{"report_id":"6c18288b-0172-4eca-a80e-23edb9a96cc0","version":0,"status":"done","tags":[],"date":"2026-08-06T18:06:31Z","url":{"schema":"http","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"title":"California DMV","dom":{"size":31972,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31934), with no line terminators","md5":"231b186bd461e818e6bd0ea61c3d70f0","sha1":"955ea93117f7fd9790f557ce5f1dae74564078e1","sha256":"10452c5984608e189e590a4f490adb0be53ae17c5747819698d749a9ef57d732","sha512":"f7abc4e93c19ff7987fa1b20fce0e46e230f6441289bcdf66c1bc64bee88aae16acf01cec309be5dc961100ae821226295d37164cdd6ea3f2be5e22813dc9788","ssdeep":"384:FViqN/qagziWBdaTvuAqEQ557nC52ixWwQkDwBIiB4OSxfV0S+UIo:FViC/+daTvLQ55lpB4bV0Sdp","tlshash":"b2e2d6b18394213e13135acca5e0fb2973e3c30ddb41196872faa7a897cfdd199a3149","dom_hash":"domhash871306ec23be3def5a5c34d02d44e076","first_seen":"2026-08-06T15:33:19.754392Z","last_seen":"2026-08-06T22:39:10.562301Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T18:06:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-03T07:56:26.149753Z","alert_count":0,"request_count":4,"received_data":502024,"sent_data":1838,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"httpbin.org","ip":{"addr":"100.60.224.175","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2011-06-12","domain_rank":6779,"first_seen":"2013-07-23T00:01:27Z","last_seen":"2026-07-30T16:58:00.518116Z","alert_count":0,"request_count":1,"received_data":279,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"gunicorn:19.9.0","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-06T02:29:54.037688Z","alert_count":0,"request_count":1,"received_data":7821,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ip-api.com","ip":{"addr":"208.95.112.1","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2012-04-24","domain_rank":696,"first_seen":"2014-10-06T13:38:20Z","last_seen":"2026-08-06T15:33:19.09777Z","alert_count":0,"request_count":1,"received_data":291,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dmv-ca.gnewia.shop","ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-06T12:39:00.515153Z","last_seen":"2026-08-06T12:39:00.515153Z","alert_count":20,"request_count":27,"received_data":813967,"sent_data":14449,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/common.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"170f09479c78f704288330c14e6bb85d","sha1":"5f01323e0c61ad1083a32fe35bd3d6cfffa738b4","sha256":"b39d3127c4d105a5ceee5ebf35dc3f5586ed50e9751cc18601c35ae6f3174f3a","sha512":"9772459f87a547a6dba6cf617813e297e5812a3b4bfe24131bca6249307fbfd8da9dbaf20a59bf16b94b7afe3f42da57521c02e43a20bd66eb2b11782c05bfc5","ssdeep":"","tlshash":"f8110444aae346108192d0ad39963412f23b4457f93cbf2576bea1447f8ca2d17f27de","size":996,"data":"","first_seen":"2026-01-22T17:22:14.42601Z","last_seen":"2026-08-06T22:39:10.574485Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/axios.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eb8e8e2284670dc214a3e70c25992b8","sha1":"94ece417aa560aa8de906e8f54c0985da90364cc","sha256":"96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455","sha512":"ae6cce74fa46a0ee1b00245f7da885ace7bd608d96152f3b4d9b2c1e66d53cbf5c1f298d1eb60cdf4a17a14296edc2fec63c22a7cf968025911ebe9272f7d49e","ssdeep":"768:iE/e1fRWqcYe4Q2q3jetDArR2d1mP2EduTgeIQN/s:VGoqcY22q3GASme1k","tlshash":"0a1385c6fbd57803b51630a98e8f754a76b4d05374046ca5bc4cb9e83fd883c86e6a89","size":42736,"data":"","first_seen":"2023-03-08T19:53:18Z","last_seen":"2026-08-06T22:39:10.596182Z","times_seen":25686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/vue.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d510c12b589a26e2c72f65a1e726a347","sha1":"61131c8e8cc4151fdc2d89e21f95ee27a76710c1","sha256":"d535a5f003b5350e4753025226c81f30cf883edb0ddc01901a31e49f0a9740b5","sha512":"a31326ea137759a06e3c7d26f26ca4adfe31bcc7b96cf24710bf6ef0cc1ae778b883f2f838145e8c615dcaeff42fc8118bec25d83eff4077ed24e67a20ddb945","ssdeep":"1536:DUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:SYeJpN28efKMBlmV00/r","tlshash":"c29308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93674,"data":"","first_seen":"2025-12-05T15:25:52.043787Z","last_seen":"2026-08-06T22:39:10.57159Z","times_seen":22289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2998cb42a7a0bf83d58909c0137d8012","sha1":"41351cd7e911276bb2e39a4d33e0942cbbc78d33","sha256":"de6a490b1eb84947498bcfd674a8e4a3ef76fae4bd80c839af57a050fdb5ac62","sha512":"2f5051862da1a9bb3002b6a2055422358d0fd37e9f1aa80ad268e6ad8e03b857d3991f278650acee6a0fe42bcb8148cc7ebfe8a1f276298685f0e5eed6e8b62d","ssdeep":"","tlshash":"a501bdf3286cf838dd9b1047901effd4f40a25b852784accef6a8c1418962306f0bb99","size":824,"data":"","first_seen":"2026-01-22T17:22:14.457269Z","last_seen":"2026-08-06T22:39:10.619228Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7c309ae7d0598c9e0899d7cd650dbd24","sha1":"aa39c792ea60a2230126fe2f5f7d270e17a5bea6","sha256":"a0d1ab986b9014fd9d77120a02dab18fd19018a29c7af8cafb976b5b74408683","sha512":"ae070463eedf327c41ff28b4d68206884f404b0a54456280f8006bbacb8eacb637538c572a46c1cfd414323f3f97801f99cfe922420ff168b9741127f305191b","ssdeep":"192:r8MzemcmJcmnmga/ixWnbmI9emgaXbmI9cmgajjbmI93p3Pm+MMznjwzYT1TcThs:rLQixWdEMzjwD69WZWRW+","tlshash":"92029d2285bdf6f2ed0a610109a977b1d01f44bad62418e4f4b4dd3462dcbe51b2e27e","size":8514,"data":"","first_seen":"2026-06-26T14:17:18.113643Z","last_seen":"2026-08-06T22:39:10.613629Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"4c1e1ee39ca3281ed6854fb3798c662a","sha1":"0147e96dfd7583ec746352869ef979e7aef45d39","sha256":"e6a118d2bd21efe0fb9bbfcb3a7a76bffc2fe60a00bd5b19be2cb8d9a366d6a5","sha512":"1af1ee3fbb14c8313115b94cd33c5d5095d87b69b0f6c889f86ef3f852722902b01c458f50ecb465af05cd8e2c978f14367a02cbbfeb9a5ee5df24ef48d9773c","ssdeep":"","tlshash":"99e02680389c2024fa020066802dfef1a40920f1a1748dc8be148d20249b2f05f1e61d","size":340,"data":"","first_seen":"2026-01-22T17:22:14.466959Z","last_seen":"2026-08-06T22:39:10.617866Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"21d3f196ae47d8aacd4f703e78392267","sha1":"e28e84e13f375709c953657bf5e6baea62c47f13","sha256":"615ba8ef1118b0d94a38b7b982588e56aa6ae3564c51f972696550bb1e0fb344","sha512":"8a187011cf51aa09b234633e4ae0b0c5beeba15a35a47d12f9d74c83007a419d4c2babbde1c6fbfc21c5bdca927df55de2b978a4d9fd48dfc9abb837de0247e1","ssdeep":"","tlshash":"b8014ce3285ca438dd9b2006d06effe1f40a14f8927849cdeb6e8c1954962706f4f7d8","size":784,"data":"","first_seen":"2026-01-22T17:22:14.448235Z","last_seen":"2026-08-06T22:39:10.623797Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1109fc631f3f97e9e8f3fca71869cf37","sha1":"e88cf2f780964d397e03ac5727d7fc3fa6513b46","sha256":"09c05f4bb11920be3fac0777a2ee2e03945ccdce71fc52eaf036f66f0faf2139","sha512":"df7589dd5c91169c9da69ad843770f93fa2d03a463aacf5559aba00235b038572b9ccdcecdcba271f49fef8bc0b0f0864209c76e068239c76ba8757b96134807","ssdeep":"","tlshash":"1df0e1523d1c2c25ba5280eaa51cbbb0f41a1864112988d8ea998ca864655304f2db68","size":575,"data":"","first_seen":"2026-01-22T17:22:14.463674Z","last_seen":"2026-08-06T22:39:10.616606Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-F5EFWER6.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e404af09dd04bf3f85ef25ff477f2235","sha1":"c01a359668d3860945f3c1ef49b66bd623ab25e0","sha256":"636ae4031f3d4cec06693504293bcd55d5ea42a0022e579d6c2d01620024054d","sha512":"a49dea23ac5ed1b82c7edaa62d0fbed4195bb48aff92378adcda6891c8d581aba45590892137f314a12e4f881daead6ff63d51696b1075c8f7e1041c1d694b00","ssdeep":"","tlshash":"1d019ecc78b8bef287d25859405feb02e6265451d56a405022edaed4d07c8d789a982f","size":672,"data":"","first_seen":"2026-03-05T17:25:09.886647Z","last_seen":"2026-08-06T22:39:10.587621Z","times_seen":9073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-SI7D3PZW.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4915cbe555f5ca0aa6534f7592c55fd1","sha1":"01683f93f73717af0c3fbb9a6aba1c1cc72188e6","sha256":"30fd7438846b02993a472074e050860ad1b4638f5f36a9f07940fdd741aaab85","sha512":"eb5f9b688df0c4e82837699361394f865eb2736882f3b5d8f46fab3c58384c805ebe827297941144bbc2dc11dbf7f04c3429a53a8d774ee6e4f836c35b81ff2b","ssdeep":"384:fHOyHjPQ5GnHixKWPY1rVdeqGRUkKpvKtvV3jM4:vD3nHixKWP+rVdgrKpvKlVw4","tlshash":"16a2d88076f994b34ad582d6dc79460fe250349c682e846dfa7ca6ef1938f41a1ec732","size":23376,"data":"","first_seen":"2025-08-04T13:12:55.035191Z","last_seen":"2026-08-13T04:49:24.605101Z","times_seen":9209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/ws-worker.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"9247c019fe27131105408556b0ea3bfc","sha1":"87043b90f716d238d2cf5017110adefec0858673","sha256":"28ce44d0fc42e861cc4dfb620539776e17739dccd03371e55ec8deb3b23f7dac","sha512":"53630332e7f631c07f26e4f8dc8ff2130f3937246da201520a673f21304a18e87ab68446c38b9b358bbcbb9bca2573755fd9d81c2c46b7271a20d1a4914423fc","ssdeep":"384:5tG75ev2uuujGrEXJJ72H/DEobOTTDnt+kCA8Akz+iKZsIvfpuDH4ot+fEoybBkK:M5ev2uuujGrEXJJ72H/DEobOTTDntQAu","tlshash":"4282e88a3fc07690336b1ef73127a1d5d62d198a3c990a8fd2167c84f9e6226f4e5930","size":17681,"data":"","first_seen":"2026-08-06T15:33:19.776333Z","last_seen":"2026-08-06T22:39:10.584454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/main.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7634a1bd4253ba2f83629fd3e354b7f4","sha1":"a6b282ae8f3277a438e5448edf9b580b22cfce68","sha256":"58b07bd944b7b172b2438fb8401b09d494cb1cd8e6bc8e16dc0e55ff6b0a2a36","sha512":"35d8de8f68600e30c55ef9ecde9cc9d9e5a8a5688a88d71e44958109c004d73bf5393b5d7174a29f0b11edd8de3a55df4c53922c8130a79b0ba44acf9aa51186","ssdeep":"6144:3pEhF49S0VWZE02/lqrX43EiViYY6tHI3d7/xGVNqwnM+kPUvJFh6PzTT:3pK49S0VWZE02/PEiViYY6tHIWkPk3iP","tlshash":"e714925126c0e80533071fbb321bb0ead93a585f785c459ae968bc71b19a327fbf6131","size":207694,"data":"","first_seen":"2026-08-06T15:33:19.7812Z","last_seen":"2026-08-06T22:39:10.577584Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"8daef88d9974bc3ffb3010b7c3261b75","sha1":"86639219b33dad8bea2236c512962dc99ca7f6f3","sha256":"272a11da69aabd0945e6b6251e894d5eebc6428c2a1dfb00b8550067ab4c8784","sha512":"6d541661c4f1ef2430a095c0fe9f7dc99811b411ae1f9fb4da3867cc18d783462e2bef145e7ebef88b3b91c704965cc2bde52e641ecdfa009d2f60b8886631eb","ssdeep":"","tlshash":"25e0c072795db864facf05b16253bbd0b008b532337849cadc2acd1890b12313b1e357","size":377,"data":"","first_seen":"2026-01-22T17:22:14.446423Z","last_seen":"2026-08-06T22:39:10.622336Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"963239f75d63db7184eeef3ba49b3977","sha1":"910a7f7b46775e0d84bab8ce2a2e98130b353180","sha256":"09bd7d0026b2a577e670cf7430c2295d350af9f56bac8d6beaf371aee0dc2f20","sha512":"38e93b9d6f50afd74a1ec5456b59b8a5156467d93ef8b192db9ea75882035acb2591fb4558efbf3522783097676df5e821d92fda6ca050e80890ea79e58563ab","ssdeep":"","tlshash":"aaf07d53289de03cdd965447602abfa0f40e10b8e17444cef79e8c2821d91306f0abec","size":650,"data":"","first_seen":"2026-01-22T17:22:14.459534Z","last_seen":"2026-08-06T22:39:10.609086Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1bb0829e1037c8f50dffcfb64d65fa00","sha1":"2e17e0fefe1dc396d6bd3e2641e87c645aef8f6a","sha256":"78b0c82b836767a4d527a8b68718d79ac3f20f11ad79eae28a6bf697c2403044","sha512":"442cef0a759ab974d419620ca28f5d1249c689e1bf3b76d0b008cb9c9ae7fffadc08d37e1f450ece264fa9183f97ab65760a1d863e72d273e0109ce94561f33c","ssdeep":"","tlshash":"1bf0dc613c9f7939fd4b150a004bfda1f00918e2436054f5ded89c18649e0b2e70ebb9","size":498,"data":"","first_seen":"2026-01-22T17:22:14.461593Z","last_seen":"2026-08-06T22:39:10.625287Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7cadf6d3f2adb2cfa48dc468b9869d9","sha1":"85ef9fa267ae519b1a1d165e1773fbb662da15e1","sha256":"893e0b0b0444c062112c512e112539bb2a278c8a7fa888e1d4d32880955ef98c","sha512":"41829370819fa483fb8bbdf44404e8e2e885e9cf0653477f97c70a1c92356ed56a9d065d99647b55a9b9f0c3f548218f4ac2a00ec9bc48d647365a7194255eb8","ssdeep":"","tlshash":"dce026a3ac00161cecd73cda602312663421610238984825ecfc794a2093cd6c0bfac8","size":328,"data":"","first_seen":"2026-06-26T14:17:18.114561Z","last_seen":"2026-08-06T22:39:10.607852Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/dotlottie-wc.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05981be59a26970fbca1e5a8c7634336","sha1":"579e7098232d88c3a0cb8101b9ad9bd45a3c9f40","sha256":"71bd5d3c6e096c8a6e9a3a3f0acb0dcd5cfc610ac5706ff0251964ec34bc71e5","sha512":"4d31793eb824fbfec3447fd7a4a709d7605e7dcd276c710d599de8c2b059c3935922d3f78a3999ba095ed47eb92df069bbc5d9bb3a98a649aef2c15c4e54feac","ssdeep":"","tlshash":"31c0127be8f0eeb359728c5a80a6c3212a1a88d3d361037491881aac41208db9918ca7","size":187,"data":"","first_seen":"2026-03-07T22:46:23.632504Z","last_seen":"2026-08-06T22:39:10.601442Z","times_seen":9073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-B6AP7WKV.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"aea1f7a12b77f053393b67da3d1b2d3f","sha1":"7e8a73d43eb55f2c71d13462612b76ff1ca25868","sha256":"616548b059f0f23b65788280822758eb77f06ef32e87bb5c0a5f095c551c8ded","sha512":"7e54a44f9323341e085f6fb3e9827317a02e6860ade964878538b7a61c2d86ec0ac519fa88b298d01445792e818db67e9f0b704e20240dc1e65d91b7627ec7a8","ssdeep":"1536:LRmQu62qGsOOAPqfsPSQVLOavQuwQh7qsu/2/eC//m1P67tOTcMUPvEsjJwyHiDr:VmQTuifsPbzw","tlshash":"c4a4e5b2738817a6e5480ae94164a20bd4fad42d342525ccebf6b797f43d9a2fc1c374","size":474281,"data":"","first_seen":"2026-03-05T17:25:09.904767Z","last_seen":"2026-08-06T22:39:10.602612Z","times_seen":9074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"48dc8177557531f49f7395ec0ad9e698","sha1":"fbfbba3a481fa4315989cfc3dd70092a0440d35e","sha256":"0d1ea88326362fca227b555c3ce04684c98026f8444c1a35891ee2a9b051a172","sha512":"a6e2c5526267abd60c7b5469297c5aafb534c9a910d68f5a50c0d51af1d9e72932f973d6426d5b15fb9b6a850146502a8967323ae3643ebdb115bdc403e65397","ssdeep":"","tlshash":"243145726ddea42cfa9e14d51050bf61a08da474e37989de4986ce1060d92305f2a35f","size":1817,"data":"","first_seen":"2026-01-22T17:22:14.451854Z","last_seen":"2026-08-06T22:39:10.615144Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2655a0de16226137a4be8b8af11da49d","sha1":"332dd745ae251a5a96b85c61df5d4d87f4d1e91d","sha256":"63913df33908b2ca768d6bed8994606a84ed9c867c0856d870afba1f3d8e81fa","sha512":"840b8f94536b7a2a9c9cd5f8e68a433b2257f3d2975e8e5301f58e6ef1d17a78086e3cfb20aaa2651d97e81aa6593896b03e38b472c444fded07e4f3c8a3b006","ssdeep":"","tlshash":"c5f0e1a269ac3d36ae430531151cbab2f42940ed12b198d5bce4cc4530cadb1171f399","size":594,"data":"","first_seen":"2026-01-22T17:22:14.470649Z","last_seen":"2026-08-06T22:39:10.620589Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a20628a82fd9488eb7e7fb40487030aa","sha1":"eff772c78d00664c7ac1ad27922e45bde5d4c8c5","sha256":"65329e86bc1ade05c68540cca260ce759d14cc695322b1166a544ff47e39d083","sha512":"0cbef3f8fddcbf39da57f3cd7bf3c3dd6776433b106371657cf2c182b532a62648caa0328f0f365197a8a6825e48a46c710422877d4aa0242f3ae33d2112a793","ssdeep":"","tlshash":"5a4115335a4818e773991370ded46c36407c7c722ed6bbc099ed8824d2e98e4b6095eb","size":1909,"data":"","first_seen":"2026-01-22T17:22:14.473832Z","last_seen":"2026-08-06T22:39:10.611852Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/ws-worker.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:05.884Z","timestamp":1786039565884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/ws-worker.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17681\r\naccept-ranges: bytes\r\nlast-modified: Sat, 18 Jul 2026 05:01:39 GMT\r\netag: \"7a24c4bd5119bfb4ba9fd9fd0f9afd7e\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17681,"size_decoded":17960,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17681), with no line terminators","md5":"9247c019fe27131105408556b0ea3bfc","sha1":"87043b90f716d238d2cf5017110adefec0858673","sha256":"28ce44d0fc42e861cc4dfb620539776e17739dccd03371e55ec8deb3b23f7dac","sha512":"53630332e7f631c07f26e4f8dc8ff2130f3937246da201520a673f21304a18e87ab68446c38b9b358bbcbb9bca2573755fd9d81c2c46b7271a20d1a4914423fc","ssdeep":"384:5tG75ev2uuujGrEXJJ72H/DEobOTTDnt+kCA8Akz+iKZsIvfpuDH4ot+fEoybBkK:M5ev2uuujGrEXJJ72H/DEobOTTDntQAu","tlshash":"4282e88a3fc07690336b1ef73127a1d5d62d198a3c990a8fd2167c84f9e6226f4e5930","first_seen":"2026-08-06T15:33:19.776333Z","last_seen":"2026-08-06T22:39:10.584454Z","times_seen":3,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:06.190Z","timestamp":1786039566190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: StZzTIgqHMOcZQTCuVdwdg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:08 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:24.942Z","timestamp":1786039584942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xdpGgRaur86809+/pWktNg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:26 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/img/img_fa1a7d642bd5_z7591a.svg","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.299Z","timestamp":1786039562299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/img/img_fa1a7d642bd5_z7591a.svg HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: W/\"4edab6970e50c88f37ad7a867ad52853\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2923,"size_decoded":1705,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27cebf10db11b51d264a89b94fcf67a0","sha1":"d05a58bcb5802f5d00a9ab9c94232ebe469b4a37","sha256":"32208fd82bd05acc86e236f3597eefd9175f99f98d1b9fe182768b3697c7cdb5","sha512":"ba277a49512b23f1649f999375619ee2d42fade6e45128fa7251abd7037f41e3efe832aea1ccd616fe4b416ae7ea327c0b0c194e573c403a83cd8a68e958d76d","ssdeep":"","tlshash":"8a51cc16a710e6ac5983d198cf3751e5274fe4c9b69e53f852f3c771b01bac8d584834","first_seen":"2025-01-27T21:02:32.670114Z","last_seen":"2026-08-06T22:39:10.580166Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/img/img_2ac2522191c8_xc0u7c.svg","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.302Z","timestamp":1786039562302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/img/img_2ac2522191c8_xc0u7c.svg HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: W/\"74743c8bd430e04e10b9518ffd39e2c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11802,"size_decoded":4647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6beb8cdf6b23547300c45978cc53584","sha1":"6c5bf213503e39df01ffba5e04df9c4c9d09e6dc","sha256":"b0a33899c242eff91e324bcbf3d2c339c2126b16e1b6b66deabb45efc0feac3b","sha512":"d0e467bf72688fcd13e5eeea18bf86f88bc6d69853512c9a270e177bd041925c99ef8a083f51c185cd327efd5406e7d44bfa2c56c48f55d4ac35dca8ad16513c","ssdeep":"192:Nbq4c2DyUNNLD2VnM0LI4e2wglwaxClqcCClQFmqU16NmMfXeS+G4b1RdqWY1:kd0NLD2VnjsJ2wglhClkClQTU1vMS1yj","tlshash":"333285c71350f7dd99dfe14fde55e964e60e90f6a12bcac04a9f8b6c588b188f718810","first_seen":"2025-01-27T21:02:32.675601Z","last_seen":"2026-08-06T22:39:10.605002Z","times_seen":54,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:13.996Z","timestamp":1786039573996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: A+JDQbIO2nc33s89DUQDSw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:20.598Z","timestamp":1786039580598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ExGfYTZ+4FgKvvwsrsYSSg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/vue.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.293Z","timestamp":1786039562293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/vue.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 93674\r\naccept-ranges: bytes\r\nlast-modified: Sat, 18 Jul 2026 05:01:39 GMT\r\netag: \"bfcbdc0992eab5be2a7adfdfa166927e\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93674,"size_decoded":93953,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65445)","md5":"d510c12b589a26e2c72f65a1e726a347","sha1":"61131c8e8cc4151fdc2d89e21f95ee27a76710c1","sha256":"d535a5f003b5350e4753025226c81f30cf883edb0ddc01901a31e49f0a9740b5","sha512":"a31326ea137759a06e3c7d26f26ca4adfe31bcc7b96cf24710bf6ef0cc1ae778b883f2f838145e8c615dcaeff42fc8118bec25d83eff4077ed24e67a20ddb945","ssdeep":"1536:DUXY7qLtpHt2P0e1mZ8I6H82RaLPMBlo5VV2B/S/r:SYeJpN28efKMBlmV00/r","tlshash":"c29308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2025-12-05T15:25:52.043787Z","last_seen":"2026-08-06T22:39:10.57159Z","times_seen":22289,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":953,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-B6AP7WKV.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.571Z","timestamp":1786039563571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-B6AP7WKV.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a26ff9284c654e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 9193\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 18:06:03 GMT\r\nlast-modified: Thu, 06 Aug 2026 07:46:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:YWVIsFnw8jtleIKAgidY63fwbvMuh7tcCl8JXFUcje0=:\r\nfly-request-id: 01KYHYKV2G5M5BDXVPNQY7BMNY-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474281,"size_decoded":54023,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21615)","md5":"aea1f7a12b77f053393b67da3d1b2d3f","sha1":"7e8a73d43eb55f2c71d13462612b76ff1ca25868","sha256":"616548b059f0f23b65788280822758eb77f06ef32e87bb5c0a5f095c551c8ded","sha512":"7e54a44f9323341e085f6fb3e9827317a02e6860ade964878538b7a61c2d86ec0ac519fa88b298d01445792e818db67e9f0b704e20240dc1e65d91b7627ec7a8","ssdeep":"1536:LRmQu62qGsOOAPqfsPSQVLOavQuwQh7qsu/2/eC//m1P67tOTcMUPvEsjJwyHiDr:VmQTuifsPbzw","tlshash":"c4a4e5b2738817a6e5480ae94164a20bd4fad42d342525ccebf6b797f43d9a2fc1c374","first_seen":"2026-03-05T17:25:09.904767Z","last_seen":"2026-08-06T22:39:10.602612Z","times_seen":9074,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/api/open/getSyncSettings","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:04.825Z","timestamp":1786039564825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"POST /pay/_frame/api/open/getSyncSettings HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/octet-stream\r\nContent-Length: 50\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":77,"data":"\u000e4XsŸ„K\u0013°O\u0002¿Ý\u001duÇCµé÷\u000b\u000f\\Š‡U1G›‡!¥Øš\u00176½Z¡ûÓ¸Ðsú¯mç§"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1500\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500,"size_decoded":1835,"mime_type":"application/octet-stream","magic":"data","md5":"01e68015db40becbd71241b818925a40","sha1":"90d9c6c2a8c577151d11ab6fac4d21f9ea2b0daa","sha256":"f6f77d91b24cb4a5731723afbf30264bb702cfbfc884ca688d3d77b532a0d939","sha512":"c4e7aeee910c18b37583f53996c1ec1543066f65ace7bb4940bc17c8b88c7d024b73f37049282b6a6c2bc9744298dc65c5b27015c219a619bb0230dc1a30f6d1","ssdeep":"","tlshash":"6431c913d2bf1544e6edb449a1e52635607824388fd9685f6c45f1f0840ea4b356bf14","first_seen":"2026-08-06T18:06:34.461221Z","last_seen":"2026-08-06T18:06:34.461221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/api/open/addClick","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:05.817Z","timestamp":1786039565817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"POST /pay/_frame/api/open/addClick HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/octet-stream\r\nContent-Length: 266\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":392,"data":"\tHÁ¢\u0001›Ê\u001aDJá\u0013 ¾$\u0016m¼çDuúæ{ë]Àâ\u0011°\bî.Õ×\u001eqJ{“.'GÆ`šœœ·«\u0004\u0000C»d†\u000b2Ø/6IDpìÁ½\u0012\bK|Ðí\u0013­}F\u001b•Öt7'\u0006æB¦øޓuwwBýa«sÞ\u000f å¹\u0026°N¬Öbs\u0004@Ó\bì“Z\u001cìŸWÕ\u000bº¾˜±®œ:‡¡V\u000fnOH6]?[Û°ö\u0012òî$hvƒÂ„FM2`³\\Ûxæ/c á­½ž\b.\u0007ø\u000f*ðÚ¬–6‰ûž$\u0014(ô‚\u001dÑQ틱¢G\f‡v74?ÛÊC_MdNm!Í(\u0015ÞÜÎùR¶»\u0001 °‡ÊHvôí“h\u000b”\u001crN½,Þ¡á[s¸p\u0026~îsCæàÑቃ^†årKe–a"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 119\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119,"size_decoded":453,"mime_type":"application/octet-stream","magic":"data","md5":"1520f8f039d0dd15bee82aee94648818","sha1":"f1196f6e59c0a0a721d6c51c40519c5204ef7c5e","sha256":"2beb7581f70f0af43e870bb8744b811121727da8c9cb9580e9c971c3c03366da","sha512":"185446b912f8003e4660c9cb6cc9aab94de1d1d415873055225457347601487a71784612e8fce2e61193db231569f954e42522c1f6684bc64a0f9e7b090cf0e8","ssdeep":"","tlshash":"4eb02b0c141794b164403d0f138d5210d8a4504a5c014e40818253c00d60530104000b","first_seen":"2026-08-06T18:06:34.463499Z","last_seen":"2026-08-06T18:06:34.463499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/img/img_0be37dfe376b_he7do3.png","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:04.525Z","timestamp":1786039564525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/img/img_0be37dfe376b_he7do3.png HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 31859\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"6058acc2b5a2426fbf7022430a51ae49\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31859,"size_decoded":32117,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5ad51a81b01e8c5ac7100f3f01868f65","sha1":"b287d14dba7e1b56f9235030106334eef07b7d41","sha256":"bd87663efb55dc1af901e772e899dea8dc42dd7b10f20d53baad96b77fc630de","sha512":"807748c523229217ddada9249f52e086ce7cfd3b8731a01185eee963d0a104e3c16452c1b8dd1ae99749c1735093045b8b25cb7e57e66d8ca064bd99ff95e977","ssdeep":"768:RGuGeA6BJptL4mQaFM3RLv+pxr5/JrZyG8I97eoZvCb2F:R8e3Z1LFM3RLI/JdyG/ZayF","tlshash":"d6e2f113ce260a74d22fa9c16f469dc472fddf74e2aee18e4db864836ca86cc59402d5","first_seen":"2024-07-03T00:41:23Z","last_seen":"2026-08-06T22:39:10.603809Z","times_seen":37,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":643,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/font/img_1c68aff72a53_a3jiiy.woff2","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.312Z","timestamp":1786039563312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/font/img_1c68aff72a53_a3jiiy.woff2 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38460\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"5d103ead60cbbecd7474b581743500cc\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38460,"size_decoded":38719,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38460, version 1.0","md5":"6da252de0cbc8a69b5d5c2e0e3f67722","sha1":"613a720fdf61e1c6f30818dee6517963a68e2e3e","sha256":"5d91eb5d522a03081946c44c8ca17c902230dfed5f0f9b5014262135d47b15b2","sha512":"54be801ab4db662f9db902ee580b2ba17c3f5b2fb8a9fc4871597c44c191c10acbc7a10c3219391b6f1beabb3f91bd883eef4cd968ca497cc8216238d212c98e","ssdeep":"768:ZCNlkG/MvYW+ATIdtH66hgjNd7PMiy6A0eRBGwCJdUu5nLct:aEwWMa6hgxVUiARBVMdFLU","tlshash":"4303f10ffbb3f38a846454b72a62c8f855a2e201a5ad5c0df7c830127492bd19e3d5e5","first_seen":"2025-09-13T18:39:29.216218Z","last_seen":"2026-08-17T13:12:30.462038Z","times_seen":6529,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/font/img_ede2ea3ce4ef_gmkiuz.woff2","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.313Z","timestamp":1786039563313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/font/img_ede2ea3ce4ef_gmkiuz.woff2 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71348\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"ceb3b35d1324668609201a6bf0cddea9\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":71348,"size_decoded":71607,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71348, version 2.0","md5":"435c9b0da851edc3bb8d979b123b9743","sha1":"4409d0812e18e5fa40454237469ae153ce83d84a","sha256":"23b3737ae59a412fbc2212b5825d87e3e748522fd63a4c4aa68107dab7bc3703","sha512":"dd841c31c2716e65794b2bd9143be989f7697bdde8109e3a7bdc1e368395ca5ef0f371fd5576e2dc0c504516cb3acdca4ed5da50ea34b9ba0c6f4a53a5e54780","ssdeep":"1536:FXPqyG1URnS5OMwHi9U3HkP3nGvI9O5351Ot+HKG:FXPPMwmtP3l9OdXff","tlshash":"ef6302fc3ad65500862cc7fef9a276b22d73ceb8aac59ae004e542e0364b7426751d06","first_seen":"2025-07-22T23:37:59.548229Z","last_seen":"2026-08-06T22:39:10.593091Z","times_seen":53,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/font/img_3cac3a73e170_ob9zoo.woff2","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.316Z","timestamp":1786039563316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/font/img_3cac3a73e170_ob9zoo.woff2 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38460\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"d7b5090be73e76463e41bd07e2510d06\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38460,"size_decoded":38719,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38460, version 1.0","md5":"6da252de0cbc8a69b5d5c2e0e3f67722","sha1":"613a720fdf61e1c6f30818dee6517963a68e2e3e","sha256":"5d91eb5d522a03081946c44c8ca17c902230dfed5f0f9b5014262135d47b15b2","sha512":"54be801ab4db662f9db902ee580b2ba17c3f5b2fb8a9fc4871597c44c191c10acbc7a10c3219391b6f1beabb3f91bd883eef4cd968ca497cc8216238d212c98e","ssdeep":"768:ZCNlkG/MvYW+ATIdtH66hgjNd7PMiy6A0eRBGwCJdUu5nLct:aEwWMa6hgxVUiARBVMdFLU","tlshash":"4303f10ffbb3f38a846454b72a62c8f855a2e201a5ad5c0df7c830127492bd19e3d5e5","first_seen":"2025-09-13T18:39:29.216218Z","last_seen":"2026-08-17T13:12:30.462038Z","times_seen":6529,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:17.414Z","timestamp":1786039577414,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VDk+Oms1kyHOr77vXI1fBA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:18 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/common.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.291Z","timestamp":1786039562291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/common.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 996\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"30a5af644a1a2c561abeddd4296f1d4c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":996,"size_decoded":1273,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"170f09479c78f704288330c14e6bb85d","sha1":"5f01323e0c61ad1083a32fe35bd3d6cfffa738b4","sha256":"b39d3127c4d105a5ceee5ebf35dc3f5586ed50e9751cc18601c35ae6f3174f3a","sha512":"9772459f87a547a6dba6cf617813e297e5812a3b4bfe24131bca6249307fbfd8da9dbaf20a59bf16b94b7afe3f42da57521c02e43a20bd66eb2b11782c05bfc5","ssdeep":"","tlshash":"f8110444aae346108192d0ad39963412f23b4457f93cbf2576bea1447f8ca2d17f27de","first_seen":"2026-01-22T17:22:14.42601Z","last_seen":"2026-08-06T22:39:10.574485Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/img/img_4c41b3a89f52_tvjb34.png","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.283Z","timestamp":1786039563283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/img/img_4c41b3a89f52_tvjb34.png HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":240,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"65e45318656146d0a1e507c6d215df04","sha1":"9d9d2e25d1ab73e7f32c164914ba7e01be9f1b5e","sha256":"17567a0025f5bfdab158e19456bca76c1ca8c85d6b1594a1754cedbe9477786d","sha512":"b0f16ebf02a01cbc7ee369266e70b7c0301f16c6fbb1f89d7a2d9ff87a5d836fcf41a0a26e4446e7d239c40e8c9f42951223af84f497f05b3fbef66419278895","ssdeep":"","tlshash":"5570000c08228a88800a00a2b2a200000800022aa020802008008800820003c30a830a","first_seen":"2023-11-10T23:52:49Z","last_seen":"2026-08-06T22:39:10.597272Z","times_seen":302,"resource_available":true,"data":null}},"time_used":1873,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/font/img_8e64ce7ee62c_bqwk0s.woff2","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.315Z","timestamp":1786039563315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/font/img_8e64ce7ee62c_bqwk0s.woff2 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 72200\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"a2b7be38befbd953c10e08be2c30cda9\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72200,"size_decoded":72459,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72200, version 2.0","md5":"b212207a00e516463bb9495b2b350d3c","sha1":"300ebe8cd70ff5401c4c262c1d47c84331c29a44","sha256":"f7ae2ca24e43501a6b2b8c4e0f13f9ee7d16e3e34318ce0ccb93f27dc91b68ed","sha512":"6cc2e6cd44b3e716d172d8e3a54987c2f24f067f836a191d1de6b4f25bfb4d0ca7d491153c4090600376064e9950da68753a6d6d4d366d20731880d59b56c0e4","ssdeep":"1536:yxbh2+2FGfOcu8WIUbYwBIy5kHhkob1E0WCE3kYNU:Ybh2+gGZVUbYwBTmKobS0r","tlshash":"516302d8f69f2cd427be46fd1a2854beea680ad067c9711cdc93123841f629315e8d8e","first_seen":"2025-01-27T21:02:32.690745Z","last_seen":"2026-08-06T22:39:10.59843Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1844,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"httpbin.org/ip","fqdn":"httpbin.org","domain":"httpbin.org","tld":""},"ip":{"addr":"100.60.224.175","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:04.182Z","timestamp":1786039564182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"httpbin.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Jun 2026 00:00:00 GMT","end":"Sat, 02 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BE:92:90:DB:BE:70:82:16:AE:8B:6B:F2:FB:27:0A:9E:28:30:85:04","sha256":"73:8E:8A:F7:38:B6:19:CA:92:96:86:6A:A0:F2:63:12:2D:4B:BE:C7:97:C0:92:E8:61:E1:4A:BF:B0:63:2F:F8"}}},"request":{"raw":"GET /ip HTTP/1.1\r\nHost: httpbin.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 18:06:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 33\r\nserver: gunicorn/19.9.0\r\naccess-control-allow-origin: https://dmv-ca.gnewia.shop\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"gunicorn:19.9.0","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":33,"size_decoded":279,"mime_type":"application/json","magic":"JSON text data","md5":"fcf304207dc44ab84854e1617180a4cc","sha1":"c96855fb751f4a8ebd1cadbb17c063dd10d3090d","sha256":"f527611dfd089c2bdc4ceb8f88bf85dae48b0251c0ffb3a7f0f6f8dba103e829","sha512":"b61e7dcebf8e1652baf0836266045ca1dffc289dfc701cbd899f08574d4f302993fb611c898655bb276fdd0ec60fc4de62414f56671f63b6ccd50d98cda8e2d6","ssdeep":"","tlshash":"df80045507310d0144c457510144c71044c1155d1043dd5043d57371cd00f345400135","first_seen":"2026-06-08T02:37:00.516967Z","last_seen":"2026-08-08T07:09:39.78384Z","times_seen":216,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":0,"dns":14,"connect":102,"send":0,"wait":198,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:08.726Z","timestamp":1786039568726,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: b4w1kzS9HJasrI+XYJndFg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:10 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.287Z","timestamp":1786039562287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/css/vnhfamcb1031.css HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/a_index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: W/\"71430b74928cde3b6e1b1bb4334fa7aa\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42728,"size_decoded":8913,"mime_type":"text/css; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3186), with CRLF line terminators","md5":"8242b90380bb3a7282ba9ddd67d63704","sha1":"80dc2668c653c9e9987f0f5208ac1ea1774a096a","sha256":"a93c855318ce80392ee594d4af26911bf1022a288fb4944caed895c0d5e2cd85","sha512":"420e854deea8ee5ce79ac08845bbc711172e8bbf34db37f452b2f9ca5d1349e65e20d6afd07385c08f62285cead82ce051602dd4f884b1f7c350a830511d4441","ssdeep":"768:Lce58bVXJdKPQafImqeVieUyWvroHqwk/V:LchdYQkGryYoqF/V","tlshash":"bf13c8710a537369562b8e0983ed691c9e19c922de032ada7142b1059fcbff713e670f","first_seen":"2026-01-22T17:22:14.443321Z","last_seen":"2026-08-06T22:39:10.59502Z","times_seen":50,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/font/img_911b816e095b_qz7w2b.woff2","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.310Z","timestamp":1786039563310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/font/img_911b816e095b_qz7w2b.woff2 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dmv-ca.gnewia.shop/pay/_frame/static/css/vnhfamcb1031.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 70720\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"bba9ab6db3574890d7897c229bfd1c2d\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70720,"size_decoded":70979,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70720, version 2.0","md5":"a3cb3eb04109513d93addff28a41d306","sha1":"36648d8f1658df3b0f5e47426034426d969d1905","sha256":"f2622a752076cbb90d1a8f948050f399dccd3cbcc642ea774de8f8a5c528f920","sha512":"6cdb74e27802c02202e24490cc04d3334969691231259484272492eaa0f632762079a1cfc19dc9be75d58f4ee3e9bbe506cc871cf125f37b58b513a69d64f372","ssdeep":"1536:l44eMScxcUNfwUeiMRs4Xwc3WFhhh6ayk73vP6G:l44e7cCUXJduwc3ehsaykX6G","tlshash":"8d63010b76b241cfcb86dfb5864a8e19ffba182b29ed615114452fcb86dc41ed41720f","first_seen":"2025-01-27T21:02:32.68738Z","last_seen":"2026-08-06T22:39:10.606546Z","times_seen":55,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/dotlottie-wc.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.511Z","timestamp":1786039563511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@lottiefiles/dotlottie-wc@0.6.0/dist/dotlottie-wc.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a26ff9280b5a4e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 9193\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 18:06:03 GMT\r\nlast-modified: Thu, 06 Aug 2026 07:46:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:cb1dPG4JbIpumjo/CssNzVz8YQrFcG/wJRlk7DS8ceU=:\r\nfly-request-id: 01KZANQRRZGNBXZYRQGGWAHHR6-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":187,"size_decoded":1012,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"05981be59a26970fbca1e5a8c7634336","sha1":"579e7098232d88c3a0cb8101b9ad9bd45a3c9f40","sha256":"71bd5d3c6e096c8a6e9a3a3f0acb0dcd5cfc610ac5706ff0251964ec34bc71e5","sha512":"4d31793eb824fbfec3447fd7a4a709d7605e7dcd276c710d599de8c2b059c3935922d3f78a3999ba095ed47eb92df069bbc5d9bb3a98a649aef2c15c4e54feac","ssdeep":"","tlshash":"31c0127be8f0eeb359728c5a80a6c3212a1a88d3d361037491881aac41208db9918ca7","first_seen":"2026-03-07T22:46:23.632504Z","last_seen":"2026-08-06T22:39:10.601442Z","times_seen":9073,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":4,"connect":13,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.564Z","timestamp":1786039563564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-95HPXtdJTW46wenAK8uWRc' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a26ff9285edf2efa\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFmDGju32aj8QuzxawQj7QWtrQT246WUO%2Fm8ul%2FXPn5CmPLhcX%2F4WE0TNM7v%2Bt8aavLFkGipY%2Fu9lKdqojDqss4ZM3DHq6mMeTf3sdr%2Bfqb%2BYMa08BJOLUTS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a26ff9285edf2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5691,"size_decoded":5336,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5691), with no line terminators","md5":"b3eabb5038809b7b88a3ab49151c1886","sha1":"117814b2ed3d7c92a18f597578f9212833af7066","sha256":"d5f28dba2e80bea128a12c01c1a280d7b47a062a89e0dc2786bef863c178be51","sha512":"321c7f9142c558c6db1bf231da6d9b49926b7ca87855ceb21acbf51769636cec2d8ab55079aa454dd0d9a0d12fbd820345d3df902aa907e057dd7c3d50cc6c4e","ssdeep":"96:PNygtoXZzIEb0EaW87c8GseYHyQby2E4Mz/1REyMZ9h7uQYzueh8ty1mw:PNVtkCBXGse8yUyzzPCZ7aRyzyYw","tlshash":"6bc14cf3dc716036c72f1ba210bff35c6321a609b706d0a8d691853da6ddf1e80a56d8","first_seen":"2026-08-06T18:06:34.497861Z","last_seen":"2026-08-06T18:06:34.497861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":4,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/axios.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.292Z","timestamp":1786039562292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/axios.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 42736\r\naccept-ranges: bytes\r\nlast-modified: Sat, 18 Jul 2026 05:01:39 GMT\r\netag: \"dfaea4d9b527be113ea748629118a6da\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42736,"size_decoded":43015,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1eb8e8e2284670dc214a3e70c25992b8","sha1":"94ece417aa560aa8de906e8f54c0985da90364cc","sha256":"96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455","sha512":"ae6cce74fa46a0ee1b00245f7da885ace7bd608d96152f3b4d9b2c1e66d53cbf5c1f298d1eb60cdf4a17a14296edc2fec63c22a7cf968025911ebe9272f7d49e","ssdeep":"768:iE/e1fRWqcYe4Q2q3jetDArR2d1mP2EduTgeIQN/s:VGoqcY22q3GASme1k","tlshash":"0a1385c6fbd57803b51630a98e8f754a76b4d05374046ca5bc4cb9e83fd883c86e6a89","first_seen":"2023-03-08T19:53:18Z","last_seen":"2026-08-06T22:39:10.596182Z","times_seen":25686,"resource_available":true,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/img/img_0be37dfe376b_he7do3.png","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:04.524Z","timestamp":1786039564524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/img/img_0be37dfe376b_he7do3.png HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 31859\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Jun 2026 14:36:10 GMT\r\netag: \"6058acc2b5a2426fbf7022430a51ae49\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31859,"size_decoded":32117,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5ad51a81b01e8c5ac7100f3f01868f65","sha1":"b287d14dba7e1b56f9235030106334eef07b7d41","sha256":"bd87663efb55dc1af901e772e899dea8dc42dd7b10f20d53baad96b77fc630de","sha512":"807748c523229217ddada9249f52e086ce7cfd3b8731a01185eee963d0a104e3c16452c1b8dd1ae99749c1735093045b8b25cb7e57e66d8ca064bd99ff95e977","ssdeep":"768:RGuGeA6BJptL4mQaFM3RLv+pxr5/JrZyG8I97eoZvCb2F:R8e3Z1LFM3RLI/JdyG/ZayF","tlshash":"d6e2f113ce260a74d22fa9c16f469dc472fddf74e2aee18e4db864836ca86cc59402d5","first_seen":"2024-07-03T00:41:23Z","last_seen":"2026-08-06T22:39:10.603809Z","times_seen":37,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/a_index.html","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T18:05:59.058Z","timestamp":1786039559058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/a_index.html HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":29022,"size_decoded":8202,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28984), with no line terminators","md5":"380ef659f9188fb90eb1ad1d6401b64a","sha1":"cc989ef831f474baff73cb590d17ca19b522a287","sha256":"b5659ff2f634d5a483b8cc43b70d9fddda0722dc43a4025df488af1f30b6a24d","sha512":"96c5a9da5e768b63124d6af0ce78f71b81154a318b2536763e301baa8d175d3eb26ee390a6841027917c9e59112ee64a99c3fc1504a18a1cfbd8c8d6e5ca025b","ssdeep":"384:FViqN/qa/ziWBdp1Mxmxuii2ixWgQkDwwIiB4OSxfV0S+URT:FViC/9dp1MCsB4bV0Sd5","tlshash":"35d2d9728610343e23570a88f9b1f728729b955ecf4619e0b2fcd364d7c6ed0a97618e","first_seen":"2026-01-22T17:22:14.420446Z","last_seen":"2026-08-06T22:39:10.591874Z","times_seen":50,"resource_available":false,"data":null}},"time_used":3060,"timings":{"blocked":-1,"dns":746,"connect":162,"send":0,"wait":1817,"receive":0,"ssl":334},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/main.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.295Z","timestamp":1786039562295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/main.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 207694\r\naccept-ranges: bytes\r\nlast-modified: Sat, 18 Jul 2026 05:01:39 GMT\r\netag: \"d3bdb1486694e73c57580a6ff239457d\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":207694,"size_decoded":207974,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65360), with no line terminators","md5":"7634a1bd4253ba2f83629fd3e354b7f4","sha1":"a6b282ae8f3277a438e5448edf9b580b22cfce68","sha256":"58b07bd944b7b172b2438fb8401b09d494cb1cd8e6bc8e16dc0e55ff6b0a2a36","sha512":"35d8de8f68600e30c55ef9ecde9cc9d9e5a8a5688a88d71e44958109c004d73bf5393b5d7174a29f0b11edd8de3a55df4c53922c8130a79b0ba44acf9aa51186","ssdeep":"6144:3pEhF49S0VWZE02/lqrX43EiViYY6tHI3d7/xGVNqwnM+kPUvJFh6PzTT:3pK49S0VWZE02/PEiViYY6tHIWkPk3iP","tlshash":"e714925126c0e80533071fbb321bb0ead93a585f785c459ae968bc71b19a327fbf6131","first_seen":"2026-08-06T15:33:19.7812Z","last_seen":"2026-08-06T22:39:10.577584Z","times_seen":3,"resource_available":true,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-F5EFWER6.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.569Z","timestamp":1786039563569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-F5EFWER6.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a26ff9284c574e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 9193\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 18:06:03 GMT\r\nlast-modified: Thu, 06 Aug 2026 07:46:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:Y2rkAx89TOwGaTUEKTvNVdXqQqACLledbC0BYgAkBU0=:\r\nfly-request-id: 01KY21Q4SVAZRCXN7XSDE1M82F-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":672,"size_decoded":1315,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (629)","md5":"e404af09dd04bf3f85ef25ff477f2235","sha1":"c01a359668d3860945f3c1ef49b66bd623ab25e0","sha256":"636ae4031f3d4cec06693504293bcd55d5ea42a0022e579d6c2d01620024054d","sha512":"a49dea23ac5ed1b82c7edaa62d0fbed4195bb48aff92378adcda6891c8d581aba45590892137f314a12e4f881daead6ff63d51696b1075c8f7e1041c1d694b00","ssdeep":"","tlshash":"1d019ecc78b8bef287d25859405feb02e6265451d56a405022edaed4d07c8d789a982f","first_seen":"2026-03-05T17:25:09.886647Z","last_seen":"2026-08-06T22:39:10.587621Z","times_seen":9073,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-SI7D3PZW.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.572Z","timestamp":1786039563572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@lottiefiles/dotlottie-wc@0.6.0/dist/chunk-SI7D3PZW.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 06 Aug 2026 18:06:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a26ff9284c694e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 9193\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 18:06:03 GMT\r\nlast-modified: Thu, 06 Aug 2026 07:46:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:MP10OIRrApk6RyB04FCGCtG0Y49fNqnweUD910Gqq4U=:\r\nfly-request-id: 01KV6SN5ZM7441FEW9HXV4CNPH-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23376,"size_decoded":8635,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11535)","md5":"4915cbe555f5ca0aa6534f7592c55fd1","sha1":"01683f93f73717af0c3fbb9a6aba1c1cc72188e6","sha256":"30fd7438846b02993a472074e050860ad1b4638f5f36a9f07940fdd741aaab85","sha512":"eb5f9b688df0c4e82837699361394f865eb2736882f3b5d8f46fab3c58384c805ebe827297941144bbc2dc11dbf7f04c3429a53a8d774ee6e4f836c35b81ff2b","ssdeep":"384:fHOyHjPQ5GnHixKWPY1rVdeqGRUkKpvKtvV3jM4:vD3nHixKWP+rVdgrKpvKlVw4","tlshash":"16a2d88076f994b34ad582d6dc79460fe250349c682e846dfa7ca6ef1938f41a1ec732","first_seen":"2025-08-04T13:12:55.035191Z","last_seen":"2026-08-13T04:49:24.605101Z","times_seen":9209,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ip-api.com/json","fqdn":"ip-api.com","domain":"ip-api.com","tld":"com"},"ip":{"addr":"208.95.112.1","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:03.604Z","timestamp":1786039563604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ip-api.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Feb 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C4:3C:A1:3A:F5:DC:2D:C7:D5:63:0A:55:E7:E0:20:DB:85:D2:09:2E","sha256":"CD:A6:17:77:06:27:70:F3:87:D9:AD:87:F9:C2:2A:0F:63:3A:76:CB:2A:D8:A5:43:8D:51:F1:C5:6E:5D:49:89"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ip-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Thu, 06 Aug 2026 18:06:03 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 107\r\nAccess-Control-Allow-Origin: *\r\nX-Ttl: 60\r\nX-Rl: 44\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":107,"size_decoded":291,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2d4fe0896bea42e22440634afcd5f5e5","sha1":"9b3bdf02a4e9e673a88b045dbe890564526fed76","sha256":"61fd702060224daad1fa949b448fcbebb9d3bc8628ffb942b44e8fa63dbd4c87","sha512":"745f925a92941be748a7e6a14c84adf2daa3917279407450a711dacd3856e767c6e6084b3ff29c08e7f05e539b7f14d731a5105a688d453b2b4402396a916864","ssdeep":"","tlshash":"feb0129782057a5a1f5d41c53c003e2899fb07a16ce19158946d8c0db716402f52ff60","first_seen":"2023-05-29T15:21:45Z","last_seen":"2026-08-16T08:45:46.830976Z","times_seen":918,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":3,"connect":92,"send":0,"wait":94,"receive":0,"ssl":372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dmv-ca.gnewia.shop/pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:10.839Z","timestamp":1786039570839,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/webSocket/QT/JWRCVV-1786039563481-hjuh4cnluui-z7ih6qr6lpl/khkjsahfjkwhakjlsdwdddddd88 HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dmv-ca.gnewia.shop\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HC15JaDp8M45lZp6EiI5XA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty/1.31.1.1\r\nDate: Thu, 06 Aug 2026 18:06:13 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: WWW-Authenticate, WWW-Authenticate-username, WWW-Authenticate-userid\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T13:43:00.958144Z","times_seen":17937759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmv-ca.gnewia.shop/pay/_frame/static/js/fiobgush7875.js","fqdn":"dmv-ca.gnewia.shop","domain":"gnewia.shop","tld":"shop"},"ip":{"addr":"47.77.197.121","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dmv-ca.gnewia.shop/pay/_frame/a_index.html","date":"2026-08-06T18:06:02.290Z","timestamp":1786039562290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmv-ca.gnewia.shop","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 12:56:30 GMT","end":"Thu, 24 Sep 2026 12:56:29 GMT"},"fingerprint":{"sha1":"A2:C7:6E:AC:D3:14:04:9F:E3:DC:91:FA:E1:1F:57:C7:6D:95:1C:93","sha256":"BE:CC:F7:24:3A:83:AE:2E:74:F2:E6:F5:FC:22:3F:45:80:C6:82:D7:CE:C3:CB:98:59:5D:1F:AD:4B:10:0A:BA"}}},"request":{"raw":"GET /pay/_frame/static/js/fiobgush7875.js HTTP/1.1\r\nHost: dmv-ca.gnewia.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty/1.31.1.1\r\ndate: Thu, 06 Aug 2026 18:06:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22,"size_decoded":221,"mime_type":"application/json","magic":"JSON text data","md5":"689525ee6c812e73a44b6aa1036ab53a","sha1":"7350cb4703a96ea7c140bd30da9a6d1bcff36eb2","sha256":"37ec4665a8102d115ffd1ac20dae94c98b4dac64b0c1a68228aa2a531caeb35d","sha512":"da6deff19f0b2bf5e0ef17b3cae34a0d44c5d48fbf9f3ffedd00cea74f923e1a3e9c4c926a6564c889cca21041550f557e1ec00db9e35502ffc794a5f9e9722e","ssdeep":"","tlshash":"5770000820028acc0000e0e0208c202000003b002020802a0000c020820028e20ac008","first_seen":"2023-04-08T18:32:13Z","last_seen":"2026-08-16T18:23:33.057931Z","times_seen":11059,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-06","alert":"Phishing Block","trigger":"dmv-ca.gnewia.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}