%3B1553597%2C0%2C45%3B1485712%2C0%2C10%3B1536912%2C0%2C25%3B1556772%2C0%2C97%3B1513550%2C0%2C30%3B1561863%2C0%2C63%3B1562024%2C0%2C31%3B1550660%2C0%2C35%3B1543607%2C0%2C94\u0026csrf-token=7718e6bc55e567dcc304a390cd6a76fd166919b7%3A1778150069\u0026pcode-uid=6615079171778150069\u0026pcode-flags-map=eJyFVl2P2zYQ%2FC9%2BPgT8lES90eLKJo4mFZKSzwmKhZNcWqBGWrTXokVw%2Fz2Q5TqRXdhPBgzOcHdmdqmvi51OXcp66WCAuKjff138vT%2F89byoF%2FRNxcUbKgiTi4fFy%2FOfL%2FbT%2BLcsCK344vWnh8WgE05gHCAmG%2FycgRNaVMUMzUUpZHVEG5uOUAMpx7BDeMoQvXbYRNDZDoDaYJ8gYuNCAoQBfJ5d8PzP7zNyIRQr5eL14c4Rdq4%2BQqNd0zudASO87SFl3EBeB4NtiLiNuusgYh%2Fd7YslkUIeWd9GXDrdPKKzKWPjLPiM1qS5MkQxXikh66oqS8YoqTlRpGCkkDUlUohCyarmVBWqLCSvORGUME54rRQVhMiyppQQSllJak4rKkhRjscoI6RitKZEECGkYjVnlDNRVbzmjIuSqJLXijNVSCnmTZSUMHpsQhuDdqNXgCvtHMQdWo8e%2BhhGt%2BzK31ajooqI%2F4isX%2BH4k20Yze101BvIENNRYWNTjnbZ58vwXJMWSlW3vR2PTPeCP0ari7C0Bk1vzU1ySSqlJv%2F6BJjGJPhstUMXtBlzONaaHm2HOTzC7Uol5bwi54i1Y7845sgbHKyBgMmFjDmgCZvbTFxQXp3LyjquIGOEdpLOYdcEA%2FcpyhsUg073CYojwQo8RO0w5agzrHa4tXmNodONzbsZyef94fBh%2F%2FFX%2FO3L4d85naCUqiNda59wa70JW%2FQhdCP57UqELItpdB1o04a4SThoZ804vd06%2BDtSCFmK6eqjbndWl1BMXSw%2BWpTyx3ilHEFvTqZuYRkSI7TCgd9TlJDvlvjTrstZN2tMa23Cdob%2F%2BHK4wFeFmPKVUocbbR3G%2FlRFa12%2B0PEKLxQjUx8mdVOqu5Ds1QheASmXcopCp2OCKX5ofRvQ%2BhxOG6IJvrUrHMSM7GX%2Fx8%2FPLxeFcCXVD3xpHa1%2FxDEYyb4DTKGPzT1Tzxxt71xqIoDHlCKuQRuImPoIt7uSXKrJjrXuOushpRE1wA5tcyHJL%2Fsvny52jizpFEpICXwDuAlL6wDbe3NVqBNwdHFyL0Lqx2XR3F2HUhbl6R07mxjaNsH8hfz8ASW5NpGclnMbnlAb3eX%2FeeOudCpoVfDv43P1vTCODL%2F8VmCEjRv59RuftWP1\u0026pcode-icookie=2RGh%2F9jZesU9LG35ZL31tULW96c4dgKeAA8EaFJq%2FXRSPvpI28Chih4px2V0m6fK0TZO0va1k7NuwGPGW89Ayf%2Br3pY%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=en\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=197362337185794\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2Ftrust-crypto-wallet.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A996%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A142%2C%22top%22%3A1059%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1380\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CkqpopAcu-sC1FzDbLkkuJsz9NDDTv324dLIZtkp2UmasEl7WFnq60u6KrW3t_eJRN8hPMkhiizLbgX0mQHuGCFOKLFl0vZ3eMcBZ4QZMUYYYeZYWPmCKBa2QBzF1a-CFhWoGafQC7Mf0CyoxcicjH0EdgaxGMXohXVQjINFKmxEtGrzrCqT2FynujLcQCBoldDmdd0VRmHG0vQUSxPb-K6Ym9hrdhQ7XSIILAtcOb6sNlBqT4AhP7BFvhd6rtfkUQFWY68XSLecylJjTIJS2AsGCiJaHKhvAt-DfQe09SfMOBkrlga329FtXvv5ge9FsdiHpaOV9joSu-HKPLf6eL4kqL7rheGaKCd2XX31wzMJCxDjD2jGKub9ORm9F9q8sgry8DCKCX7PmOdAP0-Yp-6RIS38wS3NjDtiLKuHTD8CFgWbiEOlQu-Zc7ZxxpuzXoRDj6Gb5QSeRjGH53HlERnNxdLl9km1geHZWOJ61XYF8kihfHxera7XNeTzFbh26Nj-lcNVoeDdKcQPrKZCtXyQW8hvYp_H7zp7YQjxkRomrFyn_esnnkgegdG8hjtKCSjNgedfJHSt1RC0mdHMIG1Rr_TZIpV4ZlegVLQQLsXCu3c7RcOR_vmhF6RR4TVdkKf-GbhVScZW6g2cFwwu9QsBhF782vgyxQHjQMi_ZvTCfC9pmglCAvIVoXxOFQHmBjIPhLxexewZ6_VF_inqNhKiyJ3aMAtKf7FG5nfMVMD3LoNwyb8r7ZBW2NkvSBJtrSwZozD-g71w5kFj6FJ_HgvH6eOUBHR7QE-C0VMSb0fODrqyKwBVK2Daj_5uNRuWL2kI1UPMCKyL2m15EDLWAPrruzo3CgrRAyhvNfVzPt_1NLFNz-gT2Mhf71k_Ubh1nSxnpD49zJU5NyHOoIp7c2Y7twf3ZLA55hTWGMM648AnaGpC7_WhG9cjgNlBpxt9KszeeimZhbBUkpHEFJfPYU-ktDuwYfueSIbnurXZqvxBVeff2imI-fROkYyUx0tcy3DtwHGaTRWMZLmdPehTFfOUNNV06GDBQRixZDyAGplfPdFGs0lK0vdCRUQj5RWaXvjd_yKSyoryEzaJ_6AKXd8iI90kTQC4FtxLuAEAIwCmy7PxPVFVCn170tYE-nOwN3NfaMxV-3fcGUCDAzpp99AvoXuOOZlGvBvYJwhPUDUxwJHECjIDweVhqtdsPaXhZUjjlhgQ1upY4EmlBGJ3cbfWYPmDqKeM2BIe3_nNkDKMjEOFsaeyj0SFdXjAhD-QHLC6DqlqAFInzUcFJ_gmp2mTehM6ARHfm0ZPOSRd8lD3N5GIjJEQQxdc8nmaMGfShA2SDnYEkA%3D%3D\u0026uniformat=true\u0026callback=Ya%5B7008471165494%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: upgrade-insecure-requests; default-src 'none'; base-uri 'none'; script-src 'report-sample' 'unsafe-inline' 'self' yandex.ru an.yandex.ru api-maps.yandex.ru mc.yandex.ru yastatic.net pcode.yads.tech *.maps.yandex.net; style-src 'unsafe-inline' yastatic.net; img-src 'self' data: avatars.mds.yandex.net favicon.yandex.net *.captcha.yandex.net yastatic.net *.maps.yandex.net *.yandex.ru avatars.yads.tech; media-src blob: strm.yandex.ru *.strm.yandex.net; font-src yastatic.net; connect-src 'self' blob: abs.yandex.ru an.yandex.ru yandex.ru mc.yandex.ru yastatic.net log.strm.yandex.ru display.yads.tech display-logs.yads.tech; frame-src yandexadexchange.net yandex.ru an.yandex.ru; report-uri https://csp.yandex.net/csp?from=yabs\u0026project=yabs\u0026yandex_login=\u0026platform=\r\nexpires: Thu, 07 May 2026 10:34:29 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 07 May 2026 10:34:29 GMT\r\nx-ads-loadaverage: 0.388889\r\nx-yt-trace-id: 0-1-0-0\r\nuniformat-product-type: None\r\npragma: no-cache\r\nx-ads-loadaverageonarrival: 0.277778\r\nx-ads-service-name: yabs-server.partner.meta\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: http://trust-crypto-wallet.ru\r\nx-ads-degradation: 0.000000\r\nx-ads-cpu-exts: laas=548,bigb.eagle=3032\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ntiming-allow-origin: *\r\nx-ads-queuetime: 0.063000\r\nset-cookie: yuidss=4982440001778150069; domain=yandex.ru; path=/; expires=Sun, 04-May-2036 10:34:29 GMT; SameSite=None; Secure\nbh=YLXV8c8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Fri, 11 Jun 2027 10:34:29 GMT; SameSite=None; Secure\npi=Wta9VC6Pwf2OgPvBUAKsNncgTCnf1BTq7Gdkfs5cDt4TeYJDtN4Vdy3YeRK8Axq5YB9azFqh9Ts/dIVtyjfdZHDqOMg=; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=0t2ImEcRBIxKzgR8N3nhff4yIfy3dxcPQK0RrGFl8DB6ZYUQ/cKHtE86ClyU4wACVhRE5do1CTCZexcu59Ndr+BV2Cs=; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=4676164351778150069; Expires=Sat, 06-May-2028 10:34:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=2112395641778150069; Path=/; Domain=.yandex.ru; Expires=Fri, 07 May 2027 10:34:29 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YLXV8c8GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Fri, 11 Jun 2027 10:34:29 GMT; SameSite=None; Secure\r\nx-yt-request-id: c21a1cb8-9cb8efca-5c20ad5d-6c725cc6\r\naccess-control-allow-credentials: true\r\nx-yandex-req-id: 1778150069590114-9100751262667616435-balancer-l7leveler-kubr-yp-vla-249-BAL\r\nuniformat: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":688,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cfddbf1fb21a93d5c6c925026fcb6156","sha1":"af82f66f2f06a858d91167cd0a028b47ee627e5b","sha256":"34d70c7064f8a095552eb95f04813feb099323215cb3e2926ea6a28773d648f4","sha512":"4220ecf422173df0638a16032fdae24d9b3cc83f7d6932e3c7ae40adbb660be87fd5acc85dd1cb2b9c531665a7a748791cc70c208a8397968d9e310e5fb916f9","ssdeep":"","tlshash":"9a01995460a6a886ca975138f5d53ba86cbc2372cfa9d172acdecf1e58ac1531204783","first_seen":"2026-05-07T10:35:11.046425Z","last_seen":"2026-05-07T10:35:11.046425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/parking-crew.css","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.086Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-crew.css HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 22053\r\nLast-Modified: Mon, 01 Dec 2025 15:17:45 GMT\r\nConnection: keep-alive\r\nETag: \"692db199-5625\"\r\nContent-Encoding: gzip\r\nExpires: Tue, 02 Dec 2025 15:17:45 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167558,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65054)","md5":"0a22b14e91f2531ec63161223b5494bf","sha1":"9ac1e83c788a489b573dcf416aea5557351294d6","sha256":"7a9bad2da6ded8e161ddeba26bc831ad07abc78e5c0721d660a4f509e542bcfa","sha512":"5204bb071b7f3c5a603035b2281a3f41f09f552565c574938193c16cc698dd5f719141476a584286902a668c7af3e1f3bf14d5861ee690b2475db5d174ccb15d","ssdeep":"768:ToE68+5IiAQPUycAKOL2yDoE/G8+5IiAQPUycAKOL2yDoE/K/c+AqQtw9Poltwdd:ToE1/QPU2boEp/QPU2boEy8lM00","tlshash":"28f3d4416b648c3ea6970a1dd663f8d03f0fa5b674b94acdad1ef770908f044fa0b909","first_seen":"2025-12-01T15:55:54.150171Z","last_seen":"2026-08-09T19:47:09.424729Z","times_seen":527,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/head-scripts.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.089Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /head-scripts.js HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 19126\r\nLast-Modified: Mon, 01 Dec 2025 15:17:45 GMT\r\nConnection: keep-alive\r\nETag: \"692db199-4ab6\"\r\nContent-Encoding: gzip\r\nExpires: Tue, 02 Dec 2025 15:17:45 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1406)","md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-08-11T20:54:01.888491Z","times_seen":2747,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":22,"dns":1,"connect":27,"send":0,"wait":28,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Regular.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:28 GMT\r\ncontent-length: 98868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://trust-crypto-wallet.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"dc131113894217b5031000575d9de002\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: 8de4d3d59f9fb826858fbef276b8bba0\r\nexpires: Wed, 28 Apr 2027 10:34:28 GMT\r\ncache-control: max-age=30758400\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-08-13T22:23:03.560743Z","times_seen":28377,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":342,"dns":28,"connect":41,"send":0,"wait":489,"receive":43,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-SemiBold.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:28 GMT\r\ncontent-length: 105804\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://trust-crypto-wallet.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"007ad31a53f4ab3f58ee74f2308482ce\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: 07d782ac1104d25dc3877461a1d2fc8a\r\nexpires: Wed, 28 Apr 2027 10:34:28 GMT\r\ncache-control: max-age=30758400\r\ncontent-type: font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105804, version 1.0","md5":"007ad31a53f4ab3f58ee74f2308482ce","sha1":"dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc","sha256":"152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5","sha512":"48aef263aca876ba4db5a596fbb8332524d6b440a8a516e1baa7899f2f1da0e1c44452d0380869ec455d27a6e0b931210b1fb669b36e36914ca27235f34e8558","ssdeep":"3072:wo/8sikhizn8CQRxZ9UXsfH0K1yjewt8G5VYqLS8b:a5z3iHCAHjaJtZ5dLS8b","tlshash":"6fa312cab961eaecd2b1d42806545efaacf3eff0c1e315225697014898accd35ed4f84","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-08-13T22:23:03.655396Z","times_seen":20477,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":334,"dns":23,"connect":46,"send":0,"wait":311,"receive":135,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/d608b6f7b966d1cc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1304935/d608b6f7b966d1cc.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1776\r\nexpires: Sat, 06 May 2056 16:48:40 GMT\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 06 May 2026 19:36:41 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"c68ff05e8c23d62e02a39699108f9750\"\r\ncache-control: public, max-age=946708560\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 8\r\nx-request-id: 2855bc984f42682d\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4118)","md5":"3eeb062c4382d057018c7066c97f5a0d","sha1":"558058e2cdadc9087735d229e39bc3fd3e2a5c6a","sha256":"fa8a121ae8f7e64e043495b865fe1949b915c5e620898d8dd9bfcdea9228071b","sha512":"3295d073df9db8e944ad64177bbefe6159e7464e81e7b2c337fdd5264d124e0ec94cf9f73702c31bc019f72c587f741abda2a9a36df7545e23c2e4fa5e1eceb3","ssdeep":"96:s/rjwRO8i2b4XfmP5IWiwYVdFecX65V8iYsyxht7BmaXmp6XTvTv1J0a2qo:s/rjC+27P5IJwYtXHhXQ6Hv1JzLo","tlshash":"c181e7fd3681737587c2159891bb9106b63a0d21980ab162e15e80623db4f9760fbbae","first_seen":"2026-05-07T08:54:50.627573Z","last_seen":"2026-05-08T06:48:21.370663Z","times_seen":110,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":101,"dns":3,"connect":13,"send":0,"wait":17,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/15df8c4cba173860.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1304935/15df8c4cba173860.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 132638\r\nexpires: Sat, 06 May 2056 16:48:40 GMT\r\netag: \"ea3ec97be6bfec51044e5b5c24e42245\"\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\nlast-modified: Wed, 06 May 2026 19:36:40 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 2\r\nx-request-id: 5381a9d405cc6d19\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":679154,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"a0dd1d5343a7e46c47b6781bfdf6a0dd","sha1":"a4a1042f9f80899cf4074229d531e8128094342d","sha256":"1eb88b00e591fe7ab3edb92c95747223ea4a34e4c8f7fc8af16a297ca65b2ad7","sha512":"0de0b20ba6e266ce3ba22fc70953b4fdfb6e5e0db232cdaee33e3d271281161b7df707d984db688d7134b7ccab61f839107fa73ec6fe1acba6fb40eede1faf55","ssdeep":"12288:ykzUvnhBcnzByzWKDsNoczwvCgb7AsjIxSNBpDyRMxnuOqVA1:ykzUnzrsNokwqgb7AqIxSNBpDyRMxnuq","tlshash":"92e4d78af5e1b07142e7a0f9803f160ff23a791555098094f62ae8e57eb898e5137f3d","first_seen":"2026-05-07T08:54:50.609724Z","last_seen":"2026-05-08T06:48:21.599877Z","times_seen":110,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":15,"receive":24,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Sat, 06 May 2056 16:52:34 GMT\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 4\r\nx-request-id: 149f0ee68e9a4075\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-08T13:31:08.348565Z","times_seen":28319,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":71,"dns":3,"connect":32,"send":0,"wait":31,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304935/c4838fe53f9c7980.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:29.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1304935/c4838fe53f9c7980.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://trust-crypto-wallet.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 May 2026 10:34:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 32483\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 06 May 2026 19:36:41 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\netag: \"ea536599d31b2f10c6e9383278049bf7\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 06 May 2056 16:48:40 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 1\r\nx-request-id: 007863df529ad795\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160744,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"eb965392afff268a2819b9e3756a51c2","sha1":"c43877cad074a75cf4636d09098ab4074bba4d49","sha256":"39c05e3344ac373c9e93279b51209eb9bcb5a169f451a630353e471c2076f332","sha512":"9c002a264702dfb01aea48beb4c0ac67a4010df3fa501c0993440325067b967bcc3d0352f4b1fd41d376842336bcfee08487d1ee1e0e9155865596479676a139","ssdeep":"3072:gogjYLLYHfmBWXxw4UYbmfT5aW4+UMWBWx8ncioJAGhXaf10KhCPVByNeyinPaNx:gog0Y/mBWXxw4UYbmfT5aW4+UMWBWx8T","tlshash":"7bf3c68db2e1b47142d7a0f5503f6a0af23a6459a4098094f72de9e16fb898f5137f3c","first_seen":"2026-05-07T08:54:50.595772Z","last_seen":"2026-05-08T06:48:21.404451Z","times_seen":110,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":74,"dns":1,"connect":35,"send":0,"wait":28,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trust-crypto-wallet.ru/","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T10:34:27.814Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T22:51:57.013279Z","times_seen":17877309,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"trust-crypto-wallet.ru/manifest.js","fqdn":"trust-crypto-wallet.ru","domain":"trust-crypto-wallet.ru","tld":"ru"},"ip":{"addr":"194.67.71.50","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://trust-crypto-wallet.ru/","date":"2026-05-07T10:34:28.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /manifest.js HTTP/1.1\r\nHost: trust-crypto-wallet.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://trust-crypto-wallet.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 May 2026 10:34:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4278\r\nLast-Modified: Mon, 25 Nov 2024 10:07:57 GMT\r\nConnection: keep-alive\r\nETag: \"67444c7d-10b6\"\r\nExpires: Tue, 26 Nov 2024 10:07:57 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4278,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4278), with no line terminators","md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-08-11T20:54:01.891846Z","times_seen":2758,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":21,"dns":0,"connect":27,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"trust-crypto-wallet.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
