{"report_id":"53c02da8-05e0-4009-9044-1e80e7eb85f2","version":0,"status":"done","tags":["suspicious"],"date":"2026-09-26T18:27:25Z","url":{"schema":"http","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"172.67.144.39","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"title":"WormGPT - GPT Alternative for Work","dom":{"size":44740,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1729)","md5":"f707b75444700f0bf074a33d3669b712","sha1":"c9ca095d5e98ae0287c0f98351d4eab5612a7720","sha256":"ae3d4377c9453fca4318c7010b385c65fe4debb78a6d8f9a2a21acba08abcae3","sha512":"2b889da7b5262b4a6a5c45f77b26bf011fc030b761c6c6f931cad4a7024359ea67ba7e0eb9d87a411d98d24578905d86c2bce029d94074a9d620a5ac82fef2b8","ssdeep":"768:V7XL4KwzIHUEOOxV5SUPqx8rNOO8KwIzGEvxXNT:V77hmI0EOOHsUPq9DKwIzXT","tlshash":"4113d8ae29f311116413a0e96bf7530d3675d007ea4bcc6d3bec43589f859a889b3b9c","dom_hash":"domhasha86fffd7787f1b54757435f124ab25e9","first_seen":"2026-09-26T18:27:31.076788Z","last_seen":"2026-09-26T18:27:31.076788Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"172.67.144.39","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T18:27:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":1,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-26","alert":"Detects file containing Telegram Bot API","trigger":"wormgpt.com.co/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"summary":[{"fqdn":"connect.facebook.net","ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"domain_registered":"2004-04-01","domain_rank":1088,"first_seen":"2012-05-22T02:51:28Z","last_seen":"2026-09-23T07:33:10.772273Z","alert_count":0,"request_count":2,"received_data":927043,"sent_data":2193,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":924128,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-21T00:02:17.3583Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":855,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":6465,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stats.g.doubleclick.net","ip":{"addr":"142.250.147.157","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":958,"first_seen":"2012-07-01T17:13:23Z","last_seen":"2026-09-22T20:58:05.923129Z","alert_count":0,"request_count":1,"received_data":838,"sent_data":767,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-09-21T20:41:03.144189Z","alert_count":0,"request_count":1,"received_data":838,"sent_data":1009,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mpc-prod-24-s6uit34pua-uw.a.run.app","ip":{"addr":"34.143.79.2","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-04-05","domain_rank":0,"first_seen":"2025-12-26T10:31:14.715244Z","last_seen":"2026-09-14T09:32:19.500752Z","alert_count":0,"request_count":1,"received_data":492,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"wormgpt.com.co","ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-30","domain_rank":0,"first_seen":"2025-08-16T14:50:10.249523Z","last_seen":"2026-06-21T04:08:51.89769Z","alert_count":2,"request_count":6,"received_data":830097,"sent_data":3325,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":3,"received_data":115707,"sent_data":1659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-09-24T06:09:59.819262Z","alert_count":0,"request_count":1,"received_data":2520,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6a631c3b291482d5ac4ac936c17c867","sha1":"8e871954f0a0436f7b272e2b3402ca3d7d5c604b","sha256":"495901d5d31ce00b76d14b6f1944c14c8277cf73de138a84beb86c49289fe553","sha512":"15a42efef37d6059f618e323025e3c39b5a2b254433965f51fbe6374c03339e6dc600a054af50fa0fb50a3fae91c90cd81d881152d82a8e7d778e807f7f06f6f","ssdeep":"","tlshash":"7fe0c0db70164871619f89b623b5a5287153260d78091932edfd88246e5858b481259c","size":358,"data":"","first_seen":"2025-08-16T14:50:12.572555Z","last_seen":"2026-09-26T18:27:31.095424Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46ab8031928f77a21c98d29061dc1878","sha1":"c897f4ea1a2ffd895ce21e7c3b2ffccc34a14d3e","sha256":"3f5e436646a0291ded232f9e6b7d1c4d4d2f0ea88a6e8df5e356385cba2266da","sha512":"0abcbe8abc7fb6e67c164c304b62d8010e764902eca19d7a294479eacd5d500b60ee22d821a78a3ee873bf067fbe6238e013ffcabeeefe64e8359c60fbe3ea25","ssdeep":"","tlshash":"ecf0d4de2c53a45737f92639c327666b3753170278c2d405be01c4143fd49961c419ce","size":479,"data":"","first_seen":"2026-06-21T04:08:53.663971Z","last_seen":"2026-09-26T18:27:31.096843Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f9379bffa15d0d27ec12ab883a44fc4","sha1":"0c21cdab9a499fbc6ce7687a44e5b25c21e016d3","sha256":"02121e60c25d86f3adf14ae1dd4e5d2acdd133a5152c1648d5157133ec140d71","sha512":"10a7a36bf644b8194e55ee91a5247a5a8a387316cbe8d5e5721f26d512a27d8060d21d9c36ea6166c54b3ea043da42f6e44385164c05dfd3c066d1ba90d9590c","ssdeep":"192:AU3d+6y2q9SZ/Vi8Yt4DgOQzJOxTeVbiSFL4xqiI7rUUDnc3lzGEDtLtJfDBxsoK:AUPqQe8oQNOO890xArL2lzGEZpfxXN2","tlshash":"ae7286a914720328485371dd670b950d36aae05ffe8ad6163bac07143f8e53ca673bec","size":16479,"data":"","first_seen":"2026-06-21T04:08:53.666336Z","last_seen":"2026-09-26T18:27:31.098174Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-26","alert":"Detects file containing Telegram Bot API","trigger":"wormgpt.com.co/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K832Z696","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbb06d7fd2a9eea2c4bf8a37d3c88714","sha1":"d456a2b88630b4a985d58d1798dca6a87f38484c","sha256":"1781c36bf80fa9d2f43d3cbeccaba63baa601a52de24c0827183038d31d7fb20","sha512":"e0833ae62069199adf8ad4c3a03ac6e81a1e3e2688789d330834f88b9a93caa4bdcd5f519088e3fa2aa537aea3bda113a3e82e068cadd1f1c8ab9a1e44ab8cb1","ssdeep":"6144:Owp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLCY7a79:xvKE63sV7Yy","tlshash":"848429cdb3d6742293a2f578503f018bb27a69a2b84cc899f289dcd42d7465a4137f7c","size":382779,"data":"","first_seen":"2026-09-26T18:27:31.093951Z","last_seen":"2026-09-26T18:27:31.093951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"26406ac97f31f41f41879a04a2fba138","sha1":"a7d88b920d6f5a5f02879b7a87e4ff069acbdd82","sha256":"407b4a73534f3738e40e0a9dde6be862360ab81a37b11318f6815b892e043f8c","sha512":"e6c7b5130cf4ae0b9113fa7ff8aea7bc98f474425ad7aa5e317861be26b409cfed9dbe31fcd1d3086aa0013c639519ddf3b0a0c203a4b47bfec5bdf6daaa399c","ssdeep":"6144:i7gApToGDlZ6BYnTD+4Yd0E+brBLA30ru/dK0rZeP+b0mK8CLv+z1Y+COBfvBkn:wnAEmdBb0mK8CL7uKn","tlshash":"6594e7c9b1e5b0a107b7796c966f800772bbd5a238ccc960e51dedc8297c49e4133eb6","size":424690,"data":"","first_seen":"2026-09-23T19:32:02.816191Z","last_seen":"2026-09-27T10:39:39.984208Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-51XLQ0J28Y\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fcf414f6e839429fe0bbbf0f43a0bd9","sha1":"7188270b12f144c26b67d2dbedabdbe810a6a624","sha256":"54d060579283684482396391baf92f415d5e2acfd36661fa4b5857550141dd35","sha512":"5e8370f9d6be0f3bfb4b7b1c42cc4015d91779b64c1fbf3315b363ff11aabf4d6501241a05ea1f235bc6e5f374f9b5df99d7250b82c6625bc5eeadb21eb57288","ssdeep":"6144:qowp4YH7Bzn5ceZqhLRIzECIcW3sVbEbzE8U3SLoJfjXSyoGLxs5MY/9:+H7Bz5iCzA3sVNJ7PtxK","tlshash":"21b408ce73c674229396f178903f01cba97b29a2b45cc89af289dce42d3455a5163f7c","size":540115,"data":"","first_seen":"2026-09-26T18:27:31.087524Z","last_seen":"2026-09-26T18:27:31.087524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1395393451681210?v=2.9.408\u0026r=stable\u0026domain=wormgpt.com.co\u0026hme=f9ad993bedcdbb3fffd47532e189463ba18afe816a0bd364070ce559e4a6ac26\u0026ex_m=117%2C239%2C169%2C27%2C81%2C82%2C160%2C77%2C76%2C11%2C179%2C101%2C20%2C152%2C140%2C46%2C84%2C89%2C148%2C174%2C181%2C8%2C4%2C5%2C7%2C6%2C3%2C102%2C114%2C32%2C17%2C31%2C18%2C33%2C34%2C35%2C37%2C55%2C161%2C86%2C125%2C22%2C24%2C51%2C47%2C49%2C48%2C94%2C103%2C107%2C123%2C159%2C162%2C53%2C124%2C29%2C26%2C132%2C78%2C43%2C164%2C163%2C165%2C156%2C154%2C30%2C42%2C66%2C122%2C176%2C79%2C21%2C127%2C92%2C75%2C23%2C96%2C97%2C129%2C95%2C150%2C149%2C153%2C108%2C175%2C178%2C41%2C56%2C126%2C54%2C183%2C109%2C182%2C208%2C253%2C83%2C267%2C266%2C265%2C14%2C25%2C28%2C40%2C62%2C116%2C68%2C10%2C72%2C110%2C111%2C112%2C118%2C143%2C38%2C36%2C145%2C146%2C147%2C142%2C141%2C170%2C85%2C173%2C171%2C172%2C57%2C67%2C136%2C19%2C177%2C52%2C316%2C317%2C318%2C315%2C331%2C356%2C246%2C235%2C69%2C236%2C234%2C359%2C350%2C59%2C247%2C120%2C144%2C91%2C134%2C61%2C133%2C139%2C138%2C65%2C73%2C71%2C166%2C87%2C88%2C128%2C44%2C39%2C60%2C63%2C113%2C180%2C1%2C137%2C16%2C135%2C12%2C2%2C64%2C104%2C15%2C74%2C70%2C131%2C100%2C99%2C185%2C186%2C105%2C106%2C9%2C115%2C184%2C58%2C157%2C98%2C90%2C80%2C130%2C119%2C167%2C50%2C158%2C0%2C93%2C151%2C155%2C168%2C45%2C121%2C13%2C187","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"90a9b4399c8f627a9f3a8ffe585939c2","sha1":"462b30b83a548019a69c2bdfb4a59c1bb88a015b","sha256":"e991e4bdc348070241275412492f698951acf73bf062f294438f228dae077943","sha512":"a01a8b5839f89f005273b2ca4b97e27a610930c38d744407d32ac0d515c962e65a7e0225904a207489f35b140cc7d0c424b8e7c34ef60424405e91780c842338","ssdeep":"6144:OHNFYp68joi0lj6fYfXYXqRbhixwz0wDPJS5CfIFissSi:KNFGjoi0IqsiVi+z0wDPJS5Ct","tlshash":"24b45cc4b6a568625be67568adbf340b7074845278acc820eb6cdcca3e791494133f7f","size":494354,"data":"","first_seen":"2026-09-26T18:27:31.078364Z","last_seen":"2026-09-26T18:27:31.078364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Trying ipapi.co...","filename":"https://wormgpt.com.co/","line_number":1013,"column_number":29},{"level":"log","text":"Success with ipapi.co:map[actor:server1.conn0.watcher16.process8//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[city:map[configurable:true enumerable:true value:Oslo writable:true] country:map[configurable:true enumerable:true value:Norway writable:true] countryCode:map[configurable:true enumerable:true value:NO writable:true] ip:map[configurable:true enumerable:true value:91.90.42.154 writable:true] isp:map[configurable:true enumerable:true value:Blix Solutions AS writable:true] region:map[configurable:true enumerable:true value:Oslo writable:true] timezone:map[configurable:true enumerable:true value:Europe/Oslo writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wormgpt.com.co/","line_number":1021,"column_number":37},{"level":"error","text":"Error sending visitor data to Telegram:TELEGRAM_CONFIG is not defined","filename":"https://wormgpt.com.co/","line_number":1172,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1395393451681210?v=2.9.408\u0026r=stable\u0026domain=wormgpt.com.co\u0026hme=f9ad993bedcdbb3fffd47532e189463ba18afe816a0bd364070ce559e4a6ac26\u0026ex_m=117%2C239%2C169%2C27%2C81%2C82%2C160%2C77%2C76%2C11%2C179%2C101%2C20%2C152%2C140%2C46%2C84%2C89%2C148%2C174%2C181%2C8%2C4%2C5%2C7%2C6%2C3%2C102%2C114%2C32%2C17%2C31%2C18%2C33%2C34%2C35%2C37%2C55%2C161%2C86%2C125%2C22%2C24%2C51%2C47%2C49%2C48%2C94%2C103%2C107%2C123%2C159%2C162%2C53%2C124%2C29%2C26%2C132%2C78%2C43%2C164%2C163%2C165%2C156%2C154%2C30%2C42%2C66%2C122%2C176%2C79%2C21%2C127%2C92%2C75%2C23%2C96%2C97%2C129%2C95%2C150%2C149%2C153%2C108%2C175%2C178%2C41%2C56%2C126%2C54%2C183%2C109%2C182%2C208%2C253%2C83%2C267%2C266%2C265%2C14%2C25%2C28%2C40%2C62%2C116%2C68%2C10%2C72%2C110%2C111%2C112%2C118%2C143%2C38%2C36%2C145%2C146%2C147%2C142%2C141%2C170%2C85%2C173%2C171%2C172%2C57%2C67%2C136%2C19%2C177%2C52%2C316%2C317%2C318%2C315%2C331%2C356%2C246%2C235%2C69%2C236%2C234%2C359%2C350%2C59%2C247%2C120%2C144%2C91%2C134%2C61%2C133%2C139%2C138%2C65%2C73%2C71%2C166%2C87%2C88%2C128%2C44%2C39%2C60%2C63%2C113%2C180%2C1%2C137%2C16%2C135%2C12%2C2%2C64%2C104%2C15%2C74%2C70%2C131%2C100%2C99%2C185%2C186%2C105%2C106%2C9%2C115%2C184%2C58%2C157%2C98%2C90%2C80%2C130%2C119%2C167%2C50%2C158%2C0%2C93%2C151%2C155%2C168%2C45%2C121%2C13%2C187","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.184Z","timestamp":1790447204184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Jul 2026 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"97:57:A1:16:A7:B0:43:B4:3E:64:15:36:82:C4:5D:BE:CE:DE:BA:62","sha256":"19:18:14:A3:2A:DF:B3:E2:D7:31:F2:A4:25:6D:09:01:9E:40:7F:87:74:B1:F3:D2:FD:7C:71:FE:47:EC:E5:7C"}}},"request":{"raw":"GET /signals/config/1395393451681210?v=2.9.408\u0026r=stable\u0026domain=wormgpt.com.co\u0026hme=f9ad993bedcdbb3fffd47532e189463ba18afe816a0bd364070ce559e4a6ac26\u0026ex_m=117%2C239%2C169%2C27%2C81%2C82%2C160%2C77%2C76%2C11%2C179%2C101%2C20%2C152%2C140%2C46%2C84%2C89%2C148%2C174%2C181%2C8%2C4%2C5%2C7%2C6%2C3%2C102%2C114%2C32%2C17%2C31%2C18%2C33%2C34%2C35%2C37%2C55%2C161%2C86%2C125%2C22%2C24%2C51%2C47%2C49%2C48%2C94%2C103%2C107%2C123%2C159%2C162%2C53%2C124%2C29%2C26%2C132%2C78%2C43%2C164%2C163%2C165%2C156%2C154%2C30%2C42%2C66%2C122%2C176%2C79%2C21%2C127%2C92%2C75%2C23%2C96%2C97%2C129%2C95%2C150%2C149%2C153%2C108%2C175%2C178%2C41%2C56%2C126%2C54%2C183%2C109%2C182%2C208%2C253%2C83%2C267%2C266%2C265%2C14%2C25%2C28%2C40%2C62%2C116%2C68%2C10%2C72%2C110%2C111%2C112%2C118%2C143%2C38%2C36%2C145%2C146%2C147%2C142%2C141%2C170%2C85%2C173%2C171%2C172%2C57%2C67%2C136%2C19%2C177%2C52%2C316%2C317%2C318%2C315%2C331%2C356%2C246%2C235%2C69%2C236%2C234%2C359%2C350%2C59%2C247%2C120%2C144%2C91%2C134%2C61%2C133%2C139%2C138%2C65%2C73%2C71%2C166%2C87%2C88%2C128%2C44%2C39%2C60%2C63%2C113%2C180%2C1%2C137%2C16%2C135%2C12%2C2%2C64%2C104%2C15%2C74%2C70%2C131%2C100%2C99%2C185%2C186%2C105%2C106%2C9%2C115%2C184%2C58%2C157%2C98%2C90%2C80%2C130%2C119%2C167%2C50%2C158%2C0%2C93%2C151%2C155%2C168%2C45%2C121%2C13%2C187 HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-TRen7nwF';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: b9md3G/qejPEU2WfQxoP3Y6lMqrvufZZL3ln2/RmP2XNt1sU+JsMlO/eg9EgB/zjI63hOq3TgGAlWcc2j/DgcQ==\r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=17, rtx=0, c=119, mss=1232, tbw=122074, tp=107, tpl=0, uplat=667, ullat=1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494354,"size_decoded":142402,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9907)","md5":"90a9b4399c8f627a9f3a8ffe585939c2","sha1":"462b30b83a548019a69c2bdfb4a59c1bb88a015b","sha256":"e991e4bdc348070241275412492f698951acf73bf062f294438f228dae077943","sha512":"a01a8b5839f89f005273b2ca4b97e27a610930c38d744407d32ac0d515c962e65a7e0225904a207489f35b140cc7d0c424b8e7c34ef60424405e91780c842338","ssdeep":"6144:OHNFYp68joi0lj6fYfXYXqRbhixwz0wDPJS5CfIFissSi:KNFGjoi0IqsiVi+z0wDPJS5Ct","tlshash":"24b45cc4b6a568625be67568adbf340b7074845278acc820eb6cdcca3e791494133f7f","first_seen":"2026-09-26T18:27:31.078364Z","last_seen":"2026-09-26T18:27:31.078364Z","times_seen":1,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-51XLQ0J28Y\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026_p=1790447203724\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=951395147.1790447204\u0026frm=0\u0026pscdl=noapi\u0026rcb=11\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153\u0026sid=1790447204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwormgpt.com.co%2F\u0026dt=WormGPT%20-%20GPT%20Alternative%20for%20Work\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1202","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.373Z","timestamp":1790447204373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4D:EC:F4:ED:40:7F:4E:7F:A6:48:8D:D4:0B:F4:A2:B2:84:6C:3E:45","sha256":"E2:7D:AA:13:64:5F:6C:A0:C3:F2:1C:74:06:14:45:31:48:D5:CF:B1:F3:FE:A5:B6:FD:64:3F:7A:D7:F9:1E:BB"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-51XLQ0J28Y\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026_p=1790447203724\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=951395147.1790447204\u0026frm=0\u0026pscdl=noapi\u0026rcb=11\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153\u0026sid=1790447204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwormgpt.com.co%2F\u0026dt=WormGPT%20-%20GPT%20Alternative%20for%20Work\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1202 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wormgpt.com.co/\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://wormgpt.com.co\r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:197:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:197:0\r\nreport-to: {\"group\":\"ascnsrsggc:197:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:197:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":838,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T10:46:45.803059Z","times_seen":18686010,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mpc-prod-24-s6uit34pua-uw.a.run.app/events?cee=no","fqdn":"mpc-prod-24-s6uit34pua-uw.a.run.app","domain":"mpc-prod-24-s6uit34pua-uw.a.run.app","tld":"a.run.app"},"ip":{"addr":"34.143.79.2","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.963Z","timestamp":1790447204963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a.run.app","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:39 GMT","end":"Thu, 03 Dec 2026 19:21:38 GMT"},"fingerprint":{"sha1":"04:34:F1:D5:33:2C:CE:7B:68:28:1C:93:55:DA:35:9A:2C:4B:49:84","sha256":"41:61:74:BA:36:47:4F:A5:C6:A4:07:EF:3D:B3:54:BD:CB:C4:BD:F8:03:83:00:53:4B:1D:05:6A:E0:8D:EC:7E"}}},"request":{"raw":"POST /events?cee=no HTTP/1.1\r\nHost: mpc-prod-24-s6uit34pua-uw.a.run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://wormgpt.com.co/\r\nContent-Length: 332\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":332,"data":"{\"event_name\":\"PageView\",\"smart_setup\":{\"is_auto_web_details\":true},\"event_id\":\"ob3_plugin-set_d70bfe5b0676676329d38cad6d4d904fad11b20895f620ea623fce4db68f545e\",\"fb.pixel_id\":\"1395393451681210\",\"website_context\":{\"location\":\"https://wormgpt.com.co/\",\"referrer\":\"\",\"isInIFrame\":false},\"fb.fbp\":\"fb.2.1790447204954.91680335896790900\"}"}},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://wormgpt.com.co\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: application/json\r\nx-cloud-trace-context: 6c867d1aff2530722f00b99fd36e0781\r\ndate: Sat, 26 Sep 2026 18:26:45 GMT\r\nserver: Google Frontend\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":0,"size_decoded":1332,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T10:46:45.803059Z","times_seen":18686010,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":2,"connect":21,"send":0,"wait":187,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/wp-content/uploads/2023/07/wormgpt-pricing-scaled-e1689929453720.jpg","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.750Z","timestamp":1790447203750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/wormgpt-pricing-scaled-e1689929453720.jpg HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 20:34:27 GMT\r\netag: \"4091e-63236298d1ac0\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=0; preload\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBQLjxyLuKoC7cOpST%2Bni1A2LSSj7brbIewyiPBO9ixIo0SA12UeZImV5fgb0x0zS22D0DmgoE1V5hPhQOfrHQcm3Mvw06zsGLdovuHmNsxtzC5BLMdrWFsb5rYkueBTkg%3D%3D\"}]}\r\ncf-ray: a414518f7c438be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264478,"size_decoded":265220,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 771x1819, components 3","md5":"b5cc508bf246417e781e5839f430e0d0","sha1":"62ae14705eaf09595a2139ebf96e37ea1a35d975","sha256":"bdc56e3bbb5fb8f4c604f6a320ef1e169e1438308de4a8afa4cbeeee8ac9fc18","sha512":"df7e2480d9f1eb2a97227cc806c2896dc94a4b7d45b2c2c1881006e7f042e00aa332e4ddf572af9cb9e08ef1c564cd4f0276da5b8472a180dcf57b62fa64cc94","ssdeep":"6144:D1jY/yYrhhMvxW5IvZrVlQh5ZKHSjVf1cInbCuoMchIQHtmiaI+xqyuXr+7:ZYtoxSIRhlDK0M1Nq+7","tlshash":"3a4413a153306bf6df0c0273a576feea96804690436baf33d19c8d1eb57a745b0831ad","first_seen":"2025-08-06T14:00:56.835967Z","last_seen":"2026-09-26T18:27:31.080469Z","times_seen":6,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.059Z","timestamp":1790447204059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 441201\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-27T10:31:39.724602Z","times_seen":564204,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":33,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.062Z","timestamp":1790447204062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 441201\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-27T10:31:39.724602Z","times_seen":564204,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":45,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/favicon.ico","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.574Z","timestamp":1790447204574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nCookie: _ga_51XLQ0J28Y=GS2.1.s1790447204$o1$g0$t1790447204$j60$l0$h0; _ga=GA1.1.951395147.1790447204\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Nov 2023 16:44:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3c2e-609cf0883ce80\"\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=0; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmVDwF3EjmvdNabhH8wGhB9mDsc%2B4c%2BvG4YGojPikh8rm1PJBI3vmRyTNw8SpUisGAQmvBpHiYe6rorGdelw%2FjRs5h8HuGvdqm2SXAkh%2F7mYL3UaL0TuVX6g1I%2BPpaFS%2BA%3D%3D\"}]}\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a41451949dcb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":8068,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6e13d4078082a1b90769f4630c136503","sha1":"52ae00c1c801e126caebd526951aa80c677472d8","sha256":"ca933d91ce77d2e471c1269546ce214860ff3745ad58c2492ad28e8d4004ad80","sha512":"64041cb87d6d285c269178dcc1595e27ba4cee0a2c59979bdb09b3f76d7965c4bc3897dbbe7b9895d4a552fa7ead1237672fbd5280c9b31b0559907276e9631c","ssdeep":"192:N5NnenhHYMJJNWzt8exZGivPIsojX/yboNxHdKg3z5VHx7GRG:Nvenh4onmt8eSivAhTyoBKgB7o","tlshash":"4f62b6e4e7a519ccc5f7eb348955298ec724cf11a11aa77930323b974782ae7c8507d3","first_seen":"2025-08-16T14:50:12.56449Z","last_seen":"2026-09-26T18:27:31.082389Z","times_seen":5,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T18:26:43.191Z","timestamp":1790447203191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 14 Jun 2025 18:44:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2Bv1q3H46VgarcbotM90dL3eHG7p1JIFeuLnxc5vP3Wry1%2BmkJ%2FDJg3s7XGrHyALglKDCUfkv9%2Bx3hgykDwUD84jXh06unekiqcYHVOw6e6%2FX47b4PQ9TrCDKbXKBI78Yw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0; preload\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncontent-type: text/html\r\ncf-ray: a414518d8bc28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42552,"size_decoded":11369,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b57db82ed2a166e0785a562d348b51a5","sha1":"326ac93a17c1eca319093cb592a9380bfccbb73c","sha256":"867e3736fd7e5db72f06c56864c134ab7ab1a70b02be19dea4003029d7569b00","sha512":"5c5e9007144fe15e5968d247fc68fd3eef8c21bec7742188e693a6f621e65cdb9bf95adc50118dc98c466cfb734f7b5e55f18676c1dc58c873506543f3174e7e","ssdeep":"768:+cL4KwzIHUEOOql5SUPqx8rNOO8KwIzGEvxXNB:+EhmI0EOOOsUPq9DKwIzXB","tlshash":"891395ae29f301166403b1e96bf7530d3675d007ea4acd293bec43489fc69949a73b9c","first_seen":"2025-08-16T14:50:12.560815Z","last_seen":"2026-09-26T18:27:31.083977Z","times_seen":5,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":234,"connect":11,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-09-26","alert":"Detects file containing Telegram Bot API","trigger":"wormgpt.com.co/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":{"engine":"luna_v2","pattern_id":"suspicious_scripts.javascript.telegram_api_send_message"}}]}},{"url":{"schema":"https","addr":"wormgpt.com.co/wp-content/uploads/2023/07/wormlogo.png","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.748Z","timestamp":1790447203748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/wormlogo.png HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 20:33:53 GMT\r\netag: \"6e244-6323627864e40\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=0; preload\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BPChq7VHqyoED71QntgsEjWYEUENyViz3LObHhWMOl%2B7FgbdEaGJaKUJjlS%2BHBpVR3smVzOiH3JydN2cgk2KnEGP4GmeBrev%2FR5RJDF2l%2Fka4jfF3lht2m6HIEKR%2FhB1Q%3D%3D\"}]}\r\ncf-ray: a414518f6c408be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 451140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451140,"size_decoded":451891,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"cd472425cdb99ba206ff4a0676afc107","sha1":"8c60b2097fa80dc1ddfefc30e221288adcd49ac4","sha256":"fca827c2adbe98d12d12b47a465401a75d84049a79c5b39a8d85d28f3484aa79","sha512":"97da2c5be3d2e0793444015d730ea026d4e7a5ac550c4270839f44422898e3383b6ce5ae8fed5166a0ef998a0317e735b689bc8f82cd875ae65398f91fb722b4","ssdeep":"12288:i2ASipHwiC2z8MgG5cOR5iGx2Xzq3u8xKGFn9431RToR:i20HU2QMgGpwq3zxK+947c","tlshash":"27a40263ce08257bb4441292a7ab6582d63519233115de4f2fd338af9b1bfa0fcb0d65","first_seen":"2025-08-06T14:00:56.83892Z","last_seen":"2026-09-26T18:27:31.085635Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.957Z","timestamp":1790447203957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Jul 2026 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"97:57:A1:16:A7:B0:43:B4:3E:64:15:36:82:C4:5D:BE:CE:DE:BA:62","sha256":"19:18:14:A3:2A:DF:B3:E2:D7:31:F2:A4:25:6D:09:01:9E:40:7F:87:74:B1:F3:D2:FD:7C:71:FE:47:EC:E5:7C"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-EsdEP7Pq';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nx-fb-optimizer: 0\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: MywvRLUa7isFxuhzt70rj8AtNMvsieAtECpNZ2sxTtu6pY6pFDABHVRonNDbAW+w7Af7ESv7ZAoHvoLL/pv+6Q==\r\ncontent-length: 111354\r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=19, rtx=0, c=23, mss=1232, tbw=5082, tp=9, tpl=0, uplat=1, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424690,"size_decoded":115372,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9255)","md5":"26406ac97f31f41f41879a04a2fba138","sha1":"a7d88b920d6f5a5f02879b7a87e4ff069acbdd82","sha256":"407b4a73534f3738e40e0a9dde6be862360ab81a37b11318f6815b892e043f8c","sha512":"e6c7b5130cf4ae0b9113fa7ff8aea7bc98f474425ad7aa5e317861be26b409cfed9dbe31fcd1d3086aa0013c639519ddf3b0a0c203a4b47bfec5bdf6daaa399c","ssdeep":"6144:i7gApToGDlZ6BYnTD+4Yd0E+brBLA30ru/dK0rZeP+b0mK8CLv+z1Y+COBfvBkn:wnAEmdBb0mK8CL7uKn","tlshash":"6594e7c9b1e5b0a107b7796c966f800772bbd5a238ccc960e51dedc8297c49e4133eb6","first_seen":"2026-09-23T19:32:02.816191Z","last_seen":"2026-09-27T10:39:39.984208Z","times_seen":106,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":4,"connect":25,"send":0,"wait":20,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-51XLQ0J28Y\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.074Z","timestamp":1790447204074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-51XLQ0J28Y\u0026cx=c\u0026gtm=4e69o0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\nexpires: Sat, 26 Sep 2026 18:26:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179300\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":540115,"size_decoded":179884,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"2fcf414f6e839429fe0bbbf0f43a0bd9","sha1":"7188270b12f144c26b67d2dbedabdbe810a6a624","sha256":"54d060579283684482396391baf92f415d5e2acfd36661fa4b5857550141dd35","sha512":"5e8370f9d6be0f3bfb4b7b1c42cc4015d91779b64c1fbf3315b363ff11aabf4d6501241a05ea1f235bc6e5f374f9b5df99d7250b82c6625bc5eeadb21eb57288","ssdeep":"6144:qowp4YH7Bzn5ceZqhLRIzECIcW3sVbEbzE8U3SLoJfjXSyoGLxs5MY/9:+H7Bz5iCzA3sVNJ7PtxK","tlshash":"21b408ce73c674229396f178903f01cba97b29a2b45cc89af289dce42d3455a5163f7c","first_seen":"2026-09-26T18:27:31.087524Z","last_seen":"2026-09-26T18:27:31.087524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-51XLQ0J28Y\u0026cid=951395147.1790447204\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153\u0026z=326586787","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.377Z","timestamp":1790447204377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:25:08 GMT","end":"Thu, 03 Dec 2026 19:25:07 GMT"},"fingerprint":{"sha1":"FC:E7:07:88:73:73:DF:54:C0:46:86:13:F6:7A:96:CA:CF:F0:06:55","sha256":"3F:90:16:A5:E6:72:E1:7F:CE:8A:51:8E:F2:2B:59:12:4A:96:69:BF:B3:6E:9D:6B:E2:62:0C:5F:4E:71:BD:6C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-51XLQ0J28Y\u0026cid=951395147.1790447204\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153\u0026z=326586787 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-27T10:45:03.053302Z","times_seen":1079904,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.742Z","timestamp":1790447203742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Sep 2026 18:26:43 GMT\r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":1313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"148cc8bc3772ef785e0c9e5dcc14c96b","sha1":"a813a47fcb59092a94e27056f64c22032a6fd3cc","sha256":"861e24f2671c62fc6904b65b99285a64d7d1a7eb0452e0d8bb9b43f9ce9fcac2","sha512":"ebb272fc8f02f2c57efe2b8c5259e3d01876149b2930ca8ff4ef716756496fa10bf6089b9f8a46084eeff72cd993cc088013490c5bbe4f405ce818550cc31678","ssdeep":"96:AOOEaRwOOEaOFZOhOOEaJOOEaeJc+udOOEau9NtOOXaRwOOXaOFZOhOOXaJOOXa9:YRo7TbOmuwRv7M0OFu6RB7W+Oju8","tlshash":"dbc1be91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-09T07:23:51.356456Z","last_seen":"2026-09-26T21:08:18.577641Z","times_seen":1983,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":48,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/wp-content/uploads/2023/07/cropped-chatgpt-logo-white-on-transparent-background-png-e1686837314314.png","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.749Z","timestamp":1790447203749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/cropped-chatgpt-logo-white-on-transparent-background-png-e1686837314314.png HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Jul 2023 22:21:24 GMT\r\netag: \"39f6-600a21a2b2100\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=0; preload\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjDVnCxxPlcTZUt1kiRlCf5xi7w9cetK7IOw8cpn3s4mJV5Oo50K2d6r0JNExWItC7uQQhAtRDM3hL15DnUpiRu9v70XRURqe4wcevXVlhhqdxdtl2ZkDZHIHZHdVa4teA%3D%3D\"}]}\r\ncf-ray: a414518f7c418be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14838,"size_decoded":15575,"mime_type":"image/png","magic":"PNG image data, 362 x 362, 8-bit gray+alpha, non-interlaced","md5":"616be0e49492d170b4bc1a0f5db61fc1","sha1":"79f1a483f148e3ad1433fd1db40dd7ad4b178b4e","sha256":"92fb61b6bada86478df985fa890ff903e73cccfdcdd244c3f3000824ac40b837","sha512":"cacb714c8270e7a13f9b3a10992d5302eb1132252110034799feeb70644cdbeda8cac8614f828b4358dc2c9e9133ae9f1ffb75fecd78604bfd43b618d82cb447","ssdeep":"384:w4ZANvNsrXi4HpXdlrx6K72zogiUIBoioKeC+/YPWhXh55riV:1ZA5Iy2rxH2zEUIBoioJC+/hh55M","tlshash":"5962c08cbea4c59ae75f973c20c9d6ad894c1259cf2346c612e885f1a6d11016efe38e","first_seen":"2025-08-06T14:00:56.842388Z","last_seen":"2026-09-26T18:27:31.09044Z","times_seen":7,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormgpt.com.co/wp-content/uploads/2023/07/wormgptback.WebP","fqdn":"wormgpt.com.co","domain":"wormgpt.com.co","tld":"com.co"},"ip":{"addr":"104.21.47.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.959Z","timestamp":1790447203959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormgpt.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:13:21 GMT","end":"Sun, 08 Nov 2026 23:13:12 GMT"},"fingerprint":{"sha1":"82:28:14:21:1C:AD:EF:22:0B:2A:2B:CE:DC:50:16:40:6C:5E:14:CA","sha256":"D4:09:4E:9F:D0:F7:29:76:F1:F0:5A:B4:87:F2:B2:77:84:DB:E7:AE:AF:13:20:75:B9:38:4F:E7:9D:E9:D6:56"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/wormgptback.WebP HTTP/1.1\r\nHost: wormgpt.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Oct 2023 07:48:42 GMT\r\netag: \"9191-606cb1e9d0a80\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=0; preload\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DYpXAXuQc1tWchSrMMbqYlYWaIlMYY%2BK9TqSDHAVEfYz9dpfpg2P%2FB2EwH3IkcO7DcQqNbW7DED%2FuqNuPhM8AXVNwhnvddK3ev3oSophiW1c7vl%2BCYvE6JzvRa21W0Pow%3D%3D\"}]}\r\ncf-ray: a4145190cca58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37265\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37265,"size_decoded":38011,"mime_type":"image/webp","magic":"PNG image data, 1766 x 1080, 8-bit/color RGBA, non-interlaced","md5":"a732c2a62fb6220d57771987b9cae822","sha1":"1c5d3ef84652e614ef70912b1d06e39be0837204","sha256":"a06b53d871b1eff9a4acb5bfb55c9758a732f694010ab9c34a5ee1e00e5d516c","sha512":"5ccb94e930e2a0a7336f885804809573f30b3c1adeaabc53064533142c261c79135c7d9bc4973ebbd1a8e72e08b6687f5a757d0a994c5c025dc07697f1f4aa0f","ssdeep":"192:5/dUNUNUNUNUNUNUNUNUNUNUNUNUNUZUNUNUNUNUNUNUNUNUNUNUNUNUNUNUoWUF:5H","tlshash":"56f2964ed79611bbb2220250b7a0539346c56d733445ec1a32ebb64fa747fb02cb0f99","first_seen":"2025-08-16T14:50:12.568366Z","last_seen":"2026-09-26T18:27:31.091865Z","times_seen":5,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.072Z","timestamp":1790447204072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wormgpt.com.co/\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, OPTIONS, HEAD, POST, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://wormgpt.com.co\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qu5ne9NfEjoDFLDF7hFij2Hp37CP0HwgoQGWcevokvlnSAfXnDLh5YKwMw5ie0SNJWszptuJ4iyc8fbsBYUbhXrPv3hZ6FQrwo7yxZbtWlg%2FMRkMTlmi9skJ\"}]}\r\ncontent-encoding: br\r\ncf-ray: a41451918c6ab512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":2129,"mime_type":"application/json","magic":"JSON text data","md5":"1369881d2a3dd90aefb0b20cdb1ae8f1","sha1":"4f43ff231a96e695649b3b929e636be32a4653aa","sha256":"175f89dcc11d75e4450c179cbbbcd92b7815c9e50b944e0cee7eee8a453973bd","sha512":"c218cd16f2c72970929e3bb7bac5dce11ba32a13d0d2b197ccd0daeb4ae2a7a5ed8acce4c47af00705ee224afa3cd9665990518da97195cbb6d4f36e15e95206","ssdeep":"","tlshash":"2001df68e4680e7b9cb81358b4386a0b223422175f16398e7bd4974d0f8e8bf30b134e","first_seen":"2026-09-23T19:40:07.972426Z","last_seen":"2026-09-27T10:21:02.68464Z","times_seen":125,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":194,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.g.doubleclick.net/g/collect?v=2\u0026tid=G-51XLQ0J28Y\u0026cid=951395147.1790447204\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153","fqdn":"stats.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.147.157","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.375Z","timestamp":1790447204375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"83:F7:DE:72:52:37:83:31:BC:39:35:FD:5C:45:62:1B:59:B4:1D:08","sha256":"E8:67:E3:EC:95:89:D0:E6:59:C4:AE:51:30:17:D4:80:2C:55:9B:57:BA:33:BC:FE:43:AD:98:3B:B6:AE:1A:6E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-51XLQ0J28Y\u0026cid=951395147.1790447204\u0026gtm=45je69o0h2v9167594535z89167597500za20gzb9167597500zd9167597500xf1\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~119404696~120213116~120385423~120469145~120469153 HTTP/1.1\r\nHost: stats.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://wormgpt.com.co\r\ndate: Sat, 26 Sep 2026 18:26:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:165:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:165:0\r\nreport-to: {\"group\":\"ascnsrsggc:165:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:165:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":838,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T10:46:45.803059Z","times_seen":18686010,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":23,"send":0,"wait":32,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K832Z696","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:43.760Z","timestamp":1790447203760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-K832Z696 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wormgpt.com.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Sep 2026 18:26:43 GMT\r\nexpires: Sat, 26 Sep 2026 18:26:43 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 26 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130727\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382779,"size_decoded":131377,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6189)","md5":"cbb06d7fd2a9eea2c4bf8a37d3c88714","sha1":"d456a2b88630b4a985d58d1798dca6a87f38484c","sha256":"1781c36bf80fa9d2f43d3cbeccaba63baa601a52de24c0827183038d31d7fb20","sha512":"e0833ae62069199adf8ad4c3a03ac6e81a1e3e2688789d330834f88b9a93caa4bdcd5f519088e3fa2aa537aea3bda113a3e82e068cadd1f1c8ab9a1e44ab8cb1","ssdeep":"6144:Owp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLCY7a79:xvKE63sV7Yy","tlshash":"848429cdb3d6742293a2f578503f018bb27a69a2b84cc899f289dcd42d7465a4137f7c","first_seen":"2026-09-26T18:27:31.093951Z","last_seen":"2026-09-26T18:27:31.093951Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":1,"connect":15,"send":0,"wait":45,"receive":43,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormgpt.com.co/","date":"2026-09-26T18:26:44.057Z","timestamp":1790447204057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wormgpt.com.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:23 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 441201\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-27T10:31:39.724602Z","times_seen":564204,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":2,"connect":45,"send":0,"wait":31,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}