{"report_id":"62b9cdcd-c391-42ea-bb9e-8971f2d5e38e","version":6,"status":"done","tags":[],"date":"2026-04-19T03:56:30Z","url":{"schema":"http","addr":"guarda-wallet.io/","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"guarda-wallet.io/","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"title":"Deployment Unavailable","dom":{"size":1636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1636), with no line terminators","md5":"95d96a69b46064ebf6acf65cb65a15bb","sha1":"995679c84fe081e183e43e88e46a388712ca0d3d","sha256":"98b7ae90ea8abc9b203076d701c1a091a365108f5f876e05fb2383d5350de8e7","sha512":"049e3e29e7a950a8ba16f71037ee9cbea281b7fb5b66fe4b8de845b8784fdd06e81092a32dac12ca1ae70c445359789ffebddc383a95db3bd0c0780894bc38d0","ssdeep":"","tlshash":"f23152b745b1702ef33b8cfe34e673687244811bc0960e99b618afb8e2c7ca65123645","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"guarda-wallet.io/","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T03:56:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"guarda-wallet.io","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-27","domain_rank":0,"first_seen":"2025-10-11T15:42:37.281863Z","last_seen":"2025-12-16T04:34:40.124291Z","alert_count":6,"request_count":3,"received_data":4384,"sent_data":1409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"guarda-wallet.io/","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T03:56:08.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guarda-wallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:33 GMT","end":"Fri, 29 May 2026 15:58:32 GMT"},"fingerprint":{"sha1":"49:9F:AE:14:D1:79:2D:B6:8B:31:27:D1:FB:0D:BE:63:4D:AD:62:40","sha256":"EB:A8:BB:B1:81:60:22:36:3A:0A:FD:92:19:37:9E:16:AA:71:33:F3:84:31:C1:C9:58:C8:64:88:82:72:AB:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: guarda-wallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Apr 2026 03:56:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::2p48z-1776570968213-4d4d3a8c8a56\r\ncontent-length: 1590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590), with no line terminators","md5":"6a1eea9f818838ae9f48c295d269dffd","sha1":"a983aac1386f5d4a0513594b89e45c2cd8a3b749","sha256":"4f8e30378989ecf7b4206f390f01a6de127ab8c66c76b21026692bd11e55dbc5","sha512":"46b30256657be9e632cd39cbbe14318bcfa82617f8912994306195ace71745e63245725b429dbaf04f0d39479d7aa5449ec04bd01aea00fa694add1ae1c96dfd","ssdeep":"","tlshash":"7d3122b705b1702ef23b88fd38e6375472049526c0920f95f658efb8e6c78a66533649","first_seen":"2026-04-19T03:56:35.416224Z","last_seen":"2026-04-19T03:56:35.416224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":55,"dns":25,"connect":1,"send":0,"wait":10,"receive":9,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guarda-wallet.io/","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T03:56:08.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guarda-wallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:33 GMT","end":"Fri, 29 May 2026 15:58:32 GMT"},"fingerprint":{"sha1":"49:9F:AE:14:D1:79:2D:B6:8B:31:27:D1:FB:0D:BE:63:4D:AD:62:40","sha256":"EB:A8:BB:B1:81:60:22:36:3A:0A:FD:92:19:37:9E:16:AA:71:33:F3:84:31:C1:C9:58:C8:64:88:82:72:AB:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: guarda-wallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Apr 2026 03:56:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::2p48z-1776570968321-67898e801e8a\r\ncontent-length: 1590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590), with no line terminators","md5":"2c30fad60bd0de071451f583e9a73d63","sha1":"a6e702df3ca04c05e8ddc4d8c0241e4d447fb358","sha256":"2d38d7662326b777028b81710231bbedb396dd819eebf417377563735fa66b16","sha512":"fc82378997c3de54e13440ec77de08fe8f615e2fe72b6bd6aaace8657074623b33d632ce82b0e8a4272dbe4804b4d0730a972ec179554cc15a298bd7a4c48265","ssdeep":"","tlshash":"bc3112a70571702ef23788fd34d6375462049516c0921b95b518afb8d2c78a66623649","first_seen":"2026-04-19T03:56:35.417985Z","last_seen":"2026-04-19T03:56:35.417985Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guarda-wallet.io/favicon.ico","fqdn":"guarda-wallet.io","domain":"guarda-wallet.io","tld":"io"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://guarda-wallet.io/","date":"2026-04-19T03:56:08.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guarda-wallet.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:33 GMT","end":"Fri, 29 May 2026 15:58:32 GMT"},"fingerprint":{"sha1":"49:9F:AE:14:D1:79:2D:B6:8B:31:27:D1:FB:0D:BE:63:4D:AD:62:40","sha256":"EB:A8:BB:B1:81:60:22:36:3A:0A:FD:92:19:37:9E:16:AA:71:33:F3:84:31:C1:C9:58:C8:64:88:82:72:AB:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: guarda-wallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://guarda-wallet.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sun, 19 Apr 2026 03:56:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::n5qsw-1776570968414-7c4b007b3e74\r\ncontent-length: 109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"917904d124b8fd4eaa01bff13d9dccb8","sha1":"eeb0f2330d863d2f0117b3a28baee1d9e8ed3104","sha256":"626910997c69af7839f1ba7d1470a241459d75fe5ff2ad9a1db21135f2b1b6e9","sha512":"7cbef6b6ddd6101193c8b3188187356df066cb73e03e75be212021136e3c93e6173c65aebdb24f35ae45ad905bdb70d421fd9cc1d5f9afc3b64704ad58f5c2f0","ssdeep":"","tlshash":"a9b092b668a10182b278064118182a586840e399ab7995184281cd29664ebdce7a6160","first_seen":"2026-04-19T03:56:35.422517Z","last_seen":"2026-04-19T03:56:35.422517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"guarda-wallet.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}