{"report_id":"396d571b-df23-4f13-8d43-96ce32bb278e","version":6,"status":"done","tags":[],"date":"2026-02-15T14:35:29Z","url":{"schema":"https","addr":"www.guarda.cash/app/","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"www.guarda.cash/app/","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"title":"Guarda Wallet | Web Multi-currency Wallet","dom":{"size":12595,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (584)","md5":"bfa092d0b71b3dc6a93e7c2f717b0025","sha1":"e75177131c9495e3fd36627dfe4f9aa11d0eab77","sha256":"79116826d3286c86c543e086e04a5f8ecaa681d7af7c779e84e3f4dc7638c6b1","sha512":"c6bab2da7dd7e6806d42682e69b1c2e4d146dcbe66d3aea955aac6122bd72d0bd75c462e6b760af26d6295fe4bbee9f198be2666c20657602c9833aeedc98b42","ssdeep":"384:3NVjPBHNwmK/rS8sBixcPJM/OkiEWV72pH0H3urwtO3BfxvmQ1H9JNdU/N3ppbr8:95ZHFBix3H0HQBfxTHR","tlshash":"f442c660418c9f7f024683dab72225f8614f5c75f8b6e9e0faff422191d2d51c9631b2","dom_hash":"domhash13c84668ec407d43a051171f4c9619fa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.guarda.cash/app/","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-22T14:35:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":9690,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.guarda.cash","ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-15T14:35:29.686567Z","last_seen":"2026-02-15T14:35:29.686567Z","alert_count":0,"request_count":15,"received_data":835569,"sent_data":7105,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":38802,"sent_data":1058,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.guarda.cash/app/","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"303c35f9e6cece22ec7fe73d1c58ff8f","sha1":"8319c64a5f783763b8085b9e4a722548fed5c301","sha256":"a9cdc183dfd317a2aa60a2c9f013ccc82f3b9be4e5ba90c9b1d3a484525d3a72","sha512":"918bb589d266af8bf9b4f8cab7e8a94a33a2c3e9f5efa4320db248d5c029a27874868c6bf80abfabbcc1ac5a312e561bc1d73dbe196a8f949620e880d64810dd","ssdeep":"","tlshash":"7a31200fffadc1661a2ba82d6cade28a247dc0451c828c127c1c55e4b3a1c615a33dfc","size":1628,"data":"","first_seen":"2026-02-15T14:35:33.815239Z","last_seen":"2026-02-15T14:35:33.815239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app.html","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a73c693e0401ea62759a1165696551a","sha1":"e10cc54f95ed29a81e17fee92a2e5258627c8deb","sha256":"32af5135c755d0d5125a74c9afcf26760dc50c461dab3ee00935e2baf4b3cdcb","sha512":"52171361eecb5848ad9b7a2f00f49c8fbdab48580835feb02b9ceae06387def2c4a1dbf976ee60d853b67056acfb0dd5713da5b882b665deb3f80a46dbd49b3f","ssdeep":"","tlshash":"59216a3a25b6353e81f394d5b2879de07b3030a3a044fb01ba6cc7115fc066a89a33dd","size":1179,"data":"","first_seen":"2026-02-15T14:35:33.815999Z","last_seen":"2026-02-15T14:35:33.815999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Mono:ital,wght@0,400;0,500;0,700;1,600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Roboto+Mono:ital,wght@0,400;0,500;0,700;1,600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.guarda.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Feb 2026 14:35:08 GMT\r\ndate: Sun, 15 Feb 2026 14:35:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9004,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7850557195bfd5ec5b28f7daf33d881e","sha1":"39613d0c5e0c33c3aa398cccd6af0ffb38a1ed6f","sha256":"a868d198e1b79c53d60fac0cefba926a5f734f4cfcbeff2877b8f5e8d3ded27e","sha512":"1eac89638b9b38edf60432dbd3b9957ab87d040d13d3491f65f21a8da6c37c364173985f05191aa64c05ce73aca66fc6b208662202652a1cfaf12d92c05fd66d","ssdeep":"192:FENfk1ENfdENfU3OENfvENfWTENfDNV2jNVmNVW3GNVzNV6RNVUNV2cNVFNVW3lV:FCfk1CfdCfSOCfvCfICf5V2ZVMVksVJk","tlshash":"c002ded2402a9410eb831cd667cf7f25fd4e6115a196c27d9bfd28a8ace7c322351b1d","first_seen":"2026-02-15T14:35:33.801682Z","last_seen":"2026-02-15T14:35:33.801682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":106,"dns":1,"connect":20,"send":0,"wait":37,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/ceb5040617c003b0315897e3209e7401.svg","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:08.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/ceb5040617c003b0315897e3209e7401.svg HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.guarda.cash/app/app_files/4164.4326401ae7c36feb0573.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 09 Feb 2026 02:24:10 GMT\r\netag: W/\"2fc1c-64a5ad5846680\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195612,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (886), with CRLF line terminators","md5":"3d9e303b35806dc129f005cfa5f1d8f6","sha1":"2e5665f263966c483900a973cf1a7a873ef84878","sha256":"409804d5629cf8bd46ee3b28340136fc826707a5cfde82f202a93c0cf3101211","sha512":"0e08acd3cb23b267c13e3215c5c4a87df4ac8ee4793fe29b1e0a30a638ec5aac6123deb146929590822d6d81deec2c0f3d3ca0a899516fcc24098d2be7885897","ssdeep":"1536:yiFRDJAYAY0SOdNJ8Vs9QsPE+JNR7HXpmttXovX1B3tPaU9R49TFNi/ws:jDJfVsQXWpl","tlshash":"7b1493e5b2cc54bf420383d7c1317b68a19fcc72e7229192b2fd177727c6d41a85a86a","first_seen":"2026-02-15T14:35:33.802894Z","last_seen":"2026-02-15T14:38:25.649848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/images/android-icon-192x192.png","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/","date":"2026-02-15T14:35:07.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/images/android-icon-192x192.png HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2042\r\nlast-modified: Sat, 30 Aug 2025 19:16:46 GMT\r\netag: \"68b34e1e-7fa\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"6e7b86802b2754c5a045f9ea8eb00eee","sha1":"1daae74192186685680541b01bdee9e48cc641e1","sha256":"fcb45b7ac4ddc17453c90e76aaad1551114c6156fb75eef419f954aa589e4c1f","sha512":"30ac242bbcdca4e01a7988acec4d598188e980cfceb52df97cda6120f7c56e2afceb69a2d991554f175f446c4a4701a8cf063eb3d2c5bdf0cbd97dec99417b12","ssdeep":"","tlshash":"dc411ad3b019dc5eb958cea776b0072b9e0584241cfb41d19b6c5231de4723a39f24ad","first_seen":"2026-02-15T14:35:33.803837Z","last_seen":"2026-03-07T02:40:52.128153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/images/favicon-16x16.png","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/","date":"2026-02-15T14:35:07.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/images/favicon-16x16.png HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 342\r\nlast-modified: Sat, 30 Aug 2025 19:16:56 GMT\r\netag: \"68b34e28-156\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"0aaba7ba691291049aab4f7983c56b88","sha1":"ab16d73b9aafc6a73c0e9650f50b6ebbf98579b5","sha256":"2da4578c36b6fc0d9b774e1f327384b5c41961aaa5eec9d9470b6e3b57d96e75","sha512":"001a753dd1517b4abab0abf86cd277c9ce534784be14bec0f9e3317055e8f3273df4fb85468bd97b78b230718e980313ca79c19ae6d9e2d9107c06cb34f8424c","ssdeep":"","tlshash":"d0e0c0bbf6719f14d178da43875bb470f4264210a985b4815d3ec5f49572b684103a49","first_seen":"2025-11-28T07:40:05.621516Z","last_seen":"2026-05-03T12:57:43.944549Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/4164.4326401ae7c36feb0573.css","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/4164.4326401ae7c36feb0573.css HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67126ff8-88705\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c34c4e5a7b424a883225350f28879e58","sha1":"b7780f6e961fa38195d89bbbb9e0179a6d0c0693","sha256":"afe40bcd23754f79d6f9e6b7eed061bd9a6391f80c094c6a556c235eaafa8018","sha512":"0557d27e0f2e81dbc651e7d7666acba901bc770c3b6f477f7cf06c0f4883fca8448e086bed5192c00fb204a8dd047af212646c38f529b0d32a36cb221af5fc23","ssdeep":"12288:B80OEm26Q05hmdUqS5CM+9/m7MndoRelQb0yEpd9fbv2xGBp+p5wAvVAJA1MR3b7:zx","tlshash":"26c482c76bb41a14f12f90696882db61737d5082a40fdcbcabe1205cefc91e59673f4a","first_seen":"2026-02-15T14:35:33.805395Z","last_seen":"2026-02-15T14:35:33.805395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/1oHJyGR.png","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/1oHJyGR.png HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 6311\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\netag: \"67126ff8-18a7\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 80, 8-bit/color RGBA, non-interlaced","md5":"58fa8f9dcddc8c45ea2b3427a427a726","sha1":"ef956c28f572dfab19b60575371d8734ef10a21a","sha256":"28496c9e000bf151fc24c67ed83511d96d840ea58554627ce5c32fe1f0f68b51","sha512":"74522be408c4560eb6d756ff4b14e6d98e4252b6319d4573aafc9c9fe566cb7ad86e2a1ef23192f52c5747468198aa5d42d4e65168df9e055463b43518386ce3","ssdeep":"192:dQBC6uQZKqHZZzEMCumoIWEqdnp4dtFLKjj5RtvNt:4NvYCZ1E9oJnd3/bt","tlshash":"15d17ba0e8b8c05d223c8b0011e2395ea7e75531a46a3309bb06273d725a95f4afc347","first_seen":"2026-02-15T14:35:33.806328Z","last_seen":"2026-02-15T14:35:33.806328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/1A3r3j5.png","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/1A3r3j5.png HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 3556\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\netag: \"67126ff8-de4\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 80, 8-bit gray+alpha, non-interlaced","md5":"eb9587c6248d62b3c33553b85b55fd13","sha1":"ad0bd84757aa0ef112a134a6582fc38767f3b23d","sha256":"4641d8c8022425a972334ed192a484666615d25b50c0633175e94aeffe7b4352","sha512":"c6b4455b6fc7b04cfdd14b50ebd280cc090ec97721658c2dcf4e81d991408a4fefc3fce2653d0db4cc3a9d15c64b3a64a627f7a267d85d8b5f8363a22ddb5a9e","ssdeep":"","tlshash":"9c716c0ea1695a68fec23c395d1d8826c7fa631b0f4423f3377090a6228845b834bcb5","first_seen":"2026-02-15T14:35:33.807243Z","last_seen":"2026-02-15T14:35:33.807243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:08.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.guarda.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.guarda.cash/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 20:12:08 GMT\r\nexpires: Fri, 12 Feb 2027 20:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238980\r\nlast-modified: Thu, 01 Aug 2024 20:41:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18596, version 1.0","md5":"c83e4437a53d7f849f9d32df3d6b68f3","sha1":"fabea5ad92ed3e2431659b02e7624df30d0c6bbc","sha256":"d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb","sha512":"c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f","ssdeep":"384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl","tlshash":"7482d12a50143642c0f6ff3b6767da72fab83036d8554cd206c9994d89e067df78b839","first_seen":"2024-08-01T01:35:45Z","last_seen":"2026-06-09T20:33:24.678559Z","times_seen":31637,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":174,"dns":1,"connect":20,"send":0,"wait":22,"receive":10,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app.html","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:08.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app.html HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 03 Nov 2025 12:56:58 GMT\r\netag: W/\"3319-642b040235a80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13081,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (571), with CRLF line terminators","md5":"dff60cb2b8c99bd43e97a3606f9835c3","sha1":"4440b39be299e17ed9623b4b2534ae8717137273","sha256":"59eb81e9955fa46df1fe5f6fbdfd085d41aca5f72adb63ec4be95eaaa6ff00cc","sha512":"7d6dd9fad6b1447ec8d03ae02a6be106297a824dbfa0653a6d2b04214db7b8051b68fd0f7eaa0882eb532ca12d1cf4fda2a9b19db9701cb5f69d013fb13b75e7","ssdeep":"384:9ij9a4HKC/fAocxNBOxLMzdAL3S6PLEb2XH5HwzsRqLzBNx7/S8H032O+AKqzy0p:k5JHKBOx7H5HSBNxHH2H","tlshash":"a642a570714ca77f424283dba73226e8a14fc876eaa2a560fafc527356d3c51c863473","first_seen":"2026-02-15T14:35:33.809015Z","last_seen":"2026-02-15T14:35:33.809015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app.html","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.guarda.cash/app/","date":"2026-02-15T14:35:07.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app.html HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 03 Nov 2025 12:56:58 GMT\r\netag: W/\"3319-642b040235a80\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13081,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (571), with CRLF line terminators","md5":"dff60cb2b8c99bd43e97a3606f9835c3","sha1":"4440b39be299e17ed9623b4b2534ae8717137273","sha256":"59eb81e9955fa46df1fe5f6fbdfd085d41aca5f72adb63ec4be95eaaa6ff00cc","sha512":"7d6dd9fad6b1447ec8d03ae02a6be106297a824dbfa0653a6d2b04214db7b8051b68fd0f7eaa0882eb532ca12d1cf4fda2a9b19db9701cb5f69d013fb13b75e7","ssdeep":"384:9ij9a4HKC/fAocxNBOxLMzdAL3S6PLEb2XH5HwzsRqLzBNx7/S8H032O+AKqzy0p:k5JHKBOx7H5HSBNxHH2H","tlshash":"a642a570714ca77f424283dba73226e8a14fc876eaa2a560fafc527356d3c51c863473","first_seen":"2026-02-15T14:35:33.809015Z","last_seen":"2026-02-15T14:35:33.809015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/css.css","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/css.css HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67126ff8-552e\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9ddd28321070d0ecd8903ac26f65d74c","sha1":"9771f23c385f3cd82a10397bfb41788b35331f07","sha256":"5b28c9a4a0c69b69813d92ed62b3bf6d28b4be757a38d353468b2601ceb14d97","sha512":"75bc8f099a1dbdfeb11cf86ca47aff90d67ec17add28a1e3c3c3075472b88935e0a5f7e0d4ed883798984a202c7feda7b755536922297eb93e52c0d582cd68e0","ssdeep":"384:j3o6yNZTCOeD4CdFRPXBYHAaCu4U7tyF0VVyMr4:5ZD4EFRPRYHBCu4utyiVVE","tlshash":"c8a2bd92042be4006b831cc273cf7e3aae8f61456086d576abfd1cd8ace6d36436575e","first_seen":"2026-02-15T14:35:33.809887Z","last_seen":"2026-02-15T14:35:33.809887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/fec62772689d43733f0f995782559d5d.svg","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/fec62772689d43733f0f995782559d5d.svg HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 747\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\netag: \"67126ff8-2eb\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce64bd394f04b836c1bfd6b63839253c","sha1":"0a28f9b5a4f1678df72ad688191a845d0a33c78f","sha256":"d00ac8420495283d3a4ae21540e1a5a62317c80f0b1677f91710afd004195b7f","sha512":"7d8bb9c0c8eea62d777cc9776df0393bdc67d0643bef2510e41e75ced9ac57c8b0bd233b5b503f8f275999d0446ae8be6f1aa550d5e635f26f81e3b8a5cd15ea","ssdeep":"","tlshash":"ce01fdf210bc16cdd007630e3718e892e3ef20a5b524820996cd8bf29062991ea8bc43","first_seen":"2024-08-20T07:16:03.898957Z","last_seen":"2026-02-15T14:35:33.810717Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/e21bd8188ed067f684ddee65df9b7458.svg","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/e21bd8188ed067f684ddee65df9b7458.svg HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67126ff8-959\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bcf31d56a2ed8ae2c750833e706b874","sha1":"5b09f548273972ac89fe3a074befef829f3045ae","sha256":"7b4e0cbd808c60805db9d8a21068e752f6169ab1b5f113bdb1c9fd64bf3d290d","sha512":"92bc28826a258c250bae46c4c6758e326a7649a91d7395e94ac33430968eb303d70860a03385a2754ea7e3968735e887599a865e8944305120aa43fc87fb8d6d","ssdeep":"","tlshash":"7d41a5f6b3185de0fc4ec3aada2060b8345f1dfb8681817485d56e1778a84de9d4acca","first_seen":"2026-02-15T14:35:33.811593Z","last_seen":"2026-02-15T14:35:33.811593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/adsct.gif","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/adsct.gif HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\netag: \"67126ff8-2b\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-10T03:37:10.159699Z","times_seen":1113,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_mobile.html","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:08.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_mobile.html HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Thu, 11 Sep 2025 17:57:40 GMT\r\netag: W/\"1796-63e8a45ef8d00\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e458b2d0d2c7b88e2f1bfb6c7c3191f4","sha1":"c9433f750de12b80ddb26c7d3c5b43964a0e223f","sha256":"6ca1aecfbeb09ce7c31f4c27dfd0720db655d2d871f907f9c47ed61a5bd69dc4","sha512":"3412d7520b17af743d5a45001d8a3a51b167183d786524312e6edc2c0adb6431bddb134be9fe585dc959a368c577577a988572341441d77a3db0e9b7852027ea","ssdeep":"96:Q43M4+SegTeWkUTeLk3rt80pGnFbdxkG9Om3/X9iGKci2/WVb2pfHQNH3UPrwtOC:Q484hTXHI0/p6F3399PUpD2/WVb2pH0B","tlshash":"d0c162428b4d5e4a170672adda2222b9403f4437cb967ca1bda3307093dbd854a6b2b3","first_seen":"2026-02-15T14:35:33.813016Z","last_seen":"2026-02-15T14:35:33.813016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T14:35:07.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Fri, 10 Oct 2025 14:19:16 GMT\r\netag: W/\"1668-640ce9a464100\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5736,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (321)","md5":"aa69a35011485871fcf00d01c7d785d6","sha1":"414615700f6eb7015d644008ffc63b767d015352","sha256":"ee1b1071adb9dec753dc1e50f26ff34c4eb374e8f1c1ac304d0b272276dacfbc","sha512":"79c33eff2728286ef28337e6a142ff413170118481ad21cb4212240e21a40f661e5fcfa4eaf342a5eda22ba3003d939e93b1209cfb2ba1eefdb36b1937e60cdd","ssdeep":"96:Q73M4+S5H57HkyC6QFbda/U/X7w5TpG47PLkYnLYLHaq/vgNdUsPWtiquW4:Q784h1dkYQO/U/rw9pG47PLkALYjaqHe","tlshash":"97c19707cb0c9f07160ab2b9bb6a5188407f006adda35d65bde73164a3e3c6446379f7","first_seen":"2026-02-15T14:35:33.813854Z","last_seen":"2026-02-15T14:35:33.813854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":215,"dns":57,"connect":29,"send":0,"wait":77,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guarda.cash/app/app_files/adsct_002.gif","fqdn":"www.guarda.cash","domain":"guarda.cash","tld":"cash"},"ip":{"addr":"31.31.197.48","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:07.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.guarda.cash","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 02:09:08 GMT","end":"Fri, 11 Sep 2026 02:09:08 GMT"},"fingerprint":{"sha1":"14:89:32:0A:E2:33:CB:84:22:AA:72:21:D5:43:E9:5D:39:83:B6:0F","sha256":"1A:FD:D8:00:55:F6:A3:DF:40:DA:D0:BB:31:B4:90:2D:AC:67:0A:C4:6B:81:33:4C:96:B5:15:46:E3:29:08:77"}}},"request":{"raw":"GET /app/app_files/adsct_002.gif HTTP/1.1\r\nHost: www.guarda.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.guarda.cash/app/app.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Feb 2026 14:35:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Fri, 18 Oct 2024 14:26:00 GMT\r\netag: \"67126ff8-2b\"\r\nexpires: Wed, 01 Apr 2026 14:35:07 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-06-10T03:37:10.159699Z","times_seen":1113,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.guarda.cash/app/app.html","date":"2026-02-15T14:35:08.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.guarda.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.guarda.cash/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18536\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:11:16 GMT\r\nexpires: Sat, 13 Feb 2027 03:11:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 01 Aug 2024 20:41:24 GMT\r\ncontent-type: font/woff2\r\nage: 213832\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18536, version 1.0","md5":"8eff0b8045fd1959e117f85654ae7770","sha1":"227fee13ceb7c410b5c0bb8000258b6643cb6255","sha256":"89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571","sha512":"2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058","ssdeep":"384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc","tlshash":"d882dfa0f21610f7df085c39a41f9d3964274bbc613c7c437379587aaa0068d56bbb79","first_seen":"2024-08-01T01:33:28Z","last_seen":"2026-06-10T04:26:42.9284Z","times_seen":51597,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":96,"dns":1,"connect":20,"send":0,"wait":21,"receive":6,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}