{"report_id":"e5fc2ea1-1b33-4633-8cef-615ff6e67e7b","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-01-27T17:02:55Z","url":{"schema":"http","addr":"trustwalletbnb.online","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trustwalletbnb.online/","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"title":"🚀 BNB USDT Airdrop Claim","dom":{"size":10782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e895715294cf963f291d4d817d94bafb","sha1":"671ac5eb9b656abd854cf99bb23909d0d326626a","sha256":"66e776dc8cc66220536e97c1999ec77b62e0c33ac53adf56388e5dacd3d7e755","sha512":"21c29dc40336ce74248cec299f6184cae0b9bfb848173b6a61063fc4a61b6e6b7dab9931ccd9f852cc195c0f79b5fc52da4976dfda5a2f1521d13971f302c2f7","ssdeep":"192:gIG61wf3vQU2xUbaIJhe+GpPFmOGq1kKXD0fJCWms50vwNZjyys0vsUMPOa4gfmm:gIwGzorN5xMQs9u5s","tlshash":"d422c9ba52b63030051329b12b3f32113536f04baa09d8d67a6dc3124fae7a6cdd57de","dom_hash":"domhash7fb744c8a80ec40792f3e32060c3ce54","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustwalletbnb.online","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T17:02:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-27","alert":"Detects file containing Telegram Bot API","trigger":"trustwalletbnb.online/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"trustwalletbnb.online","ip":{"addr":"172.67.133.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-25","domain_rank":0,"first_seen":"2026-01-27T15:29:43.153255Z","last_seen":"2026-01-27T15:29:44.943183Z","alert_count":2,"request_count":2,"received_data":12185,"sent_data":939,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-25T23:20:32.712034Z","alert_count":0,"request_count":2,"received_data":1531481,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"trustwalletbnb.online/","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"f619675300aaf2b1ac0a98f1e79745d8","sha1":"f5a3c30c74167571dfb45021aacbce63985bf9ab","sha256":"8ddcb51c65092f7ebd918bc86037d43f731a0dbc67da49dafa6f431d5e1c1244","sha512":"985b42d66643ab21824584b88076337bfb7ec231cdec77f5642253be22b642009852fdd5d037dfb3ed686700bcd1cc1c4820c85ebed76c903c5820791ba52724","size":8741,"token":"7516370042:AAFFlYubaJ_1hzLdiNWNwW4H57z1Q2Xf5hg","is_revoked":false,"bot":{"token":"7516370042:AAFFlYubaJ_1hzLdiNWNwW4H57z1Q2Xf5hg","user_id":"7516370042","username":"minrfe_bot","first_name":"mine","last_name":"","chat":{"chat_id":"6887482746","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/ethers@5/dist/ethers.umd.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab0d5489a3e8523ec514b501c29d1d18","sha1":"3aed75d519843261ded9370386f94b6c4f10d07f","sha256":"755f1f8a4cdd8c63056e2fa2f1e44e16c82eface12eb1afe71306333601953ac","sha512":"0b6d47994a9e4998932f77faeb0ab60bd85ff38e8c6ee1a547f42d7a81aa00c4f5c27bc602ae89fedaaaecbc1067e3560de04c1f4942e4c4ce7d531e686bdc94","ssdeep":"12288:TfBmYIBkkAJs+PjH8XbY/nN1eEGt2FQ68QW:TfykXPBnNUEGt3R","tlshash":"7ff43b81b3b1b0b583c729a4143f6046f63af42a50584068f759faf279f9d8c956bb3c","size":765054,"data":"","first_seen":"2025-09-10T08:39:20.313903Z","last_seen":"2026-03-17T17:16:51.27954Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletbnb.online/","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f619675300aaf2b1ac0a98f1e79745d8","sha1":"f5a3c30c74167571dfb45021aacbce63985bf9ab","sha256":"8ddcb51c65092f7ebd918bc86037d43f731a0dbc67da49dafa6f431d5e1c1244","sha512":"985b42d66643ab21824584b88076337bfb7ec231cdec77f5642253be22b642009852fdd5d037dfb3ed686700bcd1cc1c4820c85ebed76c903c5820791ba52724","ssdeep":"192:FGpPFmOGq1kKXD0fJCWms50vwNZjyys0vsUMPOa4gfmjYKDly20CBJp5n:FGzorN5xMQs9u51","tlshash":"2d0283ea15773030092329b56b2f31123536b04fae49d8c67a6dc3120faa766cdd5bda","size":8741,"data":"","first_seen":"2026-01-27T15:29:46.321057Z","last_seen":"2026-01-27T17:02:57.128829Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-27","alert":"Detects file containing Telegram Bot API","trigger":"trustwalletbnb.online/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustwalletbnb.online/","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T17:02:34.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletbnb.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:24:48 GMT","end":"Sat, 25 Apr 2026 05:23:33 GMT"},"fingerprint":{"sha1":"CA:6C:E0:43:E0:B2:D6:95:FA:E5:7F:BF:A0:7B:0A:00:5D:F2:7B:D1","sha256":"73:33:B4:B1:38:EA:BC:3D:C1:0C:14:AA:03:84:36:21:2A:33:11:4E:ED:48:53:F5:AF:4C:ED:64:85:7D:7E:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustwalletbnb.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 17:02:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 27 Jan 2026 08:24:03 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cwpe6UwQOKUjCLmqYai3UhinsFG4JYcwFgqWQrgtjWumfDsI93lPjb1OPHeu7GprAGJCsPNUMXBMvn8%2BkpEz%2F8ZyqinvhYT1YdZwjvZ8cudysmd8Cw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c49d18708fcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":10674,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"dd31806809aefd44287cd338726899b0","sha1":"7078e8db9bd48f63a57b008d885366b021f4bbc5","sha256":"c0b6a6171ad0543d255c7158cdc55230c92b16e463da9bec4f811a0630ee367c","sha512":"d42cb68345b1d6660dd3463e59f4649f484f2c8eb52189800af33f70b277b25f72af7554995077684b2bcbe6d30060edf42dd878179e409dcdce5bb2d18d9b55","ssdeep":"192:/IG61wf3vQUqxUbaIJPP+GpPFmOGmbkKpDlGfJIWms5CvuuZlVyyO0vsYMP8aLl4:/IrGLsJN5jnQscuLa","tlshash":"dc22b8a612b62030051315b52b7f32123536b00baa4dcce67a6cd3124f9e7a7ccd6bde","first_seen":"2026-01-27T15:29:46.314219Z","last_seen":"2026-01-27T17:02:57.126159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":26,"dns":4,"connect":1,"send":0,"wait":111,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-27","alert":"Detects file containing Telegram Bot API","trigger":"trustwalletbnb.online/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"unpkg.com/ethers@5/dist/ethers.umd.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwalletbnb.online/","date":"2026-01-27T17:02:34.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /ethers@5/dist/ethers.umd.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletbnb.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 27 Jan 2026 17:02:34 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 51\r\ncf-ray: 9c49d1891aa856c0-OSL\r\nlocation: /ethers@5.8.0/dist/ethers.umd.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T05:39:34.094932Z","times_seen":14457015,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":18,"dns":2,"connect":1,"send":0,"wait":366,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/ethers@5.8.0/dist/ethers.umd.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustwalletbnb.online/","date":"2026-01-27T17:02:34.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /ethers@5.8.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustwalletbnb.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 17:02:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c49d18b8de656c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 5593\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 27 Jan 2027 17:02:34 GMT\r\nlast-modified: Tue, 27 Jan 2026 14:01:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:dV8fikzdjGMFbi+i8eROFsgu+s4S6xr+cTBjM2AZU6w=:\r\nfly-request-id: 01KFZW413DF7N90FA2KJKHRZJF-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab0d5489a3e8523ec514b501c29d1d18","sha1":"3aed75d519843261ded9370386f94b6c4f10d07f","sha256":"755f1f8a4cdd8c63056e2fa2f1e44e16c82eface12eb1afe71306333601953ac","sha512":"0b6d47994a9e4998932f77faeb0ab60bd85ff38e8c6ee1a547f42d7a81aa00c4f5c27bc602ae89fedaaaecbc1067e3560de04c1f4942e4c4ce7d531e686bdc94","ssdeep":"12288:TfBmYIBkkAJs+PjH8XbY/nN1eEGt2FQ68QW:TfykXPBnNUEGt3R","tlshash":"7ff43b81b3b1b0b583c729a4143f6046f63af42a50584068f759faf279f9d8c956bb3c","first_seen":"2025-09-10T08:39:20.313903Z","last_seen":"2026-03-17T17:16:51.27954Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustwalletbnb.online/favicon.ico","fqdn":"trustwalletbnb.online","domain":"trustwalletbnb.online","tld":"online"},"ip":{"addr":"172.67.133.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustwalletbnb.online/","date":"2026-01-27T17:02:35.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustwalletbnb.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:24:48 GMT","end":"Sat, 25 Apr 2026 05:23:33 GMT"},"fingerprint":{"sha1":"CA:6C:E0:43:E0:B2:D6:95:FA:E5:7F:BF:A0:7B:0A:00:5D:F2:7B:D1","sha256":"73:33:B4:B1:38:EA:BC:3D:C1:0C:14:AA:03:84:36:21:2A:33:11:4E:ED:48:53:F5:AF:4C:ED:64:85:7D:7E:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustwalletbnb.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustwalletbnb.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 17:02:35 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKEXE6in7nvUKoPC9ziIgd%2FpfZutRzBlKneGF9SxM0KSgyt7Hhywf0Dd56hymySvFR%2Fj3KGyoNN8hDhlrEShkDhFVAOHrtQuj5qPbbj%2Byuf1ExWjyA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c49d18ebdb1a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1e0e26a071d547ac16a9cf23f28fabcd","sha1":"50dd0694d628b2f1b35db9428a26beed620ee8d6","sha256":"a742ff8a7de8a21c72f5a41d6f1c5e4d40bfc5a80f363a3a4a62a2398ef8fe71","sha512":"7ec6f3486d908a2addd3670639a562d73b15d3bf33ed4b13fdea1f0d813849ad7c8a66faf59aa4edbacbf131d6f771700a54c1c9a6af19c15314035d03bc9347","ssdeep":"","tlshash":"59d0959e51c333970812159039c611d6234813f7783e85f87dc6e447625863dccda2cd","first_seen":"2026-01-27T15:29:46.319787Z","last_seen":"2026-01-27T17:02:57.128145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}