{"report_id":"1df13fe3-dfaa-4601-9ae5-f190d1be819f","version":6,"status":"done","tags":[],"date":"2026-02-13T22:27:00Z","url":{"schema":"https","addr":"cardprotections.com/","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"ip":{"addr":"64.89.163.4","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cardprotections.com/","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"title":"ICICI Bank — Credit Cards (Refined)","dom":{"size":9313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2bd43a0d12b673e3be8e129696f1c0cf","sha1":"ff9aabf1a24dcbacad4e8a41017de484f1e13a12","sha256":"33e97fc8715e499c85bcc75a6c4dba5b895436a1e88da95d0259ffa184e5ebb3","sha512":"89d1bcbfa9b39fba850fb51cdfc9ef9566ea320dce1d2722feb7a518a32a78cde9c40c8ccc3cb1f09b4e99f22c397aa91926486efad40ba3ae6e885a7b581006","ssdeep":"192:Brdj578y0SXVw4FmFCC9dZGqdVpsNiijMvQ/cMiNifCUxfHQuExRsHRQP2JP3rPJ:Brog+ulEifNoySx6","tlshash":"29129597d2f1241f3f53e8a6f3e6262f2ba0c043d885595d3aec4948cfc99b1869711e","dom_hash":"domhashf61b5f238e6006e2828c7e4b89069f9f","first_seen":"2026-02-13T22:27:04.55847Z","last_seen":"2026-02-13T22:27:04.55847Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cardprotections.com/","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"ip":{"addr":"64.89.163.4","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:27:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"cardprotections.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"media.banksathi.com","ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2016-02-09","domain_rank":0,"first_seen":"2023-02-23T23:18:54Z","last_seen":"2026-01-23T07:53:12.683307Z","alert_count":0,"request_count":1,"received_data":59956,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"www.cardexpert.in","ip":{"addr":"172.67.162.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-12","domain_rank":2614762,"first_seen":"2017-02-02T20:43:12Z","last_seen":"2026-01-23T07:53:12.625772Z","alert_count":0,"request_count":1,"received_data":64784,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"m.media-amazon.com","ip":{"addr":"151.101.1.16","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2016-08-18","domain_rank":3022,"first_seen":"2017-01-30T05:27:40Z","last_seen":"2026-02-11T23:15:17.82021Z","alert_count":0,"request_count":1,"received_data":71414,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cardprotections.com","ip":{"addr":"64.89.163.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":3,"received_data":104916,"sent_data":1377,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"m.media-amazon.com/images/G/31/img18/AmazonPay/Affordability/CBCC/Amazoncard_Final._CB570101839_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"151.101.1.16","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardprotections.com/","date":"2026-02-13T22:26:38.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:22:37:A5:C5:A0:31:43:0C:E4:EF:90:DE:8F:DB:8C:EF:C5:61:87","sha256":"0A:9D:52:19:B7:45:FE:D5:88:9A:73:F4:B9:78:02:77:89:44:51:83:6D:90:18:10:E7:49:75:A0:18:45:BD:99"}}},"request":{"raw":"GET /images/G/31/img18/AmazonPay/Affordability/CBCC/Amazoncard_Final._CB570101839_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardprotections.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-amz-ir-id: 4049b75f-c746-4d89-b27f-683aed0dd15d\r\ncache-control: max-age=630720000,public\r\nlast-modified: Sat, 06 Jul 2024 13:22:43 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: https://www.amazon.in\r\nexpires: Sat, 14 Oct 2045 03:01:02 GMT\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 868446\r\ndate: Fri, 13 Feb 2026 22:26:38 GMT\r\nx-served-by: cache-fra-etou8220192-FRA, cache-hel1410033-HEL\r\nx-cache: HIT from fastly, MISS from fastly\r\nserver-timing: provider;desc=\"fy\"\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 70761\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1042x657, components 3","md5":"147c711c3c17b7bbe6cac11d744ceef9","sha1":"d7e70dc2f5dc23cf21a2d76b51f1d7802661cc15","sha256":"af496179286ae63eb66f715f0522bfd91d3ed23d84ad7013ba7d1dcd3d6e1661","sha512":"ca398e46179deeae43787c85a1ad2aa7bedde4a850f010615c48edbef805eb0afe8e00a515835f177fa58efd0655a6f1272132932304d0b1901341ea7714536b","ssdeep":"1536:PJ/D2nfK7SKBjTGbU4pJCm+vcJbA73iPnsmbJ2HFifyc2GLra:xay7BtAU4pJC7WA73T7lip6","tlshash":"5d6302541a196043eb637fb3574f5709286c5048d66cea4dcbaae98ad9f0330622f7fc","first_seen":"2026-01-23T07:53:16.34518Z","last_seen":"2026-02-13T22:27:04.560292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":70,"dns":10,"connect":26,"send":0,"wait":53,"receive":38,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cardprotections.com/favicon.ico","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"ip":{"addr":"64.89.163.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardprotections.com/","date":"2026-02-13T22:26:38.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardprotections.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 03:41:02 GMT","end":"Mon, 11 May 2026 03:41:01 GMT"},"fingerprint":{"sha1":"AB:5A:A9:F3:3F:89:9C:4F:79:2E:0B:04:8C:FA:46:81:D1:90:1E:B6","sha256":"C3:D0:76:75:59:2E:66:BA:18:45:76:65:76:CF:79:63:F9:37:2F:65:D9:F4:01:0B:31:00:2F:82:34:31:CD:49"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cardprotections.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardprotections.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 22:26:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"698abaf6-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-08-05T04:45:48.056167Z","times_seen":13686,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"cardprotections.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardprotections.com/","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"ip":{"addr":"64.89.163.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:26:37.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardprotections.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 03:41:02 GMT","end":"Mon, 11 May 2026 03:41:01 GMT"},"fingerprint":{"sha1":"AB:5A:A9:F3:3F:89:9C:4F:79:2E:0B:04:8C:FA:46:81:D1:90:1E:B6","sha256":"C3:D0:76:75:59:2E:66:BA:18:45:76:65:76:CF:79:63:F9:37:2F:65:D9:F4:01:0B:31:00:2F:82:34:31:CD:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cardprotections.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 22:26:38 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 02:33:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698bea68-2478\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9336,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"768ccd4a6b177bba840a6a7965e50379","sha1":"0ec9fc87496b81171050ddfdf5629e3d857f08f2","sha256":"375c67f02081a5dfac79471c2805bc1fac047ea43f4a120e93f44a86ba18cbab","sha512":"4845971f40ce4867590c620c489b45f3d1b307301360c551101660c5e546ccba08cdc995a159f4ceb1315723bf140b05c6eec7dbc11b748caee9caded2525c80","ssdeep":"192:dEj578y0SXVw4FmFCC9dZGqdVpsNiijMvQ/cMiNifCUxfHQuExRsHRQP2JP3rP7h:dbg+ulEifNoySxC","tlshash":"7b12a597d2f1241f3f53e8a6f3e6262f27a0c043d885695d3aec4948cfc99b0869711e","first_seen":"2026-02-13T22:27:04.56253Z","last_seen":"2026-02-13T22:27:04.56253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":81,"dns":1,"connect":28,"send":0,"wait":31,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"cardprotections.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cardprotections.com/ITACHI.png","fqdn":"cardprotections.com","domain":"cardprotections.com","tld":"com"},"ip":{"addr":"64.89.163.4","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardprotections.com/","date":"2026-02-13T22:26:38.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardprotections.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 03:41:02 GMT","end":"Mon, 11 May 2026 03:41:01 GMT"},"fingerprint":{"sha1":"AB:5A:A9:F3:3F:89:9C:4F:79:2E:0B:04:8C:FA:46:81:D1:90:1E:B6","sha256":"C3:D0:76:75:59:2E:66:BA:18:45:76:65:76:CF:79:63:F9:37:2F:65:D9:F4:01:0B:31:00:2F:82:34:31:CD:49"}}},"request":{"raw":"GET /ITACHI.png HTTP/1.1\r\nHost: cardprotections.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardprotections.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 22:26:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 05:00:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698abb7b-8e71\"\r\nexpires: Sun, 15 Mar 2026 22:26:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1564 x 311, 8-bit/color RGBA, non-interlaced","md5":"f3f19c7155860b0c379d829aab9bc6f7","sha1":"354991f96afa0e5ee06f1952dd167421dc58966f","sha256":"13838b5e22e2d988134f3582c2752f2d0f578c63a63f3c3d2c182ab6c946eae9","sha512":"2e3d100ad9b628e5d0bb0545a9b7ae57599bda6cd7dcd38f48b8d80281155f6f47abc1709a06bdce47776b3524210254aa37eb2fffe8671d38c3f9bded31aa12","ssdeep":"768:PdcrXh7eM8xC+NXcjtDASi8Fk8GD52+K3yltd72iOxeqbWKmUfiUSWm:aBeM8dNsCSxeJK4PLOYK1Dm","tlshash":"6bf2e130c7fc0487f90d567cc4a066e1af3143ae1ac2bfb0915e9a561e0b43553d6bae","first_seen":"2024-08-19T13:37:46.143874Z","last_seen":"2026-02-13T22:27:04.56359Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"cardprotections.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cardprotections.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.banksathi.com/products/ICICI-Bank-Rubyx-Credit-Card.png","fqdn":"media.banksathi.com","domain":"banksathi.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardprotections.com/","date":"2026-02-13T22:26:38.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.banksathi.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:98:5F:15:7A:82:F5:42:DE:C0:0A:BC:C8:97:DC:95:8F:77:97:3F","sha256":"2F:22:F3:73:EA:0A:4E:BA:5F:E0:03:75:20:B1:4D:38:25:DF:24:38:8C:C7:A8:4D:E7:0E:24:06:E4:59:87:4E"}}},"request":{"raw":"GET /products/ICICI-Bank-Rubyx-Credit-Card.png HTTP/1.1\r\nHost: media.banksathi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardprotections.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:26:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 59460\r\ncontent-md5: mw/Z/oki59QaChQQRrFSTw==\r\nlast-modified: Tue, 29 Oct 2024 11:23:24 GMT\r\netag: 0x8DCF80C1A76746C\r\nx-ms-request-id: b321b741-e01e-0001-6c37-9dc5a3000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\nx-azure-ref: 20260213T222638Z-177f8c96c9579vb4hC1SVG1rdn0000001f5g000000003xs2\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":59460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 318, 8-bit colormap, non-interlaced","md5":"9b0fd9fe8922e7d41a0a141046b1524f","sha1":"fb00c7b13c01d18693445b412d793ea0eb7a9798","sha256":"574acb12af15fa775ed84171794acf87a9ac301cf5e2b53cc3b2973166f24ad9","sha512":"5b86793b272019f067ecbfc12d9d3f0986520f1bcb2d931143bcad4ef7685b589f8da373256be797828a39debd992e5b8401ace0f5879ce2bc509ba80ae0254d","ssdeep":"1536:NCHM1AuiCZaSOMYsa+bMOWhHkrQk4eV8bLW0DRUkOS85//fnV:kHM1diCZaStYsa0MxhHkmbLWcUwSXV","tlshash":"da43020b4cd4ea01aada7c015977546da77e0c128bfa9f75ec8cbb6322b9d9c0dc4718","first_seen":"2026-01-23T07:53:16.343062Z","last_seen":"2026-02-13T22:27:04.564985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1754,"timings":{"blocked":432,"dns":104,"connect":20,"send":0,"wait":605,"receive":279,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cardexpert.in/wp-content/uploads/2019/03/saphiro-travel-card.jpg","fqdn":"www.cardexpert.in","domain":"cardexpert.in","tld":"in"},"ip":{"addr":"172.67.162.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cardprotections.com/","date":"2026-02-13T22:26:38.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cardexpert.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 07:31:13 GMT","end":"Sat, 02 May 2026 08:29:43 GMT"},"fingerprint":{"sha1":"E6:50:4D:D5:5D:39:99:C4:32:D3:DA:94:60:57:D9:FE:97:A1:FE:15","sha256":"D0:C1:AF:16:F9:52:F6:5F:6C:C4:35:04:A6:04:99:41:EB:DA:7A:BA:FF:4D:F3:35:B0:1C:49:23:56:16:9E:1F"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/saphiro-travel-card.jpg HTTP/1.1\r\nHost: www.cardexpert.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cardprotections.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:26:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63934\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 02:22:02 GMT\r\nlast-modified: Tue, 12 Mar 2019 15:32:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 72275\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TpYOtMm6GQw2LLzD7dY%2BGQg20kqOJMupx0OCm6vvIFGyHHAnul3HdN00ogZ4uGR3k02kqVPOcsJSrd3FLKalfFPLBRh5NwVjbneEnQngsu1\"}]}\r\ncf-ray: 9cd7bf9e1bebb27a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 581x350, components 3","md5":"d0c8c1beb6991d06d5903119bec01093","sha1":"d2d427822686aa89b2c67334af7faa039d6fe452","sha256":"de098ac00e944ebfd28810cd294ca08f7c7585f2bff70072287e648efe3c2e13","sha512":"8ef5368042aa19bf9766ae6950fbf17078073d1de54fd3a3e2ac872857c7b029bb9e714ccc75789f244b3dd6c3821290642b72f92bd47799faa5b25571832b79","ssdeep":"1536:m2fhgSaC1r2ceQEiQmXC6MxwpcMl/AymL2dN3PfaQHG:m2fhPaCwPS1MxcWymL2dRO","tlshash":"df5312720beeb4a1cf5476f03c9663c316c21cf1fa731494ba68b9c8279a2b03b45d56","first_seen":"2026-01-23T07:53:16.344029Z","last_seen":"2026-02-13T22:27:04.566121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":80,"dns":51,"connect":8,"send":0,"wait":19,"receive":9,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}