{"report_id":"78e459ad-ef2f-40a1-bb4c-188bc4b8bd18","version":0,"status":"done","tags":[],"date":"2026-08-27T14:04:35Z","url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"title":"幣安官方网站入口-幣安交易所｜安全注册与便捷登录幣安官方网站入口","dom":{"size":37496,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (391)","md5":"7b0fe28ea6bee4d7519189d2b3a1ef5d","sha1":"38bea3705c4434ccc621295e3c88be0b957178d1","sha256":"504b8ffba2e667c271286b76033896aaacec6f36bf5b6874c5425e571cde5e02","sha512":"20284ffe2ed996cd2a5ed9d356438356be915dc534499a90e4f66b29c962c74913fc8203e559d03520eaa3dd8bde8b9e89cec348a2722ca30dc00a608a82ba6d","ssdeep":"768:nWihLYbV14wgDcv3W482LYUkVkusr3JoM6ATnhnjrSnKGnpnxH5GR:nWiND7Dcv3W4AUkVkusr3JoMtx/kV5xk","tlshash":"67f2832500fe59770193a1c07af11b1fae91ea2bdb5a4a44b2fc9ec55fe3d91ce43248","dom_hash":"domhashb7f5958ca5ecce4f89f60ec55d1a3917","first_seen":"2026-08-27T14:04:39.794761Z","last_seen":"2026-08-27T14:04:39.794761Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-01T14:04:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wap.binance-bank.com","ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"domain_registered":"2022-11-25","domain_rank":0,"first_seen":"2026-07-02T02:25:00.328903Z","last_seen":"2026-08-27T14:03:28.299285Z","alert_count":235,"request_count":47,"received_data":7040872,"sent_data":60496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-08-25T05:54:34.62556Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.51.la","ip":{"addr":"112.46.240.46","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-08-25T18:24:18.027298Z","alert_count":0,"request_count":1,"received_data":36513,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"da343474f786567339d6555bb66dfd25","sha1":"374f8ad71a9f0c3eb0e41040279f8a62783b1c47","sha256":"ee47f75bcc609d72881c37f8a9dd0c5a0069cdd6e3673cb60b9b22123b26138f","sha512":"ba7e6bd45b38df57e6937d1e3dc751fefd155c920d7635e257066f94bcb025ebd842dfa75619397a4585a6e9c7d480ed005785c42722c082f2f2bb2a5beb69c7","ssdeep":"","tlshash":"5ac08c37112138300a4ee527900eea8128b950012a0298020829841b9ce8e8cd1bb8e8","size":148,"data":"","first_seen":"2026-06-25T21:56:53.668895Z","last_seen":"2026-08-27T14:04:39.842377Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b55f6bdb428fb4499c517351b4fd36c","sha1":"b10984bcd2d24bcc10415a7f1ef6688b235db339","sha256":"67c3eab525435f81d2ecb49f66018e3786f3e063e3e9ad4befef551f39ba6fc5","sha512":"66761a2eccb82eacce750c20227bace8079d0d9726f26a8dfca7372ba98c2361376a7f7b87600f66983fa08d892d6bcf4d327b1108e671911480fa8b950e74f3","ssdeep":"","tlshash":"8c900200f68a04a9430629002933814300d1a840839641a4a44c404b0240640f027d41","size":54,"data":"","first_seen":"2026-06-20T21:36:56.194699Z","last_seen":"2026-08-27T14:05:38.836542Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/js/master.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf76de23f7e37177487681c9ce0a605c","sha1":"b3237e5e4b6663dac529f6354614551719a7ca70","sha256":"b597bc7624adec0a3ca68a3403bfd60c581a828409457a9d952fe0294308910d","sha512":"ad377d50823f0e3cb680d808d74856ad6aa78d90c2dbac145ea28bdd93e966de2d9ab848de8e36e608bc2425958b2bae4db3730445ee0e62db4770074c9d1aa7","ssdeep":"","tlshash":"7721ac25447a547580fba6d6938f33e9b2240043a9098c023e9c4ec9afd59f25ef08e3","size":1325,"data":"","first_seen":"2025-06-13T16:12:07.01892Z","last_seen":"2026-08-27T14:04:39.805595Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/js/pv_common.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","size":1345,"data":"","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"112.46.240.46","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-27T14:04:39.833977Z","times_seen":99096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/js/jquery.min.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-27T16:46:08.836654Z","times_seen":500638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/tj/and.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aef0d0f01abc5b8456298caf5a753e9","sha1":"9d33160c698070017f053272d295707e3689b6b4","sha256":"0b135bffaa0e2b41d0cad3d0ee6a15915f2aa4f1e7f02c7cdf7480e7c91756a2","sha512":"14aac68ee0ce2106b23ad0d9f1c55f2f41d912f561ce3418d35be93c3f162de8019177159b2f571b5c079f75387c153446883e9c6cd9a675e03aab2cebdc4287","ssdeep":"","tlshash":"16f0ac1e7896143413b6087a23bbda4d3463260ed4adce0296dec5e15b74eea080a68c","size":586,"data":"","first_seen":"2025-10-14T16:42:36.073256Z","last_seen":"2026-08-27T14:04:39.833257Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/main-image.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.743Z","timestamp":1787839443743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/main-image.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-14deea\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1367786,"size_decoded":1368734,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"30dbe8de424dfd047d0dbbb07b268753","sha1":"59dd7aa12a28a4ffc7e03d7f3747ef717f7abd27","sha256":"c59e4a08639c5eeacc86e5f7db4f3b05ff85d3c2db32abe68bdb800f43795d2e","sha512":"69fdd536d6d1800e7c48b5dd380800a50ec49393cda379ffe762125eb17dda217f8adf34f98f670e276205c93d4a94bc9d5c4bb04935afad37cc0e35053e7e02","ssdeep":"24576:MT1YvplLWyU7i2dU6urVwKIOCwRmvssOZiZLUGrFH/Nn7I:Q2djU7iqU64uGTmvssOZmUGhHZ7I","tlshash":"3d2533a9b55a69f47d332242b31d883a63e078d02ce942c7735a43f26c67dd75e82392","first_seen":"2025-10-14T16:42:36.056061Z","last_seen":"2026-08-27T14:04:39.796081Z","times_seen":13,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/css/master.css","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.509Z","timestamp":1787839443509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/css/master.css HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-17bd\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6077,"size_decoded":2263,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0c52a5db6f1f31b1759d3804461c769b","sha1":"a970ee2ab2b208c864c452d02b53f5b1f96324da","sha256":"fc9af6b9d361f86ffe312eaa4572857e1edc310cb5d66891faf0e318683b5459","sha512":"7664c959a117cacf6ba4a4478226ca05164ed8652d22dd9431171cbc740e3ec40975c7ad9b33334a6c41619aca5daabd1bf6cc5bd2f6c852759811a1bd590e34","ssdeep":"96:88UCvbJkzCvCmdlImj3gPCiFSPBxUUAp4Ghq9pffmncdTiXlsByg1GpcVk2Xt9Ft:88bT/aa+mrg6iFVvpbhq9pffmncdTi1K","tlshash":"e2c134c69ba61104b80bd168bcf68755737e8043d24ece7d7ae010acdf8e2d65972b9c","first_seen":"2025-10-14T16:42:36.149015Z","last_seen":"2026-08-27T14:04:39.796823Z","times_seen":15,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/152GXZmn.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.751Z","timestamp":1787839443751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/152GXZmn.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-5cce7\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":380135,"size_decoded":380728,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"c2fab54b26a014a469fa44b467cc4939","sha1":"23a8fd12e309cfd63ed7227d50a5af35a2916dab","sha256":"ae68df60a91ce364fa67df0a51c0760819df28e21e946b856ec3397191cb5c78","sha512":"5401672b69b455ce2b2edc35d58f927c691beecbd2d2529c11cede51a23042122d99eb386e2100612c0b2b3ba4e178247492f75db56e1a839b2f22a1c8b5922c","ssdeep":"6144:tF1MroCMDzRISa1IG3L8u/4JUbawOg2QadE9y4y1RJMGrrDP8Y1m8gyIXVi5igOV:qkCM+SayG3L8i4KbawOgn0E9WvJMGHjY","tlshash":"048423c5ba607dc87bc73c22cdf55a14b9ca0534f1daa57e375a0e0bb8463f6d825260","first_seen":"2026-08-27T14:03:32.95605Z","last_seen":"2026-08-27T14:04:39.797655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/E7R8J3vr.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.756Z","timestamp":1787839443756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/E7R8J3vr.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-6276e\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403310,"size_decoded":403893,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"7e89be9b7f5d6c5d6ef6bb53fdc11f44","sha1":"7a9deece41d3dea1f9b0f3de14a118db9b0f2bf6","sha256":"4fb6c118e6c5f060f42213ba5160b937aea0859cf83aa7c553bfaa996fcca908","sha512":"29cf1e9b07b33bf19ed0f40976249d98d5a3e9a96ed088f542566671f72e7572223987e205de5b44a757cabddba0723fd5729a5eb3713a05111709c14e5f88ac","ssdeep":"12288:GQpsLHHG4XfW6fNqXECYSX6kC8XlXnyHjC:GQpsbHGg5fs0CYS3nVny+","tlshash":"7b8423f1939694e3f375bcfef71a26ec385049c9ec0633444281a1ed1ea53d9a5acb12","first_seen":"2026-06-26T17:56:46.906659Z","last_seen":"2026-08-27T14:04:39.798442Z","times_seen":3,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/BNB.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.765Z","timestamp":1787839443765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/BNB.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-56b\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1387,"size_decoded":1929,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-08-27T14:21:41.258169Z","times_seen":16246,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/okx.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.773Z","timestamp":1787839443773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/okx.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-1a4\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":928,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"015c7115ee3c8e6093e4e4544df3f9b4","sha1":"f551174f0b60806fb45f297bc62213dae8c4e2da","sha256":"67eadd6bf613e6b6a870c43efedc69765ac8608092f0636592f1ecc6ab0e66a7","sha512":"b18fc279e4de1df2e327c6b1525579c506dec015549d9cd7ddf83187251f2927063f1004e45cb43370a3d937b5f3c5f89dc137c443579c5a1652685ef00184bd","ssdeep":"","tlshash":"e7e0c05abaf330b5cde920a64c89fd63803ce72b63151e150a94ecf4560b7d48e9cd17","first_seen":"2024-05-25T12:31:04Z","last_seen":"2026-08-27T14:04:39.799724Z","times_seen":227,"resource_available":false,"data":null}},"time_used":1303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/css/index.css","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.507Z","timestamp":1787839443507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/css/index.css HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-2ad1\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10961,"size_decoded":3212,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5c843128877b0e9674d7cf2fce51d40e","sha1":"9e539953d384bec4fc6f582cc496b070030f540a","sha256":"fe36679e920f234b201cba8b1512c4d87bf95c0ebd9fcbfdec4eb23c44d4b670","sha512":"07d091eb19282c1ed152399f8a4998d4a01421d052d29cd2d006d789e5a4cf335da0aa7213d455815de276ee81ce7878251de12eee1d34f9056b85e1af1786bf","ssdeep":"192:PX2zKIvRSLi2DF8vF+EymUxVVY/F+XH6Fc5FeXO3gCqzulUg/UZr72OXuSVwWpVe:+vO9DF8vFMVY/FY6F6FJZqzup2PXX9wV","tlshash":"87320f837bb51611b40bd4a86ca29b96732c9843d14fce7d6be0206cedcc2d85672f8d","first_seen":"2026-07-02T02:25:01.906018Z","last_seen":"2026-08-27T14:04:39.80031Z","times_seen":4,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/Zbc9uXNe.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.755Z","timestamp":1787839443755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/Zbc9uXNe.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-496de\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300766,"size_decoded":300995,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"9e850feeefc8c0c4c379514e9be1c606","sha1":"762c4081bbafdedfae058f215ad7172336f734b0","sha256":"20a6bb3696df7f16113ae8527d0dfc5d8e85dec96f9d36dbd4fa8bcc5017f6eb","sha512":"f4f3097568ad997d83f35f42e283c848af8d40041f5522ba7f1525758ce22bd9d0371c1ef3a71ad1b6712d5e45659f41dde510ba8fe5df888c23149e27f9dc84","ssdeep":"6144:vp2LmxzM6jLjZ4POWi8g4rwjfnKrn2oE6C+FTJ/xUiUSE:vp2LmxzMiLF0OW64rQan7COE","tlshash":"9f5423e8b2e4de79d885742ce08ab5409f0e7afad1be2407cc419a92395e7ec60533c5","first_seen":"2026-08-27T14:03:32.9294Z","last_seen":"2026-08-27T14:04:39.801073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/bybit.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.775Z","timestamp":1787839443775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/bybit.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 418\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-1a2\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"57e82f79e42f5465d44ffd51b8034e99","sha1":"c0a7499077e33b32052d5d9fa83f2b5c3b7e2c90","sha256":"28f7b537ed3a233e0e95944fcfea4ea4340204a3a8ba57622e85ef7fe25ec4c4","sha512":"cfb2eedc76e9d2fe3e46b6736ef9fed638eb3c0d8fa75ca934978bd3c150ee719cc4284c897647fdadcef2adef550e4a49361d38739c7ea567c3e8a851067dc3","ssdeep":"","tlshash":"2fe0ab83e1b66d5682cd0d6aa11e3160286a2c403e12f289c22963e21f15a4123f82b7","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-08-27T14:04:39.801701Z","times_seen":213,"resource_available":false,"data":null}},"time_used":1301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/ytjKTafO.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.751Z","timestamp":1787839443751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/ytjKTafO.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-74812\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477202,"size_decoded":477825,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"1114f7583831d6e62528de09f7410528","sha1":"c58ad64fe019f249dcc82ea754bdd43fe8fe84e5","sha256":"af071965c1e6a086b3fe92b7a46d1f5c76cb0560187c205f49bfda1c829b6530","sha512":"17733887479a5588e4591235174565374d0c16f862cfbc7d581683163186f9f119b4af7c5e2b89b2203e1ebc44ad1f7c33e8d4fdcffc1383598782d6c0adbde1","ssdeep":"12288:VOTfKfHrHpef8Ti8Pd0AtOjYcXGVIkzuGXaGQUr8wF:VeAAs5aAtOscXGVl2dw","tlshash":"20a4234835471f6bdc5704b25258fff6f5cc845e6e83b8e5c3686eac60aaec049af850","first_seen":"2026-08-27T14:03:32.938316Z","last_seen":"2026-08-27T14:05:38.821521Z","times_seen":4,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/QEzySluk.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.754Z","timestamp":1787839443754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/QEzySluk.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-467a1\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288673,"size_decoded":289195,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"01b0146b84e4adf2c56cd05bfb90d187","sha1":"de36e189edbc3c1f43d0de0aee7df4b1176c4ba9","sha256":"de3081ae65e4462f4d032bf6f28187a027d3357167b28cca0e005b50674d6c7c","sha512":"275d1c74f472ad21306042ed2c4d1b17b2f866544fe8dd3e260d4e469fcbc16c1455ba010d12d5a65f6c722627541979ecaa53fd385d81501e751de69c055a74","ssdeep":"6144:OrylzcBRvT5Na8mg8NNZJz5ihZJKcw55zxgSpoj70I2Ia6/khYq:jUxrUz5fTzxgSprQagkv","tlshash":"335423246d35e68df34f7a329e9de5965ea48ef3e308c3a124e2e6716480bf055c3c25","first_seen":"2026-08-27T14:03:32.92445Z","last_seen":"2026-08-27T14:04:39.802877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/7IDXnTdh.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.757Z","timestamp":1787839443757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/7IDXnTdh.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-50946\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330054,"size_decoded":330631,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"a98aa90bfdc5e7675ba0113070fd4fd1","sha1":"996c6a6b78877c405b96afb5f27d21093e193f88","sha256":"8bb7baa5bc7e03b08b26d0f25a99472bf9a41eca0419d23b9c8c56b7d084d63e","sha512":"ac8b481b29eb0d0f0ed8901fbe7f8ca08b85bfbbe4a3071661f22f33737a508b44b8dcfc7db11ff75cc522c6905b37da501cc691a9e1c780aad6dd978336199b","ssdeep":"6144:peAsf4YmWsbk2f8nEa8ydwB15cvgDkAfgzxc2HVy6nys/aV0uOzTe1:cA6ug2f8nL/d2FDkAf+dj7aVrOXW","tlshash":"966423b0c567928f01f4d8a28f0a50439e3b591fed4eb6fa258d308ff7549ca627d021","first_seen":"2026-08-27T14:03:32.881174Z","last_seen":"2026-08-27T14:04:39.803601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-27T14:04:02.229Z","timestamp":1787839442229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:03 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:03 GMT; Max-Age=7200; path=/; httponly; samesite=lax\nserver_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:04:03Z","raw_expires":"Thu, 27 Aug 2026 16:04:03 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:03 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"laravel_session","value":"eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-27T16:04:03Z","raw_expires":"Thu, 27 Aug 2026 16:04:03 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; expires=Thu, 27 Aug 2026 16:04:03 GMT; Max-Age=7200; path=/; httponly; samesite=lax"},{"name":"server_name_session","value":"e0421870ef46d5871a06f12afe8db3e1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=e0421870ef46d5871a06f12afe8db3e1; Max-Age=86400; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39949,"size_decoded":12882,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (391)","md5":"161626f014865c3d9cf75f4dddfad49b","sha1":"aa97375277961854d7c8fcbf160aefe2ec3ccb46","sha256":"69ee271094890c14c232977c499581f5be9c7401c7327333e629705378a6c98d","sha512":"eeab982c7419587d88cc312d755f55e09e3b54f2d7c60060d63e4668cc81013a8002c4f8d81f5f3790a8230d8c0449f948c876f0a63795a22233ef6abe501fb4","ssdeep":"768:2nq00Ny6rKiwqZcJF0S8wLYU2VSAu15noKgy3nNnVrAnKqnFnTH5SL:2nq1oitZcJF0S6U2VSAu15noK19FSh1K","tlshash":"3403722600f2d97701e2a4c569325b1f7ec0e61bdb9a4a44b2fc8ed69fd3d91cd47248","first_seen":"2026-08-27T14:03:32.966001Z","last_seen":"2026-08-27T14:04:39.804312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":6,"connect":260,"send":0,"wait":520,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/public_css/public_css.css","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.541Z","timestamp":1787839443541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/public_css/public_css.css HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 207\r\nlast-modified: Tue, 03 Mar 2026 07:02:10 GMT\r\netag: \"69a68772-cf\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":711,"mime_type":"text/css","magic":"ASCII text","md5":"bc8a4184d36d6937f8b0ee51764044ad","sha1":"d2ead814c88e6c7dcec42f027b317c1a60312d80","sha256":"820563cfb72fa6a27dcc963a4cfdd9a7093e876ed70c2be897a3ba382984400e","sha512":"dec5315966de9bf504b441219401379ea464ec7e007645538d3a8ada0b6521585865a0808271d1e030d6913a280e5a5a8886aad50f12fef4a14fbc2b4070871f","ssdeep":"","tlshash":"c9d022c3de9b0482b657d0e04fb222f79abd0803259ac19ab68432f4cf06ec18821401","first_seen":"2025-10-14T16:42:36.052249Z","last_seen":"2026-08-27T14:05:38.77879Z","times_seen":45,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/js/master.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.548Z","timestamp":1787839443548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/js/master.js HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-52d\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1325,"size_decoded":1140,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"bf76de23f7e37177487681c9ce0a605c","sha1":"b3237e5e4b6663dac529f6354614551719a7ca70","sha256":"b597bc7624adec0a3ca68a3403bfd60c581a828409457a9d952fe0294308910d","sha512":"ad377d50823f0e3cb680d808d74856ad6aa78d90c2dbac145ea28bdd93e966de2d9ab848de8e36e608bc2425958b2bae4db3730445ee0e62db4770074c9d1aa7","ssdeep":"","tlshash":"7721ac25447a547580fba6d6938f33e9b2240043a9098c023e9c4ec9afd59f25ef08e3","first_seen":"2025-06-13T16:12:07.01892Z","last_seen":"2026-08-27T14:04:39.805595Z","times_seen":172,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/icon-t-alt.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.745Z","timestamp":1787839443745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/icon-t-alt.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-292e\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10542,"size_decoded":10831,"mime_type":"image/png","magic":"PNG image data, 210 x 202, 8-bit/color RGBA, non-interlaced","md5":"85d81bc527987d6f7477503ad5a6d5e9","sha1":"a6715c233108bc23ac2ef7a97287f1ee7269e6bb","sha256":"99d0068a700b7d5ea26bc1317764a24532a56c80e8df7f733ef617b1da0fdf59","sha512":"6e981dd4f2d1de120cbd284870007250f0e4e5de3d593b313296c46dea60fce1c51f6ca05ecb42c7cb37d5dd1f751c6e4dc07ec1692d22bc27656cb3648b8ac8","ssdeep":"192:i0zOF3KL1SJAsORKLNHVXyhpl2baLM2evJ3l+xJhcCbFQ:6aSp/pVq2HbNlgKOQ","tlshash":"0522bf1bdd6994024b4ae54ba2feb022a828555991b4fddccaccc02cd1c5495cb2b01f","first_seen":"2023-09-03T15:04:50Z","last_seen":"2026-08-27T14:04:39.806454Z","times_seen":32,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/icon-t2.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.746Z","timestamp":1787839443746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/icon-t2.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-110f\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4367,"size_decoded":4505,"mime_type":"image/png","magic":"PNG image data, 210 x 192, 8-bit/color RGBA, non-interlaced","md5":"88577a18b31f6034cfd11cea1b44f94d","sha1":"0e1d0eb7a9811116594d0d94eddb61501c882185","sha256":"c047b1bd5c9b2e30970f5d2697d80c1d196437f27820e72705739391087d89d8","sha512":"230e86f066cd2af381491f9c2df2c259fb8c675ca8696f41e6afece6009ca0efb4837204e0ba14ba9cc174776fd294c85bea2b17961587bbbba8a16d183b39ce","ssdeep":"96:0PQp51dsvgNuwMIvAAYYYYY/+5HgeTJ54MdWpzAl4UWDc:WvpaAeTX4gWpzAnF","tlshash":"d2913a8fd9037a82508cd6d780f680571e7d06c445c2a7622cacecafc4711ba81bef89","first_seen":"2023-09-03T15:04:50Z","last_seen":"2026-08-27T14:04:39.809811Z","times_seen":32,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/XeL8cksY.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.750Z","timestamp":1787839443750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/XeL8cksY.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-49f95\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":302997,"size_decoded":303234,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"1170b3e6654840bbfd457127fa5a3c73","sha1":"32398e08a56d02c21501e8553cac85f48ec82860","sha256":"dae1999ee9ffeda85a74e7a38d91f043c84e9ad40a3b010db81349ae0135d8f9","sha512":"e485a93798ec632287f4bd23473a9f927deb841bf362c0e6afad1a920667fed44db79d60dada8838a17aa8bc64d9cc7349581afeccd0c69020a6c4abe9a6b98c","ssdeep":"6144:+J5B6y3QL820AioyqCXEm6hGdf1rhS+D/Wi5ffiBtpYJgDzffF1xZ+O:+Yy3yxsOCXJSGdf1r8Ip5Ho53fxQO","tlshash":"2254230cfa7176c123858fae960e63e51bff4f158faeb34d36928d5522f31162183962","first_seen":"2026-08-27T14:03:32.954514Z","last_seen":"2026-08-27T14:04:39.810408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/mi9sD1vT.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.757Z","timestamp":1787839443757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/mi9sD1vT.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-57fc5\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360389,"size_decoded":360889,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"6f1c4ebe2289bbe2dbec5e23dde25e9a","sha1":"09bec8d08b8330add17377da05eddf2dcbdfb70e","sha256":"a76f7b7794820bea853c5370af15e4351c406284058a450621ea840e99b33cd5","sha512":"2d9f5db260902800168b12de6f7bb9d60e23182153d7d0c30a7f758c15cc07206893809e3d68cab864d0415589947621835d43e4e53b5f5c0f523a8d4d867f5a","ssdeep":"6144:Ja4mBWeSi4PtiDHuVl/KBCoM03lrVFMlJvFGDZAureNMgMx+ATSo4gLB25Q6Hu3:JRmYel4PKuVY3lQcZbrqM15GoF2O3","tlshash":"d37423b172cb8bf4db361c772e2bf41274215481c368f2a997c329eb390ba526d74917","first_seen":"2026-08-27T14:03:32.879393Z","last_seen":"2026-08-27T14:04:39.811156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/NRMJWzWg.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.760Z","timestamp":1787839443760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/NRMJWzWg.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-676b1\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423601,"size_decoded":424177,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"09e614702a563b8372c122bb17b6a82c","sha1":"1cef4a1d821ce7fb6a8041d9eeac68cd1d468b8a","sha256":"cc744d7a63f4422fe6915b761056a4c507dde447e3add6de581b88c21de27825","sha512":"19d854f7a84142a1d67b27e858ff74e9ddb89873b67d6ec28dcee855bb0d6342945f37abdfe6da167d6d410b7f197f5d30a5fed6f9e481c21c79c84405308d7e","ssdeep":"6144:3E7cUU9EBAwYHFXHJgWVCwmD2Un3fU3RchwgbAX4CO4oPPfXHh:3EgkSwYHFXHJgWVz1WEehwgbxCW3/h","tlshash":"4d9423bedd8d4d47e997a5ec834604284800a174462ef5af03fee11f69b2c66713e27e","first_seen":"2026-06-24T11:41:37.841639Z","last_seen":"2026-08-27T14:04:39.811831Z","times_seen":4,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/XRP.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.764Z","timestamp":1787839443764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/XRP.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-91a\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2330,"size_decoded":2819,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-27T14:21:41.303763Z","times_seen":17913,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/DOGE.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.768Z","timestamp":1787839443768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/DOGE.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-109b\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4251,"size_decoded":4794,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-08-27T14:21:41.326761Z","times_seen":15342,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/ADA.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.770Z","timestamp":1787839443770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/ADA.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-ae6\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2790,"size_decoded":3332,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2b4047ef139810f5403fe2987bd2dc9e","sha1":"529276c43a521743eb53df1cfe8bc8ffff220dfa","sha256":"38c163ecba73c000df0abfe2ad5c4f941164909f8078e8a304dba4db696bc709","sha512":"d1e527d489bc5db742681f87a0eff100b8126baee0b9765e5bccd9360a917ed4ee870abd79e417693e36e600d4cbadc11e30cb73a630c3ce11a51be4a2dc86c8","ssdeep":"","tlshash":"27514a428049d490ffa2e705d715816ac940f88cfce6a3858ec4d52a60be3a494b77c0","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-08-27T14:04:39.814291Z","times_seen":13244,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/bitget.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.771Z","timestamp":1787839443771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/bitget.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-20d\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525,"size_decoded":1033,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f28f04520098a3b137e4a9819a63c193","sha1":"e1a14814c53de51553ad1bb77a596cf13ee918d5","sha256":"f49107be685dbc68e93acbcfecf26ac12418bbc5e954e93e8a7d84b6a9f18f4b","sha512":"d301ca4cbd4c5a74577e6f4a0950d60818e935b50261b2871a889c5ac5e7e954b8c94ad0e6bc370528bd1d9e8debd0508565b34c6d56369776494c1240324ae0","ssdeep":"","tlshash":"13f00581239ea24757764410573ff92c86f38eac5ca4007ed5015da141b67c9d8992bf","first_seen":"2024-12-08T21:22:12.532481Z","last_seen":"2026-08-27T14:04:39.814813Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/logo_binance.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.741Z","timestamp":1787839443741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/logo_binance.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-d25\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3365,"size_decoded":3547,"mime_type":"image/png","magic":"PNG image data, 192 x 79, 8-bit colormap, non-interlaced","md5":"7cc8c90b3e2bc7bf79e17c7664dfb171","sha1":"a4992e50d85072e2fa00cb23821bfcf1d96de474","sha256":"652d5a85334cc23360c45469083e3f04028af526764c2f217536c25400a4b721","sha512":"94438a80149de3f5277c297640377971eec843f4ef909bb167f5a95c7d59f5db0e5b0c39a3d0c63103d082c7b3bc3bef627c1e073961d6e8d003a0735d6fc8af","ssdeep":"","tlshash":"3961d61292d2bd3b5de850dfd60f5911c31ac91d00f560891bb73d392ad4af97c3ca90","first_seen":"2025-06-16T06:13:20.559793Z","last_seen":"2026-08-27T14:05:38.798206Z","times_seen":82,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/css/root.css","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.508Z","timestamp":1787839443508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/css/root.css HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-5ee\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1518,"size_decoded":1194,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0d7208585dfbadb732e0ee2b82ac2c86","sha1":"6649123b523774b1822330dc0ad3bddb3d413307","sha256":"af6d3ca937af30cc75c39b819a8ec3234726d4c87b6b8c549254cf71d139588e","sha512":"856bed0cd954e51a9079c9c17134d9a8edf3dfb816e1dd5cbe52ff2946a4548e396a549933279a4895a6666d2968fb3621882d9d0ce4dc6fef3d05b9cd36fdff","ssdeep":"","tlshash":"1d31c01b76a34185341ad83467eb2796213a9413e10eda3a7fdc739c8f496d268a13cd","first_seen":"2025-10-14T16:42:36.117236Z","last_seen":"2026-08-27T14:04:39.816045Z","times_seen":26,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/js/pv_common.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.733Z","timestamp":1787839443733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/js/pv_common.js HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-541\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1345,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"18469a3d9e6a10bf606cccdc0867c15f","sha1":"6acdb5b0a0eaa922897f246015a0adaf19ec1f4a","sha256":"70cf49341fdbd69494ad8bb00f1bca86097d8dd1ebcee1c55c507d56f6ad24b3","sha512":"1343b7d57b2a220e3d1e64dc2dd74a721dcaff2d9c377698622e1b706f55307781b6f3e9bceb3b9369c434faf2d55b4dffc6c30be68380ba2f25421e2fe0fd9c","ssdeep":"","tlshash":"7a213d4ae8f724936b53b078068b501931371a2b885ddd183f4d83d94f6c53dd5a56dc","first_seen":"2025-11-01T10:11:19.920889Z","last_seen":"2026-08-27T14:05:38.823414Z","times_seen":35,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/USDT.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.763Z","timestamp":1787839443763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/USDT.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-2a2\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":1182,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25a8a1e3479b793e8bcddc8b2ba726a9","sha1":"248492192bb393c84661daab721fcc5d0b82d165","sha256":"2d5a29e2c8a731b9c0891dfa54c3bf753ad5bba2911e71ebca654c273cf08748","sha512":"758bae768d116e95d923a254204ae52624a0bf3a4578fe62bc9039659c45655240b77e9bb92433669cc90f6de32c4df4e5bd83fc632f7c71a85a285446272159","ssdeep":"","tlshash":"dd014e4a0e257a702f230e7325bf2d4f102964e012b55986604eb1338e1eaed142062a","first_seen":"2023-08-15T00:41:50Z","last_seen":"2026-08-27T14:21:41.284541Z","times_seen":2140,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/SOL.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.766Z","timestamp":1787839443766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/SOL.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-eaf\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3759,"size_decoded":4301,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-08-27T14:21:41.249038Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/css/common.css","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.550Z","timestamp":1787839443550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/css/common.css HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 965\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-3c5\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":965,"size_decoded":1470,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"42d5b1d36b179dc392e9fdf3c443dc5e","sha1":"38aea21454539a46642f1eb2360241a81693d00d","sha256":"985cea841d725c4c0be02ae491339b6a2e369229d8e5bf9c51d956fdedc27283","sha512":"cdba04430dca3465df0d37264298081831323ce6850bd1715734b3891030aff1b31f86e4d3e30a339a871b8e9edb2be8a5e188200d19ff9fbce354615fdff8d9","ssdeep":"","tlshash":"3011bd4749670d41762bf4940f3886450265904b924fe58e3bc92a488fcf5c8d0b3be8","first_seen":"2025-09-02T04:51:20.901124Z","last_seen":"2026-08-27T14:04:39.818118Z","times_seen":22,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/USDC.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.767Z","timestamp":1787839443767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/USDC.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 892\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-37c\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":1400,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25bcb059251caa734d596e764838b1aa","sha1":"66e6753403b44dd24721b823817e3029ae14a7c0","sha256":"1bd5b35db23cfbeaee8ec3ae974e46291f9bc6ff08cd717a5713e92c3b9ab02b","sha512":"b6d0efaf80771943be04e0df2293f51d8bd95c4ff8c076236b260caf580a26f8e6948b9c45becadb273cb28690ba92bc130330c2bd9ef7509a96446a33f87c8e","ssdeep":"","tlshash":"361167dc9a5da73cf7547a1bc9126ba8829985b2ce2ef74c10406f39a120eb46085669","first_seen":"2023-05-08T13:54:02Z","last_seen":"2026-08-27T14:04:39.818609Z","times_seen":278,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/binance.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.774Z","timestamp":1787839443774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/binance.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-802\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2050,"size_decoded":2543,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"66269b4cfa0d1a33b1f5829cc4d14b1e","sha1":"f401eaeec79fad410778239e5ce7d72ebe5fefa9","sha256":"991bcd7ed73288fb8cf47e0b25d61bad30f4d4d53aa7e91a10ddbd5e0b01623d","sha512":"ee6b0723853d3af5b97bbae448cd78b0c5cf6e1f40071eaaf10acda9a130e3d7b36c462b58b61bbd82af5bb3f90e0b3668f8dfa3d516c91c75be4b427b5cabd9","ssdeep":"","tlshash":"a9413c87dd00ce75960eeeb4aa960b085c90e1211c5a6e241e27c701392ab28565d76f","first_seen":"2023-08-28T01:22:02Z","last_seen":"2026-08-27T14:04:39.821223Z","times_seen":239,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:05.239Z","timestamp":1787839445239,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 439\r\nOrigin: https://wap.binance-bank.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-27T16:40:44.061051Z","times_seen":18133445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/favicon.ico","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:05.771Z","timestamp":1787839445771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/favicon.ico HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1; __vtins__3PUvloqvJK3Gzwvv=%7B%22sid%22%3A%20%2268bf143d-94ec-5524-a763-d5c1dfe90bd9%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201787841245224%2C%20%22ct%22%3A%201787839445224%7D; __51uvsct__3PUvloqvJK3Gzwvv=1; __51vcke__3PUvloqvJK3Gzwvv=b4cbd531-f066-552c-958a-74a29effe997; __51vuft__3PUvloqvJK3Gzwvv=1787839445230\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-3c2e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":15848,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"388629d2d912447a252177f51b0fd042","sha1":"1b28cb71086ae8b0f84aa7938ef01d3a5c94fca7","sha256":"b1478c491946e67f4ba71477d0628c4be21997eba3b1e05c128b3e0791caeedf","sha512":"269cd96f4e514f3ab96fa3037ec2171c20fa557b7152e62b59a625714ebdeba9a23c153e8bd1d4afdc4f0a108bd9880af319699aeb0deea76ddd1525bcfc79b3","ssdeep":"96:xN6dsw5eGpiBBtsm9gV7uMzL8WEpS59y0SdDbsXo684rtRM8v6ON5z+Jl:T+5ToLT9g9UFpS59PSdcsCRLnKl","tlshash":"c562f90db3838b96c5b8437930c52f9093ae56a5c2a7ca0ad067e5d25dcf99698833cd","first_seen":"2025-11-14T15:58:21.073704Z","last_seen":"2026-08-27T14:04:39.823786Z","times_seen":32,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/ZpCVh2fj.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.752Z","timestamp":1787839443752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/ZpCVh2fj.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-6d159\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446809,"size_decoded":447185,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"6d10cbc0f885f740770cd4450a904a81","sha1":"3b2d6731621ad6257a48b75811bad632eee3eeba","sha256":"3fd8836f43c245a2360a6e79e199ce1a1002d0bd8b5c312a52486ad1d20e4626","sha512":"ea558dc7a44765eba9de3ddc79130ad3c3d9499e7785deef127c9f5ae08bd977551123c8d20dacc363b04257cc4dcdb0daeeb821a2aea20f19f9f4bab5397e94","ssdeep":"12288:VuVz4pdnNXbdwS7JTJPZcZN5cv7jElJx98JDIr1SajavnUf1u:sWTJdj7FJPZya7AswIaAna1u","tlshash":"cb94232d109c1be28a85d6f904c96ffc1f44487fd60b92b3663e19e9d7feb0285805b5","first_seen":"2026-08-27T14:03:32.885198Z","last_seen":"2026-08-27T14:04:39.826239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/DLqHraBC.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.753Z","timestamp":1787839443753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/DLqHraBC.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-4737d\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291709,"size_decoded":291144,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"aa921384f0d85b939593c45b021a121d","sha1":"5220ca48a4a4e09d8e797fe9c6e301e5e0c2ced4","sha256":"1de8e41be860d32b80f7ae37b39843aecf951689dc9306471d513c09fdb389a3","sha512":"6b185dfc91b6c01b66a7c33c23a6c2c3e80a5e17b316293dd9aa4125cebd6b7e75371613c658ead20a763cb6e596f5f081007ae31a97595a53feab83b563857a","ssdeep":"6144:Y2SzXbx3rOC3W+QCYITbbLX3FvqIs4q3SrcGubDx/:iN3mDmTbbz1vq94qircNB","tlshash":"bf5423892b995eb649ab717b68182df40dbf27e78d0c7f27656e0984c809dc2c47b432","first_seen":"2026-08-27T14:03:32.940506Z","last_seen":"2026-08-27T14:04:39.828699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/click.svg","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.744Z","timestamp":1787839443744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/click.svg HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 478\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-1de\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":918,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b15aec21024435934db72d71246e376","sha1":"d76f90150f5edb31a67594795f6ad9b76f11ae1c","sha256":"227d064bbb6d219382146625e13afb505acb16c40e21f45ec9045e3dc4ea8c7e","sha512":"1c169459882405580ebb8150a6a999327fcf5d3266d00e64c080648a0674908796872c3cee0380eb579bb6fa5f9d0a143adc772c39774035eae48b872d406319","ssdeep":"","tlshash":"0af0977c030cac8cb813c120eb153676a33fb1913228033c487fa932488364dea33898","first_seen":"2025-07-03T21:03:34.150092Z","last_seen":"2026-08-27T14:04:39.831069Z","times_seen":79,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/tj/and.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.512Z","timestamp":1787839443512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/tj/and.js HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 586\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-24a\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":586,"size_decoded":1105,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3aef0d0f01abc5b8456298caf5a753e9","sha1":"9d33160c698070017f053272d295707e3689b6b4","sha256":"0b135bffaa0e2b41d0cad3d0ee6a15915f2aa4f1e7f02c7cdf7480e7c91756a2","sha512":"14aac68ee0ce2106b23ad0d9f1c55f2f41d912f561ce3418d35be93c3f162de8019177159b2f571b5c079f75387c153446883e9c6cd9a675e03aab2cebdc4287","ssdeep":"","tlshash":"16f0ac1e7896143413b6087a23bbda4d3463260ed4adce0296dec5e15b74eea080a68c","first_seen":"2025-10-14T16:42:36.073256Z","last_seen":"2026-08-27T14:04:39.833257Z","times_seen":30,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"112.46.240.46","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.735Z","timestamp":1787839443735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 27 Aug 2026 14:04:04 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: openresty\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvia: CHN-SNxianyang-CMCC6-CACHE10[45],CHN-SNxianyang-CMCC6-CACHE10[ovl,40],CHN-HElangfang-GLOBAL6-CACHE38[ovl,17]\r\nx-ccdn-req-id-46b1: 4b9727d0431f07a76367405b6b9f4677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":36115,"size_decoded":36513,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)","md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-27T14:04:39.833977Z","times_seen":99096,"resource_available":true,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":3,"connect":267,"send":0,"wait":395,"receive":0,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/mJ2irkEQ.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.759Z","timestamp":1787839443759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/mJ2irkEQ.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-43a43\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277059,"size_decoded":277557,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"3517e77d3a5e0b04f006c4f4c6655e54","sha1":"a77eb2806f2132ac42f262f6943fb5facdf588fb","sha256":"28bb8d00f21cc9b6c39e97093056a3da272046474f675653ced4b57991a20e81","sha512":"5e78a46183049b9beea893999076c8981e285d1c1fb06d75d6c0f672160dee71a6d533eeaccbd73802332971f66e24f3fec43df207823664212d0cd3b4a25bee","ssdeep":"6144:TD282FyanG81CCNaa4uU4Rrd8HedEoZLO2PopmpRViFY:f282Fya74Va4uU4RJ8eV5HympS2","tlshash":"af44237fdc92c68d819cc9350728e6eb859e6099c88ab0ecce504cf9151f7b4453b6b5","first_seen":"2026-08-27T14:02:30.824409Z","last_seen":"2026-08-27T14:04:39.83474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/BTC.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.761Z","timestamp":1787839443761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/BTC.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-a83\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2691,"size_decoded":3167,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-27T14:21:41.307973Z","times_seen":26107,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/TRON.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.769Z","timestamp":1787839443769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/TRON.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-a8b\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2699,"size_decoded":3072,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-08-27T14:04:39.836145Z","times_seen":3511,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/js/jquery.min.js","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.511Z","timestamp":1787839443511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/js/jquery.min.js HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-15d9d\"\r\nexpires: Fri, 28 Aug 2026 02:04:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31669,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-27T16:46:08.836654Z","times_seen":500638,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/MWDOyCb1.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.748Z","timestamp":1787839443748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/MWDOyCb1.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-42dc7\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273863,"size_decoded":273380,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"9d4afe6f67f937c7328298fc331bba38","sha1":"1c932b96e128b3c7a8ad129053e7ae2e81b0f676","sha256":"a4ed2ad99bff76e82538eab8dff94d46694b94cbd31d72722341e2b3dcec9a72","sha512":"4cdc2fe0795b8025f038fd52c2cb31ad3627b09f8ced5c69d4aa3a86544146400cbed4a276de1203344c8c13aa136ad52f53d60bb4ed6fd30b55a9859ef79b8a","ssdeep":"6144:WieFj8Z1i9kMIGG+m0d12vrJtUVMCdsz5RAfuNiHK/l8cUy5:PeF03QG8LadtDVz5RABqtX7","tlshash":"7844235d1c534c6c0adc03b999e5d0b71e86aa94e7f7f2a45de493fea3224066392382","first_seen":"2026-06-24T11:41:37.842954Z","last_seen":"2026-08-27T14:04:39.838329Z","times_seen":3,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/qPzoFkVW.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.749Z","timestamp":1787839443749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/qPzoFkVW.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-65b3b\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416571,"size_decoded":417161,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1584x1006, components 3","md5":"b2811037ca0c8418375aae743581d59d","sha1":"a2e8d22dc447a7ca72c40bc609ea152f25002fc0","sha256":"6b28e8a4c4bdd32679b929a1fca32a68e4112316ad6fc7f187e2b0eecc8423ca","sha512":"acb740e58be130fe47e4c9866a287bccd9eb79a7f80764da4afb26afa23324ce75b719729744f64e164f137b80d9e807b99a1ad00962a0a86c9e66eb51cc9c04","ssdeep":"6144:oMk8pTaVAmYHaSi+XpLTnpyUrsMPInW+N8425RNmVPDs/+2vbsmKN8kv1o:i8A+HxL9brsMPIRNV25RNo4/tIPz1o","tlshash":"6c9423beee8f5cb8cae87f7b64e63105e6b33a54a501a82784d750edd4a2390250b1d1","first_seen":"2026-07-04T09:21:09.194662Z","last_seen":"2026-08-27T14:04:39.839087Z","times_seen":4,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/news_img/LvmMWfXm.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.758Z","timestamp":1787839443758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/news_img/LvmMWfXm.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68776-6fff9\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458745,"size_decoded":459067,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1102, components 3","md5":"002e393f22acd9317f0d0ab0d803e364","sha1":"85a78673dc505146a98c9206db4d232449a472ec","sha256":"5431ea36e1ebc51034d69dc2e9a565a787947ea58e7f82ec2a8407e01b1cce36","sha512":"dd49360f47ab6bafa8a36402f632c0fbd4564ddcbc6340ae2fe1202f005e059da5f9cb5a13d22a7b84d953aec7c2c6d12ec26797598b52001389e41bac1abf8d","ssdeep":"6144:lneLnFtWxoF7I00rk12N2bP2lB5L6apBh2B/uJ1dfRx1o1UVHp07QjNBq4bSK4:lgn867ItG2Ni2lHese2PH1o0QQC4bSK4","tlshash":"92a4239eadb0e8ca9d2f21065cd1d3575996ecc5fecc08347b2a943f88363a19c2d562","first_seen":"2026-06-26T17:56:46.893547Z","last_seen":"2026-08-27T14:04:39.839549Z","times_seen":5,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/ETH.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.762Z","timestamp":1787839443762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/ETH.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-adc\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2780,"size_decoded":3287,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-27T14:21:41.300028Z","times_seen":23461,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/tp.png","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.771Z","timestamp":1787839443771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/tp.png HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a68777-7c7\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1991,"size_decoded":2528,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1e7f5dcbe34e0e3aa55a2a425a6e7f8b","sha1":"30408b0e68235d7eec72a684aab19a424b1d5c70","sha256":"5358628ec0e4e50af6754d4a844058013fdccbd94ad83c8e05cd82953844e2ae","sha512":"055c0c19950a28c5211faadcdaf6a6dacbde3ea16bf07b6bb6804ac32eb4aa198ef5bfa0af6106628b134cae554dfd5c652aba00d6ee3784eff73dac2ee6952d","ssdeep":"","tlshash":"ba412ac43fe954f284ef3841b0d74239783c92a15e543a2cde196d7aa6c815c2e1f3a0","first_seen":"2025-09-02T04:51:20.935065Z","last_seen":"2026-08-27T14:04:39.840821Z","times_seen":19,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.binance-bank.com/static/1/img/0.gif","fqdn":"wap.binance-bank.com","domain":"binance-bank.com","tld":"com"},"ip":{"addr":"184.168.121.194","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap.binance-bank.com/","date":"2026-08-27T14:04:03.777Z","timestamp":1787839443777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.1-binance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 13:06:02 GMT","end":"Sun, 22 Nov 2026 13:06:01 GMT"},"fingerprint":{"sha1":"E9:BB:E6:11:35:FA:7A:52:8D:95:C6:AA:19:75:60:68:41:6F:4F:EE","sha256":"1E:C7:31:1D:6C:C7:B6:C5:74:08:D4:85:E9:B3:CE:D1:5F:69:54:34:2C:ED:2F:6E:73:96:9A:F0:BB:B4:30:61"}}},"request":{"raw":"GET /static/1/img/0.gif HTTP/1.1\r\nHost: wap.binance-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wap.binance-bank.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IloyOGgyQ2NCbW10MjIyWDlLOHoxZ2c9PSIsInZhbHVlIjoiN1FBQldQTmw2REJPKzJPQ0o5TkJrQzB0b2VpMGYydnB2bTZkM0VjNVpEM0FVK3BoMEpFdFYrUHc3NHJjWXMvQmF1Nlc5cEVONFpXRXJqVGVMeFpURHFvdjFndFB2d2dOS2JQZHdaZlBmbTVrRjkyOW1QYW1KRmhzU3RzUVp0ZTkiLCJtYWMiOiI4NmZjNGUwMWE2OTY5MmM3MGEzMGE1ODMxOGRmZGRiN2EwODYxMDQ5ZjBlZDBlMDMxNzQwNDFiZDA0NWExMDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iks4SlVMWW84RUwwb3EveUVJUzc5MVE9PSIsInZhbHVlIjoibXJQTHNrN2I2cWpIQU5qMmFXODNnOFNmMHlUL3hQV0pScVlPWTE0VHROMkVpMzhrOUFwOXJDajZvdGltNTB4bktGT0NnMTdZTFkwMTFCc2Z5M0k3TElzWGNobW1lb0V0RGZCZ1lROUJ4SVl6QUhNQ3EwU0l2VDFjTmluY1ZxTEIiLCJtYWMiOiI5NGVlYzM0MTIwMjJjMWZiZjM0M2EyOGU0NDQ4ZGZmMDNkNTYzNDk0NjhlMjcwYzM0OWNiN2Y5OTI2MzRjZjJiIiwidGFnIjoiIn0%3D; server_name_session=e0421870ef46d5871a06f12afe8db3e1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 14:04:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Tue, 03 Mar 2026 07:02:15 GMT\r\netag: \"69a68777-2b\"\r\nexpires: Sat, 26 Sep 2026 14:04:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":549,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-08-27T17:04:07.312224Z","times_seen":40979,"resource_available":true,"data":null}},"time_used":1299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-27","alert":"Phishing Block","trigger":"wap.binance-bank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-27","alert":"Sinkholed","trigger":"wap.binance-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}