{"report_id":"855b8c28-57a0-4d86-8119-d5f2749cf552","version":0,"status":"done","tags":[],"date":"2026-08-16T02:50:57Z","url":{"schema":"http","addr":"warrantytrustwallet.com/","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"warrantytrustwallet.com/","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"title":"Trust Wallet","dom":{"size":20664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18556)","md5":"e526f5fb4c02ab5d07b4382451eb65b6","sha1":"11587b5e74c0a9e22992890d9c71317dfede497f","sha256":"6764b7fc01e676721f35b383939153a3d83bac72decb140ff19e8216dfab7aa4","sha512":"75ed6d2e2df0f6feb14328caf596e8c51d70afe1a4836c1024abb9fbf6987ae76b7c688cc2c32e256bf1cb06b070c0a8cabc30648c08a2fecd8fdf9bff975a65","ssdeep":"384:jSIvy4Fl+2A525tJJJJfbq3lFfXVq6ocN/O:GIvyO+2A525tJJJJ23PXVq6ocN2","tlshash":"5c92e77576840e7be253cbb9fa50bb31525bf28fd2abc448f1e9456667c3e48cc021a4","dom_hash":"domhash031d5bac7da6182102d9d853beae7379","first_seen":"2026-08-06T20:52:06.677645Z","last_seen":"2026-08-16T02:50:59.228993Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"warrantytrustwallet.com/","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T02:50:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"r0.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"r0.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"warrantytrustwallet.com","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-06T20:52:01.78159Z","last_seen":"2026-08-16T02:43:30.011931Z","alert_count":60,"request_count":15,"received_data":806906,"sent_data":10493,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":146540,"sent_data":1856,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image2url.com","ip":{"addr":"172.67.132.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-09","domain_rank":6617001,"first_seen":"2025-08-20T22:46:09.546131Z","last_seen":"2026-08-12T21:32:43.416945Z","alert_count":2,"request_count":1,"received_data":617,"sent_data":596,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":1,"received_data":49133,"sent_data":583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r0.image2url.com","ip":{"addr":"172.67.132.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-09","domain_rank":0,"first_seen":"2026-01-03T04:56:56.186593Z","last_seen":"2026-08-06T20:52:02.396236Z","alert_count":2,"request_count":1,"received_data":5660,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"warrantytrustwallet.com/assets/index-DGiaHf_j.js","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9008fddeb2400d566411336e2a070316","sha1":"a11c0bf2c1bbaf94a644774f5ae57b23815a91d3","sha256":"a5dea13ac0dbc9be4a5e5716ff9a88a9cc07503fefd2f61780c6282b1e47458c","sha512":"d9c710f4e097bbf48f9cd1efb7ba8e699eb6dd238aceddfda734b938ccd14ededeb4f9c3d93ee7a863e3e0dd030af279e64214ab0b928a32c48854088afe106d","ssdeep":"6144:exVQijv7ehzyTsxoIsrr6LoJLyVZmEg4mkBdE9ugQ:S/zQit6cJLyVZMDkvE4","tlshash":"6f748ed8b096b6b9abb745e6503f410a723d1916b80e8450f03ced693bb5106a177ffc","size":357904,"data":"","first_seen":"2026-08-06T20:52:06.687434Z","last_seen":"2026-08-16T02:50:59.234963Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:37.181Z","timestamp":1786848637181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:37 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 4274169c5790cd213e8b5b757a7aac34\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:43.208Z","timestamp":1786848643208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:43 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: f00fad93dd5c163519b6891d343e777a\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:46.208Z","timestamp":1786848646208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:46 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: cee5618b5ed083a219b6891d343e7c89\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/assets/index-DbQBbqYq.css","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:30.490Z","timestamp":1786848630490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /assets/index-DbQBbqYq.css HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 78634\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 16 Aug 2026 02:50:30 GMT\r\netag: W/\"1332a-19f80a398e8\"\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: ebd874494c2356e13e8b5b757a7aab09\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":78634,"size_decoded":79122,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1553c990080f476518d9d96e05d007bd","sha1":"cf01570fa4c90fd058eedbfc57738fd2a479dc3f","sha256":"492519243917cd98b40410f32f26c4179abaf394ffe8c043ca5105e59e144191","sha512":"38f55ead69a6b2e0b452b4c83f1cc368261594203920e72b8638f434411d7d7deebbb0c63fa7bd272553e09d32693c94f98941920b3190c62a016ad91201bacf","ssdeep":"1536:bofh+DPYqw8kUpeTGpfC378VQZkt5FxPbJmQ:bofh+DRw8kUpeTGpfC378VQZkt5Fh1mQ","tlshash":"e573862dba59503f3c6790f8d38cbaaca20bb1c0de3e05e6bd96413156c23f25da7654","first_seen":"2026-08-06T20:52:06.688372Z","last_seen":"2026-08-16T02:50:59.230537Z","times_seen":3,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.021Z","timestamp":1786848631021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 0991197a85d8c7773e8b5b757a7aab81\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:40.208Z","timestamp":1786848640208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:40 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: d843ab6a17701cb519b6891d343e71c0\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:49.208Z","timestamp":1786848649208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:49 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: c920b9a4afb1278719b6891d343e7eaf\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:55.208Z","timestamp":1786848655208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:55 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b34f0914a712967819b6891d343e7b43;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":447,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T02:50:29.806Z","timestamp":1786848629806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 2047\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 16 Aug 2026 02:50:29 GMT\r\netag: W/\"7ff-19f80a398e8\"\r\nexpires: Sun, 16 Aug 2026 02:50:29 GMT\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ; expires=Tue, 15-Sep-2026 02:50:29 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7b81d8f868f98b0fd102c3a671872cce\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"GAESA","value":"CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ","quoted":false,"path":"/","expires":"2026-09-15T02:50:29Z","raw_expires":"Tue, 15-Sep-2026 02:50:29 GMT","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ; expires=Tue, 15-Sep-2026 02:50:29 GMT; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2047,"size_decoded":2855,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"2b21cff9ad91aba486b6e954ba0c04a4","sha1":"76433ca130ec794b39430bcf949fa29a18f2f769","sha256":"d7c39c585d631f96a11079c35d30886f355bd533c704145e5c62c490df69b594","sha512":"a5ba8e9f7760180529a6885e52958609a68e5b1f5c409742196ce7c6bc43b8366a1bb7f5898de45a900bfd41190500d108d454bb729dde35c8a01b3618e46fc1","ssdeep":"","tlshash":"cc414adf895a48a67020b17ab8e5be17040ab44f5bf998a0b483e857cdc97cdc853e18","first_seen":"2026-08-06T20:52:06.683115Z","last_seen":"2026-08-16T02:50:59.231703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":51,"connect":13,"send":0,"wait":150,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/favicon.png","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.123Z","timestamp":1786848631123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 2984\r\ncontent-type: image/png\r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\netag: W/\"ba8-19f80a398e8\"\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5fec17ad0ad9dfbd3e8b5b757a7aada0\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":2984,"size_decoded":3455,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-08-16T02:50:59.23241Z","times_seen":977,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/assets/Screenshot%202025-11-26%20102646_1764152825862-vbkK8qC3.png","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.193Z","timestamp":1786848631193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /assets/Screenshot%202025-11-26%20102646_1764152825862-vbkK8qC3.png HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 79706\r\ncontent-type: image/png\r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\netag: W/\"1375a-19f80a398e8\"\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 8b51a51e1ce38c7e3e8b5b757a7aafc7\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":79706,"size_decoded":80180,"mime_type":"image/png","magic":"PNG image data, 683 x 628, 8-bit/color RGBA, non-interlaced","md5":"f5fcff10afee3da7553952e852f2d800","sha1":"652b67a29a9a4595f11efb6f57f8a4319713e130","sha256":"2413858884865b16727acf47bc88cae2d4205c9d476080099e8bd46e2e47dcb2","sha512":"4b05fc11be266fb7c369d694e6712fbbb1d5d844bb9643d163cccba3dc14933fc594481355f4995638b85665b23cda00da05c30f96f368919146f5644ec6ef0e","ssdeep":"1536:06OZqZOU+lU89lYJ9RJGVdLPREm9R7jMQnW14D+tuj4h/V1G:0uV+CkYGdTR9XXWY+YjCe","tlshash":"50730240e66d33efa94a213b4e494fee0d3d512cb611d2250278d3526ad26b3be20cbd","first_seen":"2026-01-11T05:40:38.229883Z","last_seen":"2026-08-16T02:50:59.23314Z","times_seen":6,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":170,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:52.207Z","timestamp":1786848652207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:52 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1d6d93c423a7a23019b6891d343e7d83\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15,"size_decoded":443,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:30.484Z","timestamp":1786848630484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 16 Aug 2026 02:50:30 GMT\r\ndate: Sun, 16 Aug 2026 02:50:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145856,"size_decoded":8135,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"194d9b4264ae31301c9ddcebe7065ca4","sha1":"bc9e7d59e1021aaf4915478b6a459f2ece1dd060","sha256":"82fd0d181927fff9a997dcd3b61fc25d4df92e3bdf91f33bfd01a85b6b2ddf1a","sha512":"73f5e8fce63b94fb920634148e6eaa75736473b467c07e4eb3e9345f60d4fa2b64fd750bbcb25cffce3e06b10b9bbd661bea08826580ca24c5585fa9ec683073","ssdeep":"768:CtFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:5VXPNo6mACNqHvDyWNpQ9","tlshash":"efe31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-06-09T04:03:47.231468Z","last_seen":"2026-08-16T02:50:59.233918Z","times_seen":171,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":40,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/assets/index-DGiaHf_j.js","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:30.488Z","timestamp":1786848630488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /assets/index-DGiaHf_j.js HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 357904\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 16 Aug 2026 02:50:30 GMT\r\netag: W/\"57610-19f80a398e8\"\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 119695bba35e2e803e8b5b757a7aa703\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":357904,"size_decoded":358407,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37527)","md5":"9008fddeb2400d566411336e2a070316","sha1":"a11c0bf2c1bbaf94a644774f5ae57b23815a91d3","sha256":"a5dea13ac0dbc9be4a5e5716ff9a88a9cc07503fefd2f61780c6282b1e47458c","sha512":"d9c710f4e097bbf48f9cd1efb7ba8e699eb6dd238aceddfda734b938ccd14ededeb4f9c3d93ee7a863e3e0dd030af279e64214ab0b928a32c48854088afe106d","ssdeep":"6144:exVQijv7ehzyTsxoIsrr6LoJLyVZmEg4mkBdE9ugQ:S/zQit6cJLyVZMDkvE4","tlshash":"6f748ed8b096b6b9abb745e6503f410a723d1916b80e8450f03ced693bb5106a177ffc","first_seen":"2026-08-06T20:52:06.687434Z","last_seen":"2026-08-16T02:50:59.234963Z","times_seen":3,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/assets/Screenshot%202025-11-26%20102605_1764152785435-Ch3c3WPl.png","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.191Z","timestamp":1786848631191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /assets/Screenshot%202025-11-26%20102605_1764152785435-Ch3c3WPl.png HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 278417\r\ncontent-type: image/png\r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\netag: W/\"43f91-19f80a398e8\"\r\nlast-modified: Mon, 20 Jul 2026 17:47:13 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 140b6eae99ead4473e8b5b757a7aabc1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":278417,"size_decoded":278892,"mime_type":"image/png","magic":"PNG image data, 1237 x 914, 8-bit/color RGBA, non-interlaced","md5":"78c6adad7a754029a375412b75ad917b","sha1":"8ae013f7a11e71ae586e6d533f53a43e2931b763","sha256":"b94cd4256d1b4a144177f00214c1547ff7ac9174d0b7c7ab93b2a42bdc8c01a3","sha512":"c3f2729811435e7d511364da85f356a8297af54bdb7d10473fcfa572496543da0bbf871b0fe10b0290d5a19f742fb8d357e5e9eadc1176e523ab2a6109f770ed","ssdeep":"6144:Ou9U7MMB0DtZPxhVrHXLJu7LN1G1uHirCwkObsN6Lc++41TKbXxKipT:OgU7MU0hbXtUi1PuwkOb2Sc+lBKbXx/T","tlshash":"224413975ca7ed84ce0f2d2d26b75d41273688d439b96df1b936102cc9cca11b43a1af","first_seen":"2026-01-11T05:40:38.235705Z","last_seen":"2026-08-16T02:50:59.235744Z","times_seen":6,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image2url.com/images/1764153423843-bea3ba64-f3af-4d28-bc61-9e0dd0e4b6d0.png","fqdn":"image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"172.67.132.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.190Z","timestamp":1786848631190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"01c86e25.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:47:13 GMT","end":"Wed, 16 Sep 2026 11:47:03 GMT"},"fingerprint":{"sha1":"CC:13:32:22:54:8A:68:9A:D7:9D:16:19:7B:B5:6F:F2:01:7F:E1:0D","sha256":"96:1C:AB:E0:F7:B5:1B:A7:B4:93:D3:81:E2:BB:20:43:E4:B7:DB:A2:CF:A4:61:E9:46:34:22:41:4D:09:FD:F6"}}},"request":{"raw":"GET /images/1764153423843-bea3ba64-f3af-4d28-bc61-9e0dd0e4b6d0.png HTTP/1.1\r\nHost: image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://warrantytrustwallet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://r0.image2url.com/images/1764153423843-bea3ba64-f3af-4d28-bc61-9e0dd0e4b6d0.png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FCSn9uDzeLVN9%2BpJb9Ba%2FPvPQdGrpfCvhGIeeJ1%2FEnJT9Vh2fUNj947T01LyPkU3wTQ8YnixVQrBlexZxk%2BwzAqk0Q4AdjlErO%2Bb5b%2BA%2BDOiqMsVeASVDw20d8flW3G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a2bd21c91919569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":9,"connect":6,"send":0,"wait":20,"receive":-1,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.208Z","timestamp":1786848631208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://warrantytrustwallet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 308412\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-16T05:36:48.076398Z","times_seen":328857,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":1,"connect":31,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r0.image2url.com/images/1764153423843-bea3ba64-f3af-4d28-bc61-9e0dd0e4b6d0.png","fqdn":"r0.image2url.com","domain":"image2url.com","tld":"com"},"ip":{"addr":"172.67.132.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:31.242Z","timestamp":1786848631242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e5a9f4c9.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 09:29:14 GMT","end":"Wed, 16 Sep 2026 10:29:05 GMT"},"fingerprint":{"sha1":"24:9A:4D:29:C9:58:C0:38:EE:77:54:7E:AD:1F:B9:89:7E:CC:39:F1","sha256":"D2:4C:7D:79:14:58:F3:8F:DF:39:3F:1B:C2:0E:A0:7B:DA:6B:2E:94:A4:DF:C3:7D:CC:D0:DB:3A:50:F1:2E:52"}}},"request":{"raw":"GET /images/1764153423843-bea3ba64-f3af-4d28-bc61-9e0dd0e4b6d0.png HTTP/1.1\r\nHost: r0.image2url.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 02:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4848\r\ncache-control: public, max-age=31536000\r\netag: \"cba46742f6056746ba4ccaa3e851b267\"\r\nlast-modified: Wed, 26 Nov 2025 10:37:04 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPlzHtQSwSv7MD0%2Fk%2BX0w9R9CJIZV%2FyHochwMdVz5qzcOQ%2Bz4hZXOhbCmYJ0iJ6O3PS8%2BdwjtQjsmAzcSkHWEWEfkWSoEMScQ3f%2FQWgcYWiM7zdusxynsSt0s165XQxIqh3c\"}]}\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=4848\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(95;u=5;i=?0)\r\ncf-bgj: h2pri,csam-hash\r\nage: 1657218\r\ncf-cache-status: HIT\r\ncf-ray: a2bd21c96bc14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4848,"size_decoded":5660,"mime_type":"image/png","magic":"PNG image data, 428 x 186, 8-bit/color RGBA, non-interlaced","md5":"cba46742f6056746ba4ccaa3e851b267","sha1":"c7e54e94d60ca8c4c3483d5b71a253c58ec1bbb1","sha256":"de1f3e538f61765f9ae33d9b5e981c7c596d2a0bce0c45e6dda0ae9e77d3939a","sha512":"031a487ea93ad717e52e1f5d6be5f6eb8b1c5bbc8208abce54724877996a25bede7238db3f5f637c9a5ac3312d5a87628834efc7444ad5d1ae1664620666a28a","ssdeep":"96:zyQDGat99GRRg84a1cfspGQpsmVlMIMpQtY:ztDGOKRq84Wvc2lMbQ+","tlshash":"08a13a813003bb5c33cf116271e7331ad9a74bc2f64b67d9862b9695902ad5281e92ee","first_seen":"2026-01-11T05:40:38.23138Z","last_seen":"2026-08-16T02:50:59.237935Z","times_seen":6,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":15,"connect":7,"send":0,"wait":14,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"r0.image2url.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"r0.image2url.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"warrantytrustwallet.com/api/site-mode","fqdn":"warrantytrustwallet.com","domain":"warrantytrustwallet.com","tld":"com"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://warrantytrustwallet.com/","date":"2026-08-16T02:50:34.181Z","timestamp":1786848634181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"warrantytrustwallet.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 11:00:27 GMT","end":"Wed, 04 Nov 2026 11:00:26 GMT"},"fingerprint":{"sha1":"4C:49:D5:2F:F3:F7:5C:DF:1E:39:A8:2D:21:C6:D7:1C:49:B9:FE:20","sha256":"CA:68:A6:70:BE:EA:E0:B2:44:FE:67:51:84:86:4F:01:14:46:C9:08:AA:F4:42:87:55:BA:20:94:38:00:83:91"}}},"request":{"raw":"GET /api/site-mode HTTP/1.1\r\nHost: warrantytrustwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://warrantytrustwallet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpoBMDAxNTQ4ZjcyOTM4MWQyYmFkZmM3MTdhZWU3ZDNjMWU3ZDMzN2ZlNzNkZjExZmNiNGYzM2E3OTJkZjllZmEzMzg2ZDA1YjhiM2RlZjdkNWZiOWQ5MGRhZGU4ZmQ1MmE4MGI1YzRmMThjNDc1MjRkNjEyNTg3NTg4MjAyMTM0MTk0OWUyN2Y1YjIxZWE4NWRmOTRjZGZlZTRlYhDkqenDgDQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store\r\ncontent-length: 15\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 16 Aug 2026 02:50:34 GMT\r\netag: W/\"f-PLSDGQVhVY/EeYF4SEe4NOECQrU\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 442f89890ff7fcd63e8b5b757a7aa964;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]}],"data":{"size":15,"size_decoded":447,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"facb578145ed8af5f73694f57b55eaa3","sha1":"3cb483190561558fc47981784847b834e10242b5","sha256":"a08d0e2ee4b82ee179ccfb842991fdb5cb1b337756f1f3c699d4c5926e5b16c3","sha512":"5993c192071e42430c6688b3e8e16bcb819f85436d83f934269bcbaa293074ce241a3f9d45f2e08e92d1b8c8c9c13cbe696c75df3253ead03abc251feaa3f95e","ssdeep":"","tlshash":"ee600030c03f0c000c00ff00030c30000030000030c00030300c0330000cc000300030","first_seen":"2025-06-27T10:45:06.156947Z","last_seen":"2026-08-16T02:50:59.229985Z","times_seen":21,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"warrantytrustwallet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"warrantytrustwallet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}