{"report_id":"5734b062-1bc3-4881-b756-62dc5f9ca9c0","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-11-05T16:01:40Z","url":{"schema":"http","addr":"wmcc-casefb384048.vercel.app/?naps","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/submit-application.html","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"title":"Loading","dom":{"size":117038,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1905)","md5":"f28e6078d6530f7895fa48b33215b0ce","sha1":"900712af82f9307921aa3f33405cfc09b7e95875","sha256":"f11c1a3031406973fe9931f01c2db21b32aad729485e47682a7c0a6847abf0bf","sha512":"51dbbfdf4cf934f79272a5720d14fa35bc406b6f20169789faa30cc805315fd0d52f0a070dd3d490be1c37d114eb5ecb15bdd902ae9d7baa0e073b9df5d9ad17","ssdeep":"1536:oi97Yi9dDi2dNQaI3m++fHQRUHv6SXW8TYgtYBDQF/h:oGYudDZdNDU/fwW8TQq5","tlshash":"bfb351a1e1e4523a002383c64e6b7f3a2ab8b657e751a9d0376d1b713fdbc91f4031a4","dom_hash":"domhash7f7e1f6afb3cd39118451cb98e4d97c4","first_seen":"2025-11-05T16:01:49.202022Z","last_seen":"2025-11-05T16:01:49.202022Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wmcc-casefb384048.vercel.app/?naps","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-10T16:01:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-05T16:01:22Z","timestamp":1762358482,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41602,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2025-11-05T16:01:22.661499+0000\",\"flow_id\":1578771808428029,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41602,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3418,\"start\":\"2025-11-05T16:01:22.630781+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-05","alert":"Detects file containing Telegram Bot API","trigger":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app/?naps","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"wmcc-casefb384048.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-11-05T16:01:41.666602Z","last_seen":"2025-11-05T16:01:41.666602Z","alert_count":115,"request_count":38,"received_data":1414390,"sent_data":22496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":1,"received_data":429561,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-02T22:17:55.857863Z","alert_count":0,"request_count":1,"received_data":79535,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-11-02T22:19:07.554281Z","alert_count":0,"request_count":4,"received_data":279807,"sent_data":1855,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":25468,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2025-11-03T00:57:11.007655Z","alert_count":0,"request_count":1,"received_data":650,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"5d76488286d1bda66fe5851e0050e547","sha1":"315164bc65e0684f1eff362fd6e658f28009c305","sha256":"a8cf9cd8da474bbedf97235320e740c68a613afcc832371b532cb140b5f3a931","sha512":"49f97975e28130cdec7253231af213c97447e2173d28e453b2b9bbfd2cea54e7f41a370e0330f0a6961c298a852ccbe28d4374de94801ffd90ae0ad11a4c14c7","size":679,"token":"8399959797:AAHxkjJLJS3sJxNHIUeTEiXbLjVHyKIaHjk","is_revoked":false,"bot":{"token":"8399959797:AAHxkjJLJS3sJxNHIUeTEiXbLjVHyKIaHjk","user_id":"8399959797","username":"new_data_global_bot","first_name":"new_data_globalbot","last_name":"","chat":{"chat_id":"-1003065986040","title":"83几卂ㄒ尺卂_几卂́ㄖ_卄卂̉丨86","type":"supergroup","bot_is":"administrator","total_users":4,"active_members":null,"admins":[{"user_id":8399959797,"username":"new_data_global_bot","first_name":"new_data_globalbot","last_name":"","is_bot":true},{"user_id":442232326,"username":"mansinblack","first_name":"Man in Black","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-05T16:01:22Z","timestamp":1762358482,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41602,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2025-11-05T16:01:22.661499+0000\",\"flow_id\":1578771808428029,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41602,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3418,\"start\":\"2025-11-05T16:01:22.630781+0000\"}}"}]}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/formHandlers.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8ae7d3b0655f9a1ae2c55b8630c20aa","sha1":"bfe56348d84500975fdc3387ae2ed6fb1f2c2d1e","sha256":"d0bb50d12db4def72512424d0d48786fc1b2ef589f0a61614a24c9d47c6faec4","sha512":"548a4dcb75e8778a302eb85ef15e8036413ada3884898b164de05293387c4fc66904de938d40239047b14c635fcb5c22f500e0db5a790d4bdfee59b69a11049f","ssdeep":"384:S3rGgrZpJr6pWzIpjUHaBI60h6hw/T6NTcnuNM3TdUv+UMD5h33M0k3qlDALs2II:sKPFNTcnzTdO+ncqmvPsxi","tlshash":"9ea28559452a063646bba37b5beb5b49f5b6003b5901c2013cbc86c02ffac5646b1ffd","size":23216,"data":"","first_seen":"2025-09-21T08:50:45.319101Z","last_seen":"2025-11-05T16:01:49.207501Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.8.2/angular.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8b55518d979465737523088a9007e74","sha1":"32e24fc5f40120fe30ca097235d6c5988f84c927","sha256":"24103af48b9ee0409c9178cd92eba5dc3cdf0c76827b7c265c4f6f681b4dc176","sha512":"ee861778ad0ec531719dd8747ab2fc16c8c6beb97654c0e8afa7d5ab394b19fc0e410a936d8b063efe19675e501df4a4f34768c9a33464976f9320dc54eeca14","ssdeep":"3072:8t8OcvvjNCLK3pKtYZdwj6Leh+r325bosw8np3e:8tYJ5Keqj6Kw8n1e","tlshash":"9404d7deb6c6b05183a378b490bf000ab17aa995f84c4ca5f1a4e4c07e7496d917bf3d","size":177366,"data":"","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-08-13T05:49:46.802262Z","times_seen":1693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/analytics.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21664855c5dfc838ae680d95d9442fbf","sha1":"8080b179d81ac2a879c9427a87aebed7fa95ca91","sha256":"aabc1beae27b85ca4c04f9b9c8c4f7b6ca1ea50ef1317ad03e593627484ad266","sha512":"ff944d5be73bb24da555e9246085a6c3ebbbe787c7e11c9db203b5149ecd74fad57bc4b2a48f99b912f097aedbc2f16b2d5cdd3f881ef024f108c096d461bf56","ssdeep":"","tlshash":"c5c02b8c35224c7070e73b844b1ff300f001731055a00933480533c86332c13b309d60","size":147,"data":"","first_seen":"2025-08-27T17:18:32.836881Z","last_seen":"2025-11-05T16:01:49.222478Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/redirect.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fa7c8c6f1d140c318a4221e8605d55e","sha1":"93f251902008185b061c277ae1d0d5ae0d39d07e","sha256":"2e81c511a76e7d452471ec10bc86160e1b3ec8016e3b1f1e88b2c8954ecbf5b7","sha512":"582ff47880a117ba8fa3504aa37c7f6b0f8198ca54f047660f7cb267a713e332c03f45b746d18cda8a465a3ff19575d8acf56505fd46092a4e168b3c81a6153c","ssdeep":"","tlshash":"97f0e1d4320a3c19067043b0b663f264a2f3205ee702c50a7a2ab5319b2190ff676edf","size":576,"data":"","first_seen":"2025-08-27T17:18:32.844251Z","last_seen":"2025-11-05T16:01:49.24273Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/analytics.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21664855c5dfc838ae680d95d9442fbf","sha1":"8080b179d81ac2a879c9427a87aebed7fa95ca91","sha256":"aabc1beae27b85ca4c04f9b9c8c4f7b6ca1ea50ef1317ad03e593627484ad266","sha512":"ff944d5be73bb24da555e9246085a6c3ebbbe787c7e11c9db203b5149ecd74fad57bc4b2a48f99b912f097aedbc2f16b2d5cdd3f881ef024f108c096d461bf56","ssdeep":"","tlshash":"c5c02b8c35224c7070e73b844b1ff300f001731055a00933480533c86332c13b309d60","size":147,"data":"","first_seen":"2025-08-27T17:18:32.836881Z","last_seen":"2025-11-05T16:01:49.222478Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-13T09:50:43.711659Z","times_seen":497793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/main.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3c9492dd45522ca1d3002e02740dde6","sha1":"e11a35e8cc0b2d5abf41b4da46b03a8d781d22b0","sha256":"c51b2405fe5dbd13f0433096b6c4569f9d9bf53fbeb82f8384c1557e1168d1f7","sha512":"73df1e16b9ca8a7e4a10a24fd17f66e6fb32563c05e9a94bcd12a7998307989f1d6c1b91031d7266746f0a9fad8f2ef1a56f5f3069e419ac08843cdb48c02bb6","ssdeep":"","tlshash":"e6410d4a61676532003da6398b8bb20cfb22a03f62409b847e2f03606fb5c554215fde","size":2357,"data":"","first_seen":"2025-08-27T17:18:32.82654Z","last_seen":"2025-11-05T16:01:49.20888Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/angular-translate/2.19.1/angular-translate.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf688c882a8638717cbc4677f57026a8","sha1":"bf33bcf034e25e524f964d4352572878b5bd62e0","sha256":"06114dc257e2b0b7eb2018a93ed37f04411058cf1ca3775e4c60a730fd09bc7d","sha512":"54f5d968c64fbf29abe1f96ec6dc20cb42328a31e61f24725da0d7263feefe30f8101ea4dfe72338dd7a8ef44d1d88df3fbac99bca8329a63a0e275870584af5","ssdeep":"384:PraZgwAbh5bUk7cosHiV07KtreI089VPhIAhas8s59zVP4pRsj:/PBsHK07KoumlS9zVwpk","tlshash":"19b262c8f2f2b119434bb070939f554ae13e84a8306e4e58f7a8d4962c7a90d527ff79","size":24450,"data":"","first_seen":"2024-04-14T18:29:34Z","last_seen":"2026-07-21T18:38:57.256525Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/mobileCheck.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d4cdcf19fadfe62eb9803831fab116e","sha1":"21cf5f5c6c17f0131b1ea85f460786e0f1d180ac","sha256":"da91a870f2195b5103c0f9f810e92ca26ad1d9e0de9f5a80725bdc3e7539e1ce","sha512":"1482869b2520ce47274421bb9128d18696507be1dab05aefafab5210d77469497ed7360a8e20db8893440271db762a71ca1a189327ce2bc592e7794b2270a056","ssdeep":"","tlshash":"1d41b7ecb66cc69d45ba709f82ddb428dbf10464f9628412f4cd15821fba892c613ced","size":2166,"data":"","first_seen":"2025-08-27T17:18:32.822801Z","last_seen":"2025-11-05T16:01:49.216169Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/sublinks.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77577821e167c3c03708fff27558d52","sha1":"71e929c9fd5fd2b650a6e43bb52bb958178679b6","sha256":"69abf2f644b447e7f8b5ce6d3d348c3db74e9503c3f8c6b2a6d4db0218088b90","sha512":"78c8edea51eab8f00e0ce53a9d7bf06620b5b03a44b7696413c5212eec019b10085dd11cdcd172ff993015231e817713b3366a43c1bcccb8b9e537a0eab977b2","ssdeep":"96:aFB95ZNWMQQ9tFsvrTV5hMVcTmYqjviVBDy0r9GMu/IiNqgidOecuqqviuq8CkBW:sB95nXvtSv3lkcz+vif7rk/re55wp","tlshash":"33f152c66146233a50ba0379eb5b570afb3a84771200c119f52cc4e0af76837b7a7ec9","size":7645,"data":"","first_seen":"2025-08-27T17:18:32.864598Z","last_seen":"2025-11-05T16:01:49.206291Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LGMPS657N9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df207449ca62bd6b9508104154c581cc","sha1":"d3c16fb8265fab8ea2617ab641580f9766e9bfc9","sha256":"64910bad406e32917b3392eac66277551dec4361fc58760b1499ed6c53631872","sha512":"768ea8fc278839958c84346b5096cf4a5865f63607f4bde506001a9c87a78cfacbaf16443e168ab4a43826872fc99e07d7a18c5dcd89c3752052674a193cbb06","ssdeep":"6144:HBwWF4XJN1tyXRnNaBOgpmbv7dQIYhzO+PK3sr:hjFWb2XRnNCGYhR","tlshash":"ae941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","size":428957,"data":"","first_seen":"2025-11-05T16:01:49.210091Z","last_seen":"2025-11-05T16:01:49.210091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/submit-application.html","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-13T09:42:11.110351Z","times_seen":379679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/app/nine/app.js?v=","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be18bfffdb7d5c39b1213b1bbe9b04b9","sha1":"9e71d83d6b43ed7cfb6d33b46ba4486333536a1d","sha256":"c3d625f1cd7c040bc31e3aca874f0c65c51aa73cfe73c5fe033a8180f15bec58","sha512":"9a5cb193e531d01b25b5fcc19c71491f79498064908994e4e68739a2fe9fff6ee558b9aaaf60c6c08ffa1f07ba296abb2f9175a1ca16a781548c6fceca7087e7","ssdeep":"192:siz9xZ5fYtx4R5QpY081QO+CvQkhibYW5Rl0AwX:7fZ5fYtrpj81LGkC5RiT","tlshash":"f6e15f08296aa1718ab6333eeb67e248ff6510233001c7557cedc7286f70d699663edc","size":7289,"data":"","first_seen":"2025-09-08T22:27:00.86098Z","last_seen":"2025-11-05T16:01:49.211259Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.8.2/angular-route.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f4d107c6992678c6f86f91452f4ded","sha1":"32197fa25de2415816c22fd4d512fef407e2df33","sha256":"c34f2aef7baa04ca110899ca685207323346266b7740deaa1f077aafb75ee4cb","sha512":"e73380b9bddc229aa49672a6334e6ca6fe31b6d7a614395b06b9917b15a23f469657c7656b21067226a9023050580ee5810b313d8e9acb4a08515b58fe98af5c","ssdeep":"96:+JGmtBWItDMwzo4myyUYiuK8rZ46hTqYUJ13/04ThKiynP+R7WfX:+8mao/o4Mrbxw5/04IFnP+5i","tlshash":"8bc17228b9d0f5a293db3578920f046a92325c93764cc4b8f69ceec02c74e6d5967e2d","size":5720,"data":"","first_seen":"2023-03-08T07:53:33Z","last_seen":"2026-08-13T05:49:46.87778Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/antiBot.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a97fff341ab9c3d520d0189309273204","sha1":"741bdeba5b0ffd1d005ca21aff8c03a1c7164116","sha256":"298f2b568248e6b8969aeac9baaa51ffe9bc4ea44f0e2d9b35bcf452053aa109","sha512":"866273902f2e4219946133f96e085a12f217a9056c714c6d2927e4333fe1e931b061857be44c9896c713ed760704a0ab93c267f626a78c10442828cbb9755346","ssdeep":"","tlshash":"41e0a52bf43c611205f32a781566a265e8fb201312423287764b4994bfb6cea52b3e5f","size":433,"data":"","first_seen":"2025-08-27T17:18:32.862227Z","last_seen":"2025-11-05T16:01:49.205088Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aa8d64e726c4a57adb5c88f9115996b","sha1":"901169527507ff9e662cf64d8e361f359308970d","sha256":"7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe","sha512":"ef6583f7684bb3b4f91405e7def90d65f9561baa609540c3a66f3b4de4267d283c2a7af298bd86df447b6ace05993c2182ef47ede4b30c25f79a38ad49e70a9f","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV","tlshash":"a573d6493254b87309ee55a68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","size":78743,"data":"","first_seen":"2023-03-07T01:03:37Z","last_seen":"2026-08-13T09:29:20.994728Z","times_seen":24476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/antiBot.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7287e3a0a23ae685ba425313c6c2d0f","sha1":"c8f181e9a00abe51170828e5ceee96cb4e749da8","sha256":"4c76450dd18b98f73e918a89caae360fd849b257e02de90aa21a1c417651a85b","sha512":"b39d23017587133d39012748c3a3eba0516533c249858134be37c63dd013a7fb22f20fb368e30e861f40e7b51e69241a8fd6231e2ed1030a0cacc2a1ca55a566","ssdeep":"","tlshash":"55f0a417e43d611105f72a740566a664d8fa201212523283774f4994bebace952b3e5f","size":528,"data":"","first_seen":"2025-08-27T17:18:32.882107Z","last_seen":"2025-11-05T16:01:49.228039Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/antiBot.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7287e3a0a23ae685ba425313c6c2d0f","sha1":"c8f181e9a00abe51170828e5ceee96cb4e749da8","sha256":"4c76450dd18b98f73e918a89caae360fd849b257e02de90aa21a1c417651a85b","sha512":"b39d23017587133d39012748c3a3eba0516533c249858134be37c63dd013a7fb22f20fb368e30e861f40e7b51e69241a8fd6231e2ed1030a0cacc2a1ca55a566","ssdeep":"","tlshash":"55f0a417e43d611105f72a740566a664d8fa201212523283774f4994bebace952b3e5f","size":528,"data":"","first_seen":"2025-08-27T17:18:32.882107Z","last_seen":"2025-11-05T16:01:49.228039Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/redirect.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fa7c8c6f1d140c318a4221e8605d55e","sha1":"93f251902008185b061c277ae1d0d5ae0d39d07e","sha256":"2e81c511a76e7d452471ec10bc86160e1b3ec8016e3b1f1e88b2c8954ecbf5b7","sha512":"582ff47880a117ba8fa3504aa37c7f6b0f8198ca54f047660f7cb267a713e332c03f45b746d18cda8a465a3ff19575d8acf56505fd46092a4e168b3c81a6153c","ssdeep":"","tlshash":"97f0e1d4320a3c19067043b0b663f264a2f3205ee702c50a7a2ab5319b2190ff676edf","size":576,"data":"","first_seen":"2025-08-27T17:18:32.844251Z","last_seen":"2025-11-05T16:01:49.24273Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.2.7/angular-resource.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c51552177e944e72eacc921501e55dd9","sha1":"38882a839ef2094be38e38df4356aec18f0349ac","sha256":"5ef127d8cbe045d74b207fd89b56254b67bbdc7d4e989de89c2d9f1e9ad8a0d9","sha512":"0e88ac629b8102f793c13a8744c0fa07748f48a11489a8e8751c1729c351b1266bb89ebffffeffa2b4af8d2ddcd8f0eb89a9ca3ab6a78d30e52c0ebdf551d10d","ssdeep":"","tlshash":"6761fae57dd6f4a683b22138718b0a6bd0b8a844f7ecce91f280edc5297865f0013e09","size":3278,"data":"","first_seen":"2025-04-26T12:00:03.100336Z","last_seen":"2025-11-19T03:40:49.50339Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d76488286d1bda66fe5851e0050e547","sha1":"315164bc65e0684f1eff362fd6e658f28009c305","sha256":"a8cf9cd8da474bbedf97235320e740c68a613afcc832371b532cb140b5f3a931","sha512":"49f97975e28130cdec7253231af213c97447e2173d28e453b2b9bbfd2cea54e7f41a370e0330f0a6961c298a852ccbe28d4374de94801ffd90ae0ad11a4c14c7","ssdeep":"","tlshash":"f0019e92052b5c5505b9d3b379d3f218fb89653b3140c861b7ac80da1fba85091d1ecc","size":679,"data":"","first_seen":"2025-09-21T08:50:45.341647Z","last_seen":"2025-11-05T16:01:49.241621Z","times_seen":44,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-05","alert":"Detects file containing Telegram Bot API","trigger":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/countryCodes.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"983f87e6ad98c0bedb87b73614b30f36","sha1":"04fb91950b0aabb4ac7b283f05ebaf22c8a7c9e3","sha256":"2a9cc15c37c86a414d730bc434d3d7fad54d3ce374e480e417c62364656a1f41","sha512":"85db3a88c3bff6f7acaaaf51407883d2d2f375c8b2f20826435055d163da12cf31928ecb3691b46298fa4ca059ca661ec170708dee1ab243a5e454f240248a37","ssdeep":"192:UXuBCNn1B4qBEDwcd4HOOJLEAOMFO5yTZHaY9CLLkkJDDJkMC0:Uugp1B4qBWw+ypFek59oLxNzb","tlshash":"4e22668e54a1974cbd30b35072b75379aa4ea7d3c6b024bbf9b80a012bdbeb5c045d4d","size":10599,"data":"","first_seen":"2025-08-27T17:18:32.879916Z","last_seen":"2025-11-05T16:01:49.24093Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/PrivacyCenter.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/PrivacyCenter.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 54166\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"PrivacyCenter.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"74b96e7042a80ca021e3b7ed684c0e7c\"\r\nlast-modified: Wed, 05 Nov 2025 00:58:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358482002-8f030e325ebb\r\ncontent-length: 65428\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":65428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced","md5":"74b96e7042a80ca021e3b7ed684c0e7c","sha1":"8fac7029228702fd8783acd66994d074306b3abf","sha256":"82e661b326b8f6d19b06ffed247b6a6a0813fc2d1bd8962322eff28cb0908917","sha512":"b791a6cf04626901829796e7f73f3b833d61c253cf2c8b24e1143ec21ad8c5c86f1aac0bcb9101416472dbdb0f395123ba29ff7eff265021719dd64890c336e6","ssdeep":"1536:XQ60QBLrWGI/74nBepCThZ6XBL1Jz5brkoLtqaP:h06L6xT4n4myLLzZxD","tlshash":"2853021c6a424b3b55df9c3ad56c0fcf20977053004d0a8216a6eebce095fd38a76ee2","first_seen":"2024-09-05T08:59:46Z","last_seen":"2026-08-12T18:51:07.67501Z","times_seen":5158,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/antiBot.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/antiBot.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 54166\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"antiBot.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"a97fff341ab9c3d520d0189309273204\"\r\nlast-modified: Wed, 05 Nov 2025 00:58:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqmnk-1762358482469-d5b2d787d3eb\r\ncontent-length: 433\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a97fff341ab9c3d520d0189309273204","sha1":"741bdeba5b0ffd1d005ca21aff8c03a1c7164116","sha256":"298f2b568248e6b8969aeac9baaa51ffe9bc4ea44f0e2d9b35bcf452053aa109","sha512":"866273902f2e4219946133f96e085a12f217a9056c714c6d2927e4333fe1e931b061857be44c9896c713ed760704a0ab93c267f626a78c10442828cbb9755346","ssdeep":"","tlshash":"41e0a52bf43c611205f32a781566a265e8fb201312423287764b4994bfb6cea52b3e5f","first_seen":"2025-08-27T17:18:32.862227Z","last_seen":"2025-11-05T16:01:49.205088Z","times_seen":148,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/sublinks.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/sublinks.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"sublinks.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"49883e53ff6259babbe27c65813845b3\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482523-4714d2108dda\r\ncontent-length: 2787\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7645,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d77577821e167c3c03708fff27558d52","sha1":"71e929c9fd5fd2b650a6e43bb52bb958178679b6","sha256":"69abf2f644b447e7f8b5ce6d3d348c3db74e9503c3f8c6b2a6d4db0218088b90","sha512":"78c8edea51eab8f00e0ce53a9d7bf06620b5b03a44b7696413c5212eec019b10085dd11cdcd172ff993015231e817713b3366a43c1bcccb8b9e537a0eab977b2","ssdeep":"96:aFB95ZNWMQQ9tFsvrTV5hMVcTmYqjviVBDy0r9GMu/IiNqgidOecuqqviuq8CkBW:sB95nXvtSv3lkcz+vif7rk/re55wp","tlshash":"33f152c66146233a50ba0379eb5b570afb3a84771200c119f52cc4e0af76837b7a7ec9","first_seen":"2025-08-27T17:18:32.864598Z","last_seen":"2025-11-05T16:01:49.206291Z","times_seen":149,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/formHandlers.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/formHandlers.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13586\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"formHandlers.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"c22bdb8faa27aaa8fef923eaa77e72e0\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482597-3d413cad7886\r\ncontent-length: 6175\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23240,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b8ae7d3b0655f9a1ae2c55b8630c20aa","sha1":"bfe56348d84500975fdc3387ae2ed6fb1f2c2d1e","sha256":"d0bb50d12db4def72512424d0d48786fc1b2ef589f0a61614a24c9d47c6faec4","sha512":"548a4dcb75e8778a302eb85ef15e8036413ada3884898b164de05293387c4fc66904de938d40239047b14c635fcb5c22f500e0db5a790d4bdfee59b69a11049f","ssdeep":"384:S3rGgrZpJr6pWzIpjUHaBI60h6hw/T6NTcnuNM3TdUv+UMD5h33M0k3qlDALs2II:sKPFNTcnzTdO+ncqmvPsxi","tlshash":"9ea28559452a063646bba37b5beb5b49f5b6003b5901c2013cbc86c02ffac5646b1ffd","first_seen":"2025-09-21T08:50:45.319101Z","last_seen":"2025-11-05T16:01:49.207501Z","times_seen":44,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/main.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/main.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13586\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"7a222cb3721e206638c5eac221428bc2\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482632-547e5b34dca4\r\ncontent-length: 1004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2357,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c3c9492dd45522ca1d3002e02740dde6","sha1":"e11a35e8cc0b2d5abf41b4da46b03a8d781d22b0","sha256":"c51b2405fe5dbd13f0433096b6c4569f9d9bf53fbeb82f8384c1557e1168d1f7","sha512":"73df1e16b9ca8a7e4a10a24fd17f66e6fb32563c05e9a94bcd12a7998307989f1d6c1b91031d7266746f0a9fad8f2ef1a56f5f3069e419ac08843cdb48c02bb6","ssdeep":"","tlshash":"e6410d4a61676532003da6398b8bb20cfb22a03f62409b847e2f03606fb5c554215fde","first_seen":"2025-08-27T17:18:32.82654Z","last_seen":"2025-11-05T16:01:49.20888Z","times_seen":148,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LGMPS657N9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-LGMPS657N9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\nexpires: Wed, 05 Nov 2025 16:01:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142632\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428957,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"df207449ca62bd6b9508104154c581cc","sha1":"d3c16fb8265fab8ea2617ab641580f9766e9bfc9","sha256":"64910bad406e32917b3392eac66277551dec4361fc58760b1499ed6c53631872","sha512":"768ea8fc278839958c84346b5096cf4a5865f63607f4bde506001a9c87a78cfacbaf16443e168ab4a43826872fc99e07d7a18c5dcd89c3752052674a193cbb06","ssdeep":"6144:HBwWF4XJN1tyXRnNaBOgpmbv7dQIYhzO+PK3sr:hjFWb2XRnNCGYhR","tlshash":"ae941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","first_seen":"2025-11-05T16:01:49.210091Z","last_seen":"2025-11-05T16:01:49.210091Z","times_seen":1,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":183,"dns":1,"connect":29,"send":0,"wait":49,"receive":58,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/app/nine/app.js?v=","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /app/nine/app.js?v= HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"app.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"3a9e2660d18d97901c6b9c4baf6ea472\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tv8ws-1762358481612-2418d2b72876\r\ncontent-length: 2927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7289,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"be18bfffdb7d5c39b1213b1bbe9b04b9","sha1":"9e71d83d6b43ed7cfb6d33b46ba4486333536a1d","sha256":"c3d625f1cd7c040bc31e3aca874f0c65c51aa73cfe73c5fe033a8180f15bec58","sha512":"9a5cb193e531d01b25b5fcc19c71491f79498064908994e4e68739a2fe9fff6ee558b9aaaf60c6c08ffa1f07ba296abb2f9175a1ca16a781548c6fceca7087e7","ssdeep":"192:siz9xZ5fYtx4R5QpY081QO+CvQkhibYW5Rl0AwX:7fZ5fYtrpj81LGkC5RiT","tlshash":"f6e15f08296aa1718ab6333eeb67e248ff6510233001c7557cedc7286f70d699663edc","first_seen":"2025-09-08T22:27:00.86098Z","last_seen":"2025-11-05T16:01:49.211259Z","times_seen":126,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/2FA.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/2FA.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2FA.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"03d39d5d071182aba1b01ba2e859de39\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358482033-f5325742d1f9\r\ncontent-length: 114767\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced","md5":"03d39d5d071182aba1b01ba2e859de39","sha1":"7ba8f968b03e92fd59a6c4f6ce5c8aa36a5d2b92","sha256":"a7fd65363687e512751d88f7850b61969427e8d3aa9a177946bcd4bc280b71ad","sha512":"5bf4d0b9ff650ff11c8ff69c409c45fbfd31bc3f8c4b55f665bea8e11a42c412b9ea25b9974908ab9b670a22e80a445692a26b98535b84cb49299c37c22e16e6","ssdeep":"3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx","tlshash":"3cb31251b4a03e28e812f3ea73d7f49a4c71e374785d41a294047ec7e72da56f04afa4","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.393598Z","times_seen":9889,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.0.2\r\nx-jsd-version-type: version\r\netag: W/\"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\nage: 2386139\r\nx-served-by: cache-fra-etou8220154-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78743,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"0aa8d64e726c4a57adb5c88f9115996b","sha1":"901169527507ff9e662cf64d8e361f359308970d","sha256":"7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe","sha512":"ef6583f7684bb3b4f91405e7def90d65f9561baa609540c3a66f3b4de4267d283c2a7af298bd86df447b6ace05993c2182ef47ede4b30c25f79a38ad49e70a9f","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV","tlshash":"a573d6493254b87309ee55a68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","first_seen":"2023-03-07T01:03:37Z","last_seen":"2026-08-13T09:29:20.994728Z","times_seen":24476,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":6,"connect":30,"send":0,"wait":27,"receive":7,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/prefLang.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/root/prefLang.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26833\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::69ztb-1762358477364-382b29d8f97b\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/submit-application.html","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T16:01:21.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /submit-application.html HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"submit-application.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"0c5b178cfe05536725ca3d74764f050d\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358481552-249e3b35afe8\r\ncontent-length: 392\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":1007,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0c5b178cfe05536725ca3d74764f050d","sha1":"0a6e008c9399f14b6ef372e50243ff8f1bea296d","sha256":"c0df1a4c76018f114bfdd2e59f9db2796cdfd42ae1ca3c5f5ac4303e756bb926","sha512":"1330f2153f5028bbecb0cc4274fa43446d6f7db7dfb12a506fca26118d39c61672940ae3a422882220a9d4e916e55c3b220d2e05d8eaaf37fbbc5eeb8c667729","ssdeep":"","tlshash":"a3115c57aac88c2d5130c8553590b95e987ee02b2a61cfebf5e8542b2fb23dc8c97450","first_seen":"2025-09-08T20:57:49.966737Z","last_seen":"2025-11-05T16:01:49.214262Z","times_seen":128,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/fb_round_logo.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/fb_round_logo.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fb_round_logo.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"81bb5cf1e451109cf0b1868b2152914b\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358482027-695aff705644\r\ncontent-length: 42676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"81bb5cf1e451109cf0b1868b2152914b","sha1":"b70017639afc079394be1ea8625f7c4beb44d617","sha256":"676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6","sha512":"1782966b78f57cc91392f3ff03f05d37e0a5fd8b04b0997b2ef708d13c162ea4aad607e7705a36e0539d6a6b60337432ef271bff062f7170018b42c9b8b81de6","ssdeep":"768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I","tlshash":"b613f1da546bcdfec2f950b418ffe653f43ad07b1a8c446fe644eca2ec518a024e2641","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.393046Z","times_seen":15786,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/phone.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/phone.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"phone.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"3c18a93313e72ab9967152a4e92aa238\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358482049-be8a87816222\r\ncontent-length: 255341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced","md5":"3c18a93313e72ab9967152a4e92aa238","sha1":"74671591dd7cc381c6ec6de1137b83c0e2f4d7ec","sha256":"fbc7addde1cd6057bd59c03941fcf38a6ac17dd90312d142ebd7520891c3656e","sha512":"4533459dba5b435eb888caa9b413a662fb111cd030d5befc6e9b34659fb95031f119de6f80f08f0c8311039073cacf66d3c0bf7acc5146579c3ca70e7f9c9905","ssdeep":"6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn","tlshash":"dd4423075785db6223c2bfe74a4e381c4975e8b544d0b5a536e21adf1fc89c7acc628c","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.394188Z","times_seen":17122,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/dir.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/dir.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26838\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wd479-1762358482063-09cc6556a73a\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/mobileCheck.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/mobileCheck.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 54166\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"mobileCheck.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"deba52b5cca7769b26854b553b72c603\"\r\nlast-modified: Wed, 05 Nov 2025 00:58:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482497-dee047f2d331\r\ncontent-length: 1395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1615), with CRLF line terminators","md5":"0d4cdcf19fadfe62eb9803831fab116e","sha1":"21cf5f5c6c17f0131b1ea85f460786e0f1d180ac","sha256":"da91a870f2195b5103c0f9f810e92ca26ad1d9e0de9f5a80725bdc3e7539e1ce","sha512":"1482869b2520ce47274421bb9128d18696507be1dab05aefafab5210d77469497ed7360a8e20db8893440271db762a71ca1a189327ce2bc592e7794b2270a056","ssdeep":"","tlshash":"1d41b7ecb66cc69d45ba709f82ddb428dbf10464f9628412f4cd15821fba892c613ced","first_seen":"2025-08-27T17:18:32.822801Z","last_seen":"2025-11-05T16:01:49.216169Z","times_seen":148,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T16:01:21.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.8.2/angular.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /ajax/libs/angularjs/1.8.2/angular.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62297\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 10:25:34 GMT\r\nexpires: Tue, 03 Nov 2026 10:25:34 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 192947\r\nlast-modified: Tue, 27 Oct 2020 18:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":177366,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (647)","md5":"a8b55518d979465737523088a9007e74","sha1":"32e24fc5f40120fe30ca097235d6c5988f84c927","sha256":"24103af48b9ee0409c9178cd92eba5dc3cdf0c76827b7c265c4f6f681b4dc176","sha512":"ee861778ad0ec531719dd8747ab2fc16c8c6beb97654c0e8afa7d5ab394b19fc0e410a936d8b063efe19675e501df4a4f34768c9a33464976f9320dc54eeca14","ssdeep":"3072:8t8OcvvjNCLK3pKtYZdwj6Leh+r325bosw8np3e:8tYJ5Keqj6Kw8n1e","tlshash":"9404d7deb6c6b05183a378b490bf000ab17aa995f84c4ca5f1a4e4c07e7496d917bf3d","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-08-13T05:49:46.802262Z","times_seen":1693,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":235,"dns":1,"connect":27,"send":0,"wait":15,"receive":16,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/styles/bootstrap.min.css","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/styles/bootstrap.min.css HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bootstrap.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"d85bc7226ee2a8e735679db07264f535\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358481991-4df4a6404ec1\r\ncontent-length: 27114\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":185752,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (334)","md5":"1e55196f4d1ac726e459cb92f86e730f","sha1":"a5c8e91a537085f4289ece6548eb7a36ad180df1","sha256":"b709be7486289a0331a138dc4a691cf45bf71bacbdf3097ad332530c2bc2d23a","sha512":"f7b600bf553dbe9786a11fb7784042dd7d493d85d3a280194cfe10d4f133420baa3cc9a83bec636b4fd5b36af909995a4e36c7041892f804daa83b9b4b6c2383","ssdeep":"1536:7oo0pe3VX8IFqCvnUEE9RMPenjBCFeDm9M5FKBnpNfb:7Ae3TxM5FKBnpNfb","tlshash":"92045499fdf128085a178558a443bbf97b2d1085b709ee79f4a33651e3883c1e4f3e89","first_seen":"2024-09-27T08:41:11Z","last_seen":"2026-07-11T00:11:48.07914Z","times_seen":1354,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/meta-logo-grey.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/meta-logo-grey.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13586\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"meta-logo-grey.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"ffba640622dd859d554ee43a03d53769\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358482021-b9d6b31843f9\r\ncontent-length: 105511\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced","md5":"ffba640622dd859d554ee43a03d53769","sha1":"c91a100db7bfc04df9a5f3223d5b6f17536bf5ee","sha256":"139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f","sha512":"70c7c4df14a22e00a0caf1daf001e608454604fa0b4c13583efac7a8caff6c726d62c024f9e0626760b524f7d08184e4e30cf4a49be505acb1f9d29cfce35993","ssdeep":"1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma","tlshash":"efa3022ee1d5311eced3515032d47e985a86ace5cf421c08758cca9b8f34e994aed3ea","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.387902Z","times_seen":15749,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26838\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358482220-fef9374d6989\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26838\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqmnk-1762358482268-c8ebebcba7e9\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/analytics.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/root/analytics.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 44987\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"analytics.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"21664855c5dfc838ae680d95d9442fbf\"\r\nlast-modified: Wed, 05 Nov 2025 03:31:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6ddf-1762358477355-89bff85b600b\r\ncontent-length: 147\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"21664855c5dfc838ae680d95d9442fbf","sha1":"8080b179d81ac2a879c9427a87aebed7fa95ca91","sha256":"aabc1beae27b85ca4c04f9b9c8c4f7b6ca1ea50ef1317ad03e593627484ad266","sha512":"ff944d5be73bb24da555e9246085a6c3ebbbe787c7e11c9db203b5149ecd74fad57bc4b2a48f99b912f097aedbc2f16b2d5cdd3f881ef024f108c096d461bf56","ssdeep":"","tlshash":"c5c02b8c35224c7070e73b844b1ff300f001731055a00933480533c86332c13b309d60","first_seen":"2025-08-27T17:18:32.836881Z","last_seen":"2025-11-05T16:01:49.222478Z","times_seen":145,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/ico.ico","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /ico.ico HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26833\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6ddf-1762358477558-f3d31aaf9e94\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/angular-translate/2.19.1/angular-translate.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/angular-translate/2.19.1/angular-translate.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6853\r\ncf-ray: 999d91be1c4f5a0f-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65ad85fe-1ac5\"\r\nlast-modified: Sun, 21 Jan 2024 21:00:46 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 627458\r\nexpires: Mon, 26 Oct 2026 16:01:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j29eWn4Uu7Kjnw7UfeXtOmmohqYJ4fs0n507r9L73TL%2FmJw4PQe6%2BSoVemB9jHMwOEUe%2B6NipIZWIb00oUJ8iAOEFZMxXN8RAS6OkqlnN2cqCh7PlstF1iH%2BT8elw9C8cQDCkZvt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24450,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24316)","md5":"bf688c882a8638717cbc4677f57026a8","sha1":"bf33bcf034e25e524f964d4352572878b5bd62e0","sha256":"06114dc257e2b0b7eb2018a93ed37f04411058cf1ca3775e4c60a730fd09bc7d","sha512":"54f5d968c64fbf29abe1f96ec6dc20cb42328a31e61f24725da0d7263feefe30f8101ea4dfe72338dd7a8ef44d1d88df3fbac99bca8329a63a0e275870584af5","ssdeep":"384:PraZgwAbh5bUk7cosHiV07KtreI089VPhIAhas8s59zVP4pRsj:/PBsHK07KoumlS9zVwpk","tlshash":"19b262c8f2f2b119434bb070939f554ae13e84a8306e4e58f7a8d4962c7a90d527ff79","first_seen":"2024-04-14T18:29:34Z","last_seen":"2026-07-21T18:38:57.256525Z","times_seen":158,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":13,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/doc.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/doc.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"doc.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"95382a6dab40d5911185a921c53e6f6b\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqmnk-1762358482005-de3f61374645\r\ncontent-length: 5723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"95382a6dab40d5911185a921c53e6f6b","sha1":"4229cb577571111d747021988aac9dd6cd50634f","sha256":"e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069","sha512":"58dfd1656f931bf14044a8d4d790ccd3369a33d42aea35774bf4b0f2242173795c86fde3280d74849be492bbc50d4515f3f3985f93766559544da37e9988bc03","ssdeep":"96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ","tlshash":"89c1af99f79ec4b282d44b322cab03918b39702160116bed319d9375fe9d74cc9284f1","first_seen":"2023-12-25T05:22:01Z","last_seen":"2026-08-13T07:06:59.368363Z","times_seen":15911,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\nlocation: /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js\r\nrefresh: 0;url=/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::8jxh2-1762358482077-b870a4919852\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/json","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 20:29:41 GMT","end":"Mon, 02 Feb 2026 20:29:40 GMT"},"fingerprint":{"sha1":"B3:74:BE:7D:0D:B0:DC:28:D7:31:69:D0:4F:3C:BD:A7:30:1B:19:0F","sha256":"07:FA:17:68:0A:9F:AD:4C:D9:D3:6A:8B:6B:22:8A:59:5C:75:10:22:67:16:D3:31:95:4C:03:FF:9C:D9:5C:0D"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nOrigin: https://wmcc-casefb384048.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adf22d9a8ca3a97a9ff78909b8702358","sha1":"f5046826566a7e98d6b5e5c7b0a65677c3bde708","sha256":"756edd1454b049c1370e83c864bc93dfdd82f44d8f9752b3068e5a11867a5de3","sha512":"182391c8c01e54481853a09aa4cf8072496850e45863b198721d0d572e3aa93d8fe11a90bfb24cf97fa64cc132f1594c379474db65db5a1d2207694f770443b9","ssdeep":"","tlshash":"c3d02b6621341b37aeed455c8406960622656e1f1642369f0fe72b0c100c87334f03ae","first_seen":"2023-04-17T17:28:07Z","last_seen":"2026-06-07T07:46:18.554959Z","times_seen":58786,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":41,"dns":6,"connect":14,"send":0,"wait":138,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/?naps","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T16:01:17.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /?naps HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13960\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 12:08:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d8s5l-1762358477129-799a9537b5ce\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":10,"receive":30,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app/?naps","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/antiBot.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/root/antiBot.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13588\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"antiBot.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"b7287e3a0a23ae685ba425313c6c2d0f\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::69ztb-1762358477355-8ef80dcb72fe\r\ncontent-length: 528\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b7287e3a0a23ae685ba425313c6c2d0f","sha1":"c8f181e9a00abe51170828e5ceee96cb4e749da8","sha256":"4c76450dd18b98f73e918a89caae360fd849b257e02de90aa21a1c417651a85b","sha512":"b39d23017587133d39012748c3a3eba0516533c249858134be37c63dd013a7fb22f20fb368e30e861f40e7b51e69241a8fd6231e2ed1030a0cacc2a1ca55a566","ssdeep":"","tlshash":"55f0a417e43d611105f72a740566a664d8fa201212523283774f4994bebace952b3e5f","first_seen":"2025-08-27T17:18:32.882107Z","last_seen":"2025-11-05T16:01:49.228039Z","times_seen":145,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/Mate.mp4","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/Mate.mp4 HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13588\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Mate.mp4\"\r\ncontent-range: bytes 0-292265/292266\r\ncontent-type: video/mp4\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"10b6a79b6905a100feb12b61fed435b8\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::69ztb-1762358477420-453f56269a20\r\ncontent-length: 292266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":292266,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"10b6a79b6905a100feb12b61fed435b8","sha1":"0cc399458bb86e12ebcc7f81a34d7d18d4200d21","sha256":"2fb6e516e0120a67c26d56cfc201f81f88eee2cd5df9bb5019fc79af6b5650a4","sha512":"007dd3e24cf29493f78f112dc283b629e92b92173ba6660f021538f0926c87d133f7cde131d4241ff3fad5ceee0a2b090695948ee709820b0f271b1826384a5a","ssdeep":"6144:E/I+AeDkczPdLzS93F84WbJcbULlHZkO/+b8ffur4+8SpUAHc:E/LAeDU1F8C4xl+A+rb8Suec","tlshash":"ce5423aaa3d97305cf748a39c04ec365e25cfa866a971bf7b0c1ae470116059ce9c73d","first_seen":"2024-06-01T18:50:06Z","last_seen":"2026-08-13T07:06:59.385547Z","times_seen":5995,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/star.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/star.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"star.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"aae920faed2a3fe4c3083b339cd783df\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358482062-461d98e6b896\r\ncontent-length: 1980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit colormap, non-interlaced","md5":"aae920faed2a3fe4c3083b339cd783df","sha1":"be5e47195c28b585d65478e2399d0d5f9b74435c","sha256":"f75d9bcacc1a1aabc6f93c383f5494307d91f7f302c266626d6dc92b4b86585e","sha512":"968d180a7d9a2fe273a075174f6e7b4561a060f37fd7b1c6f12b2fd7a7d653318672f298245373b15f9aeca1982b2138546f300d48ec2dafaac73f3339147653","ssdeep":"","tlshash":"2d414c54345724a0d24b0be3d2a1bee3e0123e995ce0362c169048b4ffbad49d0e691a","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.365726Z","times_seen":14510,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/no_avatar.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/no_avatar.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"no_avatar.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"d5d30f28ca92743610c956684a424b7e\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wd479-1762358482076-464570d353a1\r\ncontent-length: 6043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d5d30f28ca92743610c956684a424b7e","sha1":"fd4a7207b724254d981a4ed4c7f675fd87868535","sha256":"4b842e25c6be485fd7f06b745ac91db2b6e9eee778c5442b157be78d51f83563","sha512":"7d0a522805b0a34b33f48791bbbfdfc361b9d91ee9d5843d67e8e1a774f9d8dad42c7d0efa429738a0680fcb8d71dacc4b47e22f1daa8ce718dbf36e6db35328","ssdeep":"96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx","tlshash":"fec19ee35fd67937430ad6fb6ee962c62b416188acb5f24c023373406157c548fa5e2d","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-13T07:06:59.378032Z","times_seen":14552,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/content/location/location.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26838\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358482175-c3be22982d74\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\nlocation: /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js\r\nrefresh: 0;url=/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/requests.js\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::bqmnk-1762358482244-cd2af943253e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31017\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 06:10:15 GMT\r\nexpires: Fri, 30 Oct 2026 06:10:15 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 553866\r\nlast-modified: Wed, 10 Mar 2021 14:28:09 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-13T09:50:43.711659Z","times_seen":497793,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":115,"dns":6,"connect":15,"send":0,"wait":15,"receive":9,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.8.2/angular-route.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /ajax/libs/angularjs/1.8.2/angular-route.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2583\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 12:36:34 GMT\r\nexpires: Tue, 03 Nov 2026 12:36:34 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 185087\r\nlast-modified: Tue, 27 Oct 2020 18:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5720,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (577)","md5":"83f4d107c6992678c6f86f91452f4ded","sha1":"32197fa25de2415816c22fd4d512fef407e2df33","sha256":"c34f2aef7baa04ca110899ca685207323346266b7740deaa1f077aafb75ee4cb","sha512":"e73380b9bddc229aa49672a6334e6ca6fe31b6d7a614395b06b9917b15a23f469657c7656b21067226a9023050580ee5810b313d8e9acb4a08515b58fe98af5c","ssdeep":"96:+JGmtBWItDMwzo4myyUYiuK8rZ46hTqYUJ13/04ThKiynP+R7WfX:+8mao/o4Mrbxw5/04IFnP+5i","tlshash":"8bc17228b9d0f5a293db3578920f046a92325c93764cc4b8f69ceec02c74e6d5967e2d","first_seen":"2023-03-08T07:53:33Z","last_seen":"2026-08-13T05:49:46.87778Z","times_seen":513,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":87,"dns":1,"connect":14,"send":0,"wait":15,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/save_img.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/save_img.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"save_img.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"8d3bcd1278891fc1e52d38e72549b3d0\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358482003-7ac6b328712a\r\ncontent-length: 7550\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8d3bcd1278891fc1e52d38e72549b3d0","sha1":"af1ab86b5a3993c468c3be9c59a8ed3d9091454d","sha256":"8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97","sha512":"e8c73ab69e70bdca02c1c7004947186455c632692311b4ca91d1bea143ce7f0b986dc0b0623b8ae82f9561549337171b3e89a55f7bcd92964fe214ddab1c4feb","ssdeep":"192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7","tlshash":"d8f18e4d66788d2d74db13ab8c3b69b38d3e2b809e52692ecb574058356962e830fc06","first_seen":"2023-12-25T05:22:02Z","last_seen":"2026-08-13T07:06:59.387309Z","times_seen":15917,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/img/block_2.png","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/img/block_2.png HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"block_2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"8942e3ff39cd6784c7c89bd6eb26d604\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358481996-14ab8f98a89d\r\ncontent-length: 18787\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced","md5":"8942e3ff39cd6784c7c89bd6eb26d604","sha1":"b03e96fa075ba36fc3d6729fb312f0a59c2a023a","sha256":"9b7c1670777cc38a18fc6b98443b40036fde8de97cdba6087e2a31a1de9e748b","sha512":"af5040882b3ba0d18c56b5cf0cad4c2f8e6fcbabda8b85d0284dab2662a5bab76e38ce6fdd261b27a394d55e58f427aba7edbe8d3a8a33ee422d43cba85bf741","ssdeep":"384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe","tlshash":"d782c058d78053e1602cc99617a890bb8a578433259fcc67fa5e88c57fa079d390b3ce","first_seen":"2023-12-25T05:22:01Z","last_seen":"2026-08-13T06:26:53.026218Z","times_seen":15298,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\nlocation: /chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js\r\nrefresh: 0;url=/chrome-extension:/eppiocemhmnlbhjplcgkofciiegomcon/libs/extend-native-history-api.js\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::k6wv6-1762358482200-06f4140f9225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/countryCodes.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/countryCodes.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13586\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"countryCodes.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"29bc28a15bd8de31ba5e02ee76d0afc8\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482552-434d5bf81717\r\ncontent-length: 1695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10611,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"983f87e6ad98c0bedb87b73614b30f36","sha1":"04fb91950b0aabb4ac7b283f05ebaf22c8a7c9e3","sha256":"2a9cc15c37c86a414d730bc434d3d7fad54d3ce374e480e417c62364656a1f41","sha512":"85db3a88c3bff6f7acaaaf51407883d2d2f375c8b2f20826435055d163da12cf31928ecb3691b46298fa4ca059ca661ec170708dee1ab243a5e454f240248a37","ssdeep":"192:UXuBCNn1B4qBEDwcd4HOOJLEAOMFO5yTZHaY9CLLkkJDDJkMC0:Uugp1B4qBWw+ypFek59oLxNzb","tlshash":"4e22668e54a1974cbd30b35072b75379aa4ea7d3c6b024bbf9b80a012bdbeb5c045d4d","first_seen":"2025-08-27T17:18:32.879916Z","last_seen":"2025-11-05T16:01:49.24093Z","times_seen":149,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:22.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/landing/telegram.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13586\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"telegram.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:22 GMT\r\netag: \"5d76488286d1bda66fe5851e0050e547\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7dzj-1762358482575-f28333915fd8\r\ncontent-length: 679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":679,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d76488286d1bda66fe5851e0050e547","sha1":"315164bc65e0684f1eff362fd6e658f28009c305","sha256":"a8cf9cd8da474bbedf97235320e740c68a613afcc832371b532cb140b5f3a931","sha512":"49f97975e28130cdec7253231af213c97447e2173d28e453b2b9bbfd2cea54e7f41a370e0330f0a6961c298a852ccbe28d4374de94801ffd90ae0ad11a4c14c7","ssdeep":"","tlshash":"f0019e92052b5c5505b9d3b379d3f218fb89653b3140c861b7ac80da1fba85091d1ecc","first_seen":"2025-09-21T08:50:45.341647Z","last_seen":"2025-11-05T16:01:49.241621Z","times_seen":44,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-05","alert":"Detects file containing Telegram Bot API","trigger":"wmcc-casefb384048.vercel.app/js/landing/telegram.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/js/root/redirect.js","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/?naps","date":"2025-11-05T16:01:17.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /js/root/redirect.js HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/?naps\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13588\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"redirect.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:17 GMT\r\netag: \"6fa7c8c6f1d140c318a4221e8605d55e\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d8s5l-1762358477355-9a4c0431e167\r\ncontent-length: 576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6fa7c8c6f1d140c318a4221e8605d55e","sha1":"93f251902008185b061c277ae1d0d5ae0d39d07e","sha256":"2e81c511a76e7d452471ec10bc86160e1b3ec8016e3b1f1e88b2c8954ecbf5b7","sha512":"582ff47880a117ba8fa3504aa37c7f6b0f8198ca54f047660f7cb267a713e332c03f45b746d18cda8a465a3ff19575d8acf56505fd46092a4e168b3c81a6153c","ssdeep":"","tlshash":"97f0e1d4320a3c19067043b0b663f264a2f3205ee702c50a7a2ab5319b2190ff676edf","first_seen":"2025-08-27T17:18:32.844251Z","last_seen":"2025-11-05T16:01:49.24273Z","times_seen":145,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/app/nine/landingpage.html?v=1762358481924","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /app/nine/landingpage.html?v=1762358481924 HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"landingpage.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"8a98409e01ad1f6184a51e55d242e400\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8jxh2-1762358481937-91df53152bed\r\ncontent-length: 40800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":208169,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1905), with CRLF line terminators","md5":"8a98409e01ad1f6184a51e55d242e400","sha1":"84ee3b9fdf5da79695cb2019f72de0fa97a28e7e","sha256":"60087f36a9ad52c884c5b4af1931963da895a8dcc6334a7a6bd4d2933fe892ab","sha512":"b86798860e7a44e116606e7235445f43499026cb44feb1f7c967136c5e79a3c8ed96cae267f83a9b1e66bc00e4f98b91a610f7fc15c100a24d15e94d430d414e","ssdeep":"3072:Xo0pmbFCTWHmW8I6QDaCNNiopVaUBsN9eEm4We:1poUTWHmW8I6QDaCviopVaUBsN9eEmte","tlshash":"651422b19199522a4073c1da8e577b27eae8a347e741a4c03bac17233ff7e54f5431a4","first_seen":"2025-09-08T22:27:00.932387Z","last_seen":"2025-11-05T16:01:49.243377Z","times_seen":119,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/favicon.ico","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 26838\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"258000c35712d4b7d4780f22f2e5733f\"\r\nlast-modified: Wed, 05 Nov 2025 08:34:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358481968-c72ace604f30\r\ncontent-length: 585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"258000c35712d4b7d4780f22f2e5733f","sha1":"d45c69bc93dd40d512e2624e38e7594b2303eaf3","sha256":"6bbeb62cdf4a317653447c7c4df6ab147d1bde279096bda9d0cbff619d9faaad","sha512":"0a236ea3bff08e6cdc87a4464fe925c48b7616a2107e34c21e270b235e62af12d57ac1dc79f4837a92325866975c2f38b1c9985dfab05b132784669d9f0b6d2f","ssdeep":"","tlshash":"7421c006bec1d4280131a5a77af0a418d297da4f52c6ec5975ed243b3fa67c88c93dc5","first_seen":"2025-09-07T19:34:55.436066Z","last_seen":"2025-11-05T16:01:49.213206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/angularjs/1.2.7/angular-resource.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /ajax/libs/angularjs/1.2.7/angular-resource.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1673\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 03:16:43 GMT\r\nexpires: Wed, 04 Nov 2026 03:16:43 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 132278\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3278,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (527)","md5":"c51552177e944e72eacc921501e55dd9","sha1":"38882a839ef2094be38e38df4356aec18f0349ac","sha256":"5ef127d8cbe045d74b207fd89b56254b67bbdc7d4e989de89c2d9f1e9ad8a0d9","sha512":"0e88ac629b8102f793c13a8744c0fa07748f48a11489a8e8751c1729c351b1266bb89ebffffeffa2b4af8d2ddcd8f0eb89a9ca3ab6a78d30e52c0ebdf551d10d","ssdeep":"","tlshash":"6761fae57dd6f4a683b22138718b0a6bd0b8a844f7ecce91f280edc5297865f0013e09","first_seen":"2025-04-26T12:00:03.100336Z","last_seen":"2025-11-19T03:40:49.50339Z","times_seen":137,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":224,"dns":1,"connect":28,"send":0,"wait":31,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmcc-casefb384048.vercel.app/managermentloc/styles/style.css","fqdn":"wmcc-casefb384048.vercel.app","domain":"wmcc-casefb384048.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wmcc-casefb384048.vercel.app/submit-application.html","date":"2025-11-05T16:01:21.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /managermentloc/styles/style.css HTTP/1.1\r\nHost: wmcc-casefb384048.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wmcc-casefb384048.vercel.app/submit-application.html\r\nCookie: _ga_LGMPS657N9=GS2.1.s1762358477$o1$g0$t1762358477$j60$l0$h0; _ga=GA1.1.1103580750.1762358478; splash=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13587\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 05 Nov 2025 16:01:21 GMT\r\netag: \"be67044f3b6b2586c855afe10aaba673\"\r\nlast-modified: Wed, 05 Nov 2025 12:14:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6wv6-1762358481991-e76703bf001a\r\ncontent-length: 3491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"1d43af6968aa3bdb2a6e1f6aba455664","sha1":"f14c86786fa6a8d71a5028b746441a4b976d6e52","sha256":"c647e960633402f7a43a4d8997072b8f3df70954d487150f1da95eb7e3d66fc1","sha512":"3b3f07d244e4c30416b531decd5f2489c17062c9921c8faeda4bbfb52b091d44033d6d7847d321d9edf7c766d30145e5f00951b751fadd5c6e3190929cbcdfe5","ssdeep":"192:fvO/e/RMi7fg9CWd7xkxPdl7o98ZZBDeuyiKfJLFF52ae5FD909Ghv0nxGazzDje:f1J7r5QFsHFE4vajtq4c","tlshash":"7852059a9ee721497516d4752bba6b46e372c023814aceed3edc325ccf493c45ce9388","first_seen":"2025-08-27T17:18:32.875172Z","last_seen":"2025-11-05T16:01:49.246395Z","times_seen":148,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-05","alert":"Phishing Block","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-05","alert":"Phishing - Facebook, Inc.","trigger":"wmcc-casefb384048.vercel.app","verdict":"phishing","severity":"medium","comment":"Facebook, Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-05","alert":"Sinkholed","trigger":"wmcc-casefb384048.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}