{"report_id":"adaaa186-ea44-4d76-9b46-80ebddeec5b9","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-07-13T12:26:01Z","url":{"schema":"http","addr":"bve-jkivf.wasmer.app","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"144.76.124.123","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"title":"Navy Federal Credit Union - Our Members are the Mission®","dom":{"size":5126333,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"764d315c3f5d8bfba1a1b5638c07eeb0","sha1":"b5ccd7b8c9a25371781ad2a64325dffa04059fb3","sha256":"5b8c6fc2947aa5fc73570b16b4d5b73ada7ed259fc50e38dd192652c8ebef9c8","sha512":"2f798ba3fd3dcc5fc7eb727d73361ed7280123e02e2e3bf603a3c344354b3288dd5cf1e532bd9845ca78f99bd70fed31a164983be942b2cec6ca5cbf10a0446f","ssdeep":"12288:L0SZthg6wLMLHej3ez2b27iPQ23CtDoW8jqCyYdTUD4W8jbiia:PZng7w+j8OR/jqHil/jWia","tlshash":"3336443fa203ec3d7a6398fff9ac2ed14451de4beccd9683015c845d2bd28aa7518586","dom_hash":"domhashdf68f7b9fb4ee95955b99f5855dd19c3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bve-jkivf.wasmer.app","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"144.76.124.123","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T12:26:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"bve-jkivf.wasmer.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-12T22:42:14.264548Z","alert_count":0,"request_count":1,"received_data":31946,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"l2.io","ip":{"addr":"195.80.159.133","port":443,"asn":29152,"as":"Decknet SARL","country":"France","country_code":"FR"},"domain_registered":"2012-05-12","domain_rank":151857,"first_seen":"2015-06-25T01:31:26Z","last_seen":"2026-07-08T13:15:04.296769Z","alert_count":0,"request_count":1,"received_data":193,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]},{"fqdn":"digitalapps.navyfederal.org","ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1997-03-24","domain_rank":93913,"first_seen":"2020-08-13T16:50:55Z","last_seen":"2026-07-10T12:25:53.201773Z","alert_count":0,"request_count":4,"received_data":4965,"sent_data":2343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]},{"fqdn":"bve-jkivf.wasmer.app","ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"domain_registered":"2018-10-16","domain_rank":0,"first_seen":"2026-07-13T12:26:02.845682Z","last_seen":"2026-07-13T12:26:02.845682Z","alert_count":10,"request_count":3,"received_data":3783046,"sent_data":1494,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"244ea9146d56035a7604d557a4a54bff","sha1":"7268f01de6fc7f1ec8601c10f6ea60f6a1adedbd","sha256":"1cf27368fc648619c16aa3819fe180ab1602f4439ebb98d4e13fc046796de5d1","sha512":"eaa8b682cdf18cc3f98cc49a7744407800bf11e60735f64b83c5c5f05b9ec7af184d053e65e4d4f4e37002368df03a4583fae8bf0e5c81b05aa97ac60b50b201","size":1039,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"ef5724b5e22b778b3a9aa6e048b1268a","sha1":"ba00386e0ba91dade558316e37b585ae35616a81","sha256":"3d396ee7989908ac8c6983e4be708b9bff0932296b23a49b62ce78d5e2435f3e","sha512":"fb3818cb6181e40a7f643a5ef850f3e2ca84a906207949457faa5e396fdb69852241e2a1efc9a51be1a5acb5efe2df2a07e32209cf40f783ce6439f76cb849db","size":1433,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"4b43c038d1fa201e3fa3be1694c1ed91","sha1":"0599453d79e7c4347e7833fa3b5e40ff569633c5","sha256":"c8e8995effa2ec419912971a79cdacf4d189a7718b171538e7b083909c1bc857","sha512":"b0ca5972f7a467c8c098ec6bed7571e83b73b3bfd575b8b7b11f8068d6915e11921bf5f861238c0cdd65a07aeb6f672d205a5865487cbba804b1e4c18a551456","size":1572,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"37b20a3fcf9032b3576baea812996b46","sha1":"c1a5275243720033e250b2aa0b146106e05521ef","sha256":"86e1c6b30523c768957c3f614391e5c2b760a678cbfb68c6c72691124b4941f4","sha512":"e79a36920ad4db365bcc09777a56f19823af7f79ae88112330923007feb782025bf2da588eb17648ad816838b6d27b943ff91f43ca75a41ac84342a3b09d1b64","size":1816,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"fafa04bd713bad0ee61cd2c2e95b4bdf","sha1":"8189c70bc5f0f9f532a6d4be1ea5566b193a11be","sha256":"c27bbfe876e231a62d8640f7eaf6ca7b79955922597ff92cb418a8e276aa93ec","sha512":"09c14a438c7e74b22d8b1b5d8aeb6a7963b2c3b1c308ded5fbbc61c1f10e0aa8f34453ffb696782faaffda1d7e9059897e42da8db7e6cd25a4217fa7622cc284","size":2080,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"f292d8b74d5c2b93a81a50fbfe05b06d","sha1":"7a098871fef3a005ff4b641dc4790254313acc36","sha256":"560aa94a54eb81b53ddc28a1dd4eab34d56e44386803287c6c22fede81ba56d3","sha512":"eae1676dd77a89a12ee0f79eda6db73a089cea536517720d30571275f0e0d962ebab4b864fec13d43e4156e2569bbe58527a2415d7f07e11e458e2bcc25f6158","size":2243,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"761ae1ee56b08194848e71b638eff961","sha1":"3abdaf1182bb9c33f8d1776af839953be99f6f71","sha256":"59f2b77b8ab000a5aa41b1c8f0dff5354df7553588a51ac39ef57c6cdb81dbbb","sha512":"fc9790fa391d0f08636ad09b7ab173a655e35282c9155dbc5a91eb62e88453b675a656d986ab59108174741a0c4ef3c6a2284fb315a6fb49f0993851193301d0","size":1300,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"md5":"500a70e2981e7bf0cbdcd96524832011","sha1":"362f26152c4ade45a61007c4b3e296d38d096962","sha256":"d061e40a0b4bd2aa778d621928c705ad1e1c90bbd4b14d411ceb4fe71e4d5297","sha512":"9da890d448c43a0b24ff392f5b6378c6a29cc6fd7b7cd1fae4d4e7b76c2a942ad7145886ba209af48d6c97f7b8ec9c5473566db08b212574a54d1be000cb61d5","size":2406,"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","is_revoked":false,"bot":{"token":"7881224316:AAE4dI93gOVHqDk7eAdmSufp1JLNPLPZBHQ","user_id":"7881224316","username":"HSHYT_bot","first_name":"HSHYT","last_name":"","chat":{"chat_id":"8380584743","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32740b119783fee71ee767cd4cfbb312","sha1":"7b06d9e9845b30085db3a810171d52e3fca3fafc","sha256":"94f71ba017a2e490591b1d61eba5aea13645da9ac6ad383f1f985e529d7835a9","sha512":"082ff41afae2e9cfa42c770aaccbc0010963327433276b65e7bb49833b12015f7eb8563a913706290a1dadc0479eddfbfa355b9729aa50067a82ff1bd148d8d1","ssdeep":"","tlshash":"b0a0223bf3c032320cba02b2a020838c2e003030c80228c3382c80208000fc28e22000","size":76,"data":"","first_seen":"2023-04-14T06:56:18Z","last_seen":"2026-07-14T12:22:11.055943Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"244ea9146d56035a7604d557a4a54bff","sha1":"7268f01de6fc7f1ec8601c10f6ea60f6a1adedbd","sha256":"1cf27368fc648619c16aa3819fe180ab1602f4439ebb98d4e13fc046796de5d1","sha512":"eaa8b682cdf18cc3f98cc49a7744407800bf11e60735f64b83c5c5f05b9ec7af184d053e65e4d4f4e37002368df03a4583fae8bf0e5c81b05aa97ac60b50b201","ssdeep":"","tlshash":"49110ea3c6218c7143b341f65bb4938419b8505ef906e002b97ccae02ea2fb1366264f","size":1039,"data":"","first_seen":"2026-07-13T12:26:20.071601Z","last_seen":"2026-07-13T12:26:26.316455Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef5724b5e22b778b3a9aa6e048b1268a","sha1":"ba00386e0ba91dade558316e37b585ae35616a81","sha256":"3d396ee7989908ac8c6983e4be708b9bff0932296b23a49b62ce78d5e2435f3e","sha512":"fb3818cb6181e40a7f643a5ef850f3e2ca84a906207949457faa5e396fdb69852241e2a1efc9a51be1a5acb5efe2df2a07e32209cf40f783ce6439f76cb849db","ssdeep":"","tlshash":"f621fca6d9319c70437345fa4ab493c415b8909ae507e042f57c8ad86ea2f71362294f","size":1433,"data":"","first_seen":"2026-07-13T12:26:20.073853Z","last_seen":"2026-07-13T12:26:26.31285Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b43c038d1fa201e3fa3be1694c1ed91","sha1":"0599453d79e7c4347e7833fa3b5e40ff569633c5","sha256":"c8e8995effa2ec419912971a79cdacf4d189a7718b171538e7b083909c1bc857","sha512":"b0ca5972f7a467c8c098ec6bed7571e83b73b3bfd575b8b7b11f8068d6915e11921bf5f861238c0cdd65a07aeb6f672d205a5865487cbba804b1e4c18a551456","ssdeep":"","tlshash":"91311da7d9319c30433345fa4eb493c415b8809ee507e042f57c8ad86eb6f60376594f","size":1572,"data":"","first_seen":"2026-07-13T12:26:20.075954Z","last_seen":"2026-07-13T12:26:26.313797Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b20a3fcf9032b3576baea812996b46","sha1":"c1a5275243720033e250b2aa0b146106e05521ef","sha256":"86e1c6b30523c768957c3f614391e5c2b760a678cbfb68c6c72691124b4941f4","sha512":"e79a36920ad4db365bcc09777a56f19823af7f79ae88112330923007feb782025bf2da588eb17648ad816838b6d27b943ff91f43ca75a41ac84342a3b09d1b64","ssdeep":"","tlshash":"1431dca2d9219c70433349f65bb093c429b4809ee507e082f57c9a9c7ab2f62376194f","size":1816,"data":"","first_seen":"2026-07-13T12:26:20.078116Z","last_seen":"2026-07-13T12:26:26.317106Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fafa04bd713bad0ee61cd2c2e95b4bdf","sha1":"8189c70bc5f0f9f532a6d4be1ea5566b193a11be","sha256":"c27bbfe876e231a62d8640f7eaf6ca7b79955922597ff92cb418a8e276aa93ec","sha512":"09c14a438c7e74b22d8b1b5d8aeb6a7963b2c3b1c308ded5fbbc61c1f10e0aa8f34453ffb696782faaffda1d7e9059897e42da8db7e6cd25a4217fa7622cc284","ssdeep":"","tlshash":"9f41bda2d931dc74433688f61bb0a28029a4818ef907d082f57cda9c79b6f62376194f","size":2080,"data":"","first_seen":"2026-07-13T12:26:20.079922Z","last_seen":"2026-07-13T12:26:26.314504Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f292d8b74d5c2b93a81a50fbfe05b06d","sha1":"7a098871fef3a005ff4b641dc4790254313acc36","sha256":"560aa94a54eb81b53ddc28a1dd4eab34d56e44386803287c6c22fede81ba56d3","sha512":"eae1676dd77a89a12ee0f79eda6db73a089cea536517720d30571275f0e0d962ebab4b864fec13d43e4156e2569bbe58527a2415d7f07e11e458e2bcc25f6158","ssdeep":"","tlshash":"a44190a2d531dc70433649f66bb4628019a4818ee907e082f57cda9c79b6f62376194f","size":2243,"data":"","first_seen":"2026-07-13T12:26:20.081694Z","last_seen":"2026-07-13T12:26:26.317705Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cb41c6165b137eb7f1c2939b1357e8c","sha1":"5fd8ecdfefcf73857b45bd27c34712cd5146d193","sha256":"f1a9106ffb224a8ec6a32ee32120eaab00051163c8883983e6e6318275852d82","sha512":"96b43706bb77990507d3975660d22c9dd8bb7cfb8b6d8e5daa3310c442380e5dfc622ea69344a7655ea8411cd689cd7101f46ccdbf4c7ff5a03bc3d67781809b","ssdeep":"1536:/lgQ/Jxo1wNz8ikMO3cRwc4ek7HFcOxSEaiI5xddSvbAWOO+e+n6l6l66Hjp65r2:p","tlshash":"08069d7fa203ec3d7a6398fff96c2ed18051de4beccd5683018c845e6bd24aa7518586","size":3781609,"data":"","first_seen":"2026-07-13T12:26:20.084077Z","last_seen":"2026-07-13T12:26:26.32057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e794b04b4eb9697f7a761ec21a0de292","sha1":"08796798a847110b9d221358fe3d5333a8de4474","sha256":"90e1ad3d50fa06e2e1e3f6fe158c8c06b0e81e6a62e5a8ddb1c14b47b767f468","sha512":"1ce8ed8e5f279da5680721e281690e97ee651c186b730b6879c723f18feeeb8d91478604e0a845164403df9bd17014ca5bcd627de8021ba58f478172d02bfc0b","ssdeep":"768:gWUfJLQeYPdJxIPdHoHoaDjGNNBTMPz2eYCqHmY6xIGv052bCSYu9E+uLqj+Ctj5:LLb","tlshash":"e264b23cf323c44d99b35abbfcbc1a14a144aec7e9dda6c80c5d42462fe0d6a35186e5","size":328178,"data":"","first_seen":"2026-07-13T12:26:20.08694Z","last_seen":"2026-07-13T12:26:26.324086Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4808dba29c91d7fb50ad3c74f208970b","sha1":"fe2a2395fc9367b980aeb71e077fcb19d9171756","sha256":"122447db490f641aa53c32c2c8b5f1044815783f2d230f0e82fad0960b3d8275","sha512":"436076ba62140ce72899c4302abf83f47b328a651f1ca92c90933859337d4a0d4e3b5f398e5512ca9a7e7b9b8c5ea6afe78f0014b50889ad919702bd1385c34a","ssdeep":"","tlshash":"2c700008a80002002800b02000ec00ac0a022022800082c2a8f0e000208008002080c0","size":19,"data":"","first_seen":"2023-04-14T06:56:18Z","last_seen":"2026-07-14T12:22:11.089518Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"761ae1ee56b08194848e71b638eff961","sha1":"3abdaf1182bb9c33f8d1776af839953be99f6f71","sha256":"59f2b77b8ab000a5aa41b1c8f0dff5354df7553588a51ac39ef57c6cdb81dbbb","sha512":"fc9790fa391d0f08636ad09b7ab173a655e35282c9155dbc5a91eb62e88453b675a656d986ab59108174741a0c4ef3c6a2284fb315a6fb49f0993851193301d0","ssdeep":"","tlshash":"6e21e0a2ca318c70437345fa4eb093c415b8905bf507d042b57ccbd4aaa2f61362294f","size":1300,"data":"","first_seen":"2026-07-13T12:26:20.09306Z","last_seen":"2026-07-13T12:26:26.311543Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"500a70e2981e7bf0cbdcd96524832011","sha1":"362f26152c4ade45a61007c4b3e296d38d096962","sha256":"d061e40a0b4bd2aa778d621928c705ad1e1c90bbd4b14d411ceb4fe71e4d5297","sha512":"9da890d448c43a0b24ff392f5b6378c6a29cc6fd7b7cd1fae4d4e7b76c2a942ad7145886ba209af48d6c97f7b8ec9c5473566db08b212574a54d1be000cb61d5","ssdeep":"","tlshash":"ef4193a3d931dcb0433749f66b7462c015a4818fe907e082f57c9a8c79b6f623b6194f","size":2406,"data":"","first_seen":"2026-07-13T12:26:20.097461Z","last_seen":"2026-07-13T12:26:26.318519Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-13","alert":"Detects file containing Telegram Bot API","trigger":"bve-jkivf.wasmer.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15974b765a8117f4196ea5704b438839","sha1":"d7de278003a2cd2df8aa7d2d8d42016d0289e318","sha256":"f4ad28efd4479c1817faaa647151dcbcfbd3f3f6c8d978acda4a23b00c46bbcc","sha512":"0985dcba9ac5bf86d4430ec3a82dda8fc4175068e73b32ff563aabcb11cf73b695051acebf823af763a7cdedff14b71ff5c198ea60b13f065a932b927988aa04","ssdeep":"","tlshash":"17f05e9bf39a112012afa17a08b5cb8a3034800bcd0019497e2c04b06b36ea1aa5a784","size":654,"data":"","first_seen":"2026-06-09T12:27:31.382703Z","last_seen":"2026-07-13T12:26:26.319211Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l2.io/ip.js?var=userip","fqdn":"l2.io","domain":"l2.io","tld":"io"},"ip":{"addr":"195.80.159.133","port":443,"asn":29152,"as":"Decknet SARL","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca994d64b7be9a9f915f9d59cae2dd20","sha1":"aa6f8731897ff69250631f958b9b6f06466d00d8","sha256":"fa40120b181878677d7f0ed99dda534f6fbf729b64ade0fce89c692223e9b38e","sha512":"f9725132be4588f0180370760fcd18fcdafa16d309f61c8b5ce60de4a76c8b6f743696593dfc200c7b2b49a994f8fae7faaba8726c574c1ca073dd7877d10498","ssdeep":"","tlshash":"078000e220300b0008c8830280a800a08c82228220c3ae8283cca3320c00aa0a2a0030","size":26,"data":"","first_seen":"2026-06-08T10:20:42.578788Z","last_seen":"2026-07-14T12:22:11.039098Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"l2.io/ip.js?var=userip","fqdn":"l2.io","domain":"l2.io","tld":"io"},"ip":{"addr":"195.80.159.133","port":443,"asn":29152,"as":"Decknet SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.732Z","timestamp":1783945530732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l2.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:48:27 GMT","end":"Fri, 25 Sep 2026 03:48:26 GMT"},"fingerprint":{"sha1":"0E:79:63:B5:DE:E4:86:9F:56:20:8D:85:A5:F1:88:0F:5C:C7:40:61","sha256":"75:5C:83:EB:8B:89:23:A9:A2:8B:C9:22:5E:63:21:20:7A:34:44:B7:75:4E:36:57:ED:E6:01:DE:7F:2A:4A:6F"}}},"request":{"raw":"GET /ip.js?var=userip HTTP/1.1\r\nHost: l2.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 13 Jul 2026 12:25:30 GMT\r\nServer: Apache/2.4.65 (Debian)\r\nContent-Length: 26\r\nConnection: close\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":26,"size_decoded":193,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ca994d64b7be9a9f915f9d59cae2dd20","sha1":"aa6f8731897ff69250631f958b9b6f06466d00d8","sha256":"fa40120b181878677d7f0ed99dda534f6fbf729b64ade0fce89c692223e9b38e","sha512":"f9725132be4588f0180370760fcd18fcdafa16d309f61c8b5ce60de4a76c8b6f743696593dfc200c7b2b49a994f8fae7faaba8726c574c1ca073dd7877d10498","ssdeep":"","tlshash":"078000e220300b0008c8830280a800a08c82228220c3ae8283cca3320c00aa0a2a0030","first_seen":"2026-06-08T10:20:42.578788Z","last_seen":"2026-07-14T12:22:11.039098Z","times_seen":71,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":25,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"digitalapps.navyfederal.org/signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg","fqdn":"digitalapps.navyfederal.org","domain":"navyfederal.org","tld":"org"},"ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.737Z","timestamp":1783945530737,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /signin/static/media/img-BecomeAMember.64255d0d02ef64234628.jpg HTTP/1.1\r\nHost: digitalapps.navyfederal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 54\r\nx-edgeconnect-midmile-rtt: 76\r\nx-edgeconnect-origin-mex-latency: 20\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Jul 2026 12:25:31 GMT\r\ndate: Mon, 13 Jul 2026 12:25:31 GMT\r\nset-cookie: ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/\nakaalb_Digital_ALB=~op=~rv=74~m=~os=~id=c8f41b0cd1d6ae158c0faea573796e14; path=/; Secure; SameSite=None\nak_bmsc=3991986A978EEE19B283A0B5F98321D1~000000000000000000000000000000~YAAQJ08kF3tt2UefAQAA349wWwC4aPvUEl476may8/b3zSSWVXnZ9LL51fjs+5nWK2yTzmSLKHvFPbtgPRbNTdyCeGoIO453MweuN6yaFEE39aVpSOEAUvHtvgfpt7oh+Lk7DGonFAFZ8lZdSN7TWugyR4HSbqvgUiqtHFrK4A6D84wVBP79mpdTH3UzotBHkzTtHQNWEV9Oz/TMPRy69LJ5ptXgZUmwIm21iwGjZKVIHEyItaK02+8PdqPaPX+DQbRZdiQwRtRmUFtplyYk5cPiuKBU1wthBlR4o0YCt6cM+GTpwShlGeHC3C690LoPJ0JU1fSHbsa+N2ADgcge90BTMqScNWMFCZM/0w8Pvbsj2i2K5TtTzh4P9PHilvsAHhg0NWx4CND2tx/KjOv9Bw4=; Domain=.navyfederal.org; Path=/; Expires=Mon, 13 Jul 2026 14:25:31 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"digitalapps.navyfederal.org/signin/static/media/bubbles.9f2a1919448e1d79ac6b.svg","fqdn":"digitalapps.navyfederal.org","domain":"navyfederal.org","tld":"org"},"ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.795Z","timestamp":1783945530795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"digitalapps.navyfederal.org","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:BE:E4:91:4D:E9:18:1E:57:1D:DC:46:05:BE:25:6B:37:B6:18:FC","sha256":"57:78:C2:89:73:4C:23:52:DB:27:90:88:63:E7:5C:40:E0:27:C2:56:51:43:BF:D8:6A:C4:86:97:8A:B2:BC:65"}}},"request":{"raw":"GET /signin/static/media/bubbles.9f2a1919448e1d79ac6b.svg HTTP/1.1\r\nHost: digitalapps.navyfederal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 54\r\nx-edgeconnect-midmile-rtt: 76\r\nx-edgeconnect-origin-mex-latency: 186\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Jul 2026 12:25:31 GMT\r\ndate: Mon, 13 Jul 2026 12:25:31 GMT\r\nset-cookie: ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/\nakaalb_Digital_ALB=~op=~rv=40~m=~os=~id=757ecc1968844bece4768b9fde7847e6; path=/; Secure; SameSite=None\nak_bmsc=54A6DAEE5BB7A75F9DC01B4018A92F3E~000000000000000000000000000000~YAAQJ08kF4Bt2UefAQAAlpBwWwAh+33dCi6yaeE/VMthsEOxNKLj6W3Go1dgo1FPdazDPgsGViwYV3kMguIJECJz9RkkxSa9Bov1HKjGoOnvHQNBdJMp+dF6QW2MyuKR74FEfC9JIMZtp8xNMS8Cp7esw7RFBRzEQj+Zysh1qgB2WmNqQrcs6s5w6ZMKzE4dAB/zYOv8NqYAKosZSTnaPtY40YflFu5TOFRXPH15PtAMrppP/ioQA62wgAsfd7fFWynu94DMW5sDi7DBrEisSADJ231099fObhCVGlm+7eE1n0y0DOfgX447IfSHu4l7UYWiVoGr7HmzIMEulgoLedot1rZ41c6Iq0+so7i8GSxnp7TGpAx0izpGTS9OwTMqy/NhkM0N4k1NQyQ2neolKWY=; Domain=.navyfederal.org; Path=/; Expires=Mon, 13 Jul 2026 14:25:31 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"digitalapps.navyfederal.org/signin/favicon-16x16.png","fqdn":"digitalapps.navyfederal.org","domain":"navyfederal.org","tld":"org"},"ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:31.107Z","timestamp":1783945531107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"digitalapps.navyfederal.org","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:BE:E4:91:4D:E9:18:1E:57:1D:DC:46:05:BE:25:6B:37:B6:18:FC","sha256":"57:78:C2:89:73:4C:23:52:DB:27:90:88:63:E7:5C:40:E0:27:C2:56:51:43:BF:D8:6A:C4:86:97:8A:B2:BC:65"}}},"request":{"raw":"GET /signin/favicon-16x16.png HTTP/1.1\r\nHost: digitalapps.navyfederal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 54\r\nx-edgeconnect-midmile-rtt: 76\r\nx-edgeconnect-origin-mex-latency: 17\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Jul 2026 12:25:31 GMT\r\ndate: Mon, 13 Jul 2026 12:25:31 GMT\r\nset-cookie: ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/\nakaalb_Digital_ALB=~op=~rv=36~m=~os=~id=0502eab1e04b5e3ad30b0eefa3d2b5a1; path=/; Secure; SameSite=None\nak_bmsc=E2B9E174B876A19BBA8438A32F5E4EEA~000000000000000000000000000000~YAAQJ08kF35t2UefAQAAJJBwWwDXoqIzDYCxF8DySUCTQJz2WdXHaw8O6/22JR2MsWy/tS+SirTrOYbw+YtAwcYlo3tEqCMbaHa4Y7edWAFgr53HTAXjjupx11D6Vz/7RO9zFaKHXZV0DCuWbOql6xuLBfHlJDaPu7DDLx6OMXqSY1mvqg05Wg/im22Uk/xwxQi5lgLtEPAJmzojAIYIL04/6o7Dj93pNj0hkQt2f9Akji598uRJIJFkRk4A2MMrv5hRDMS+oeAv7ifSmkssh2NBez9VQlzSZsOhwe0/ryVoqqx+Rqln/FGjz3hGgV+WmKkQFkMYXN5Vx0D19UTV/D2oYcQ+0THf3GNZ3ZibpyiKVVc+8fTalMW/oVkP5zXm5ql5XcDp2r5lkIo43AtZFX0=; Domain=.navyfederal.org; Path=/; Expires=Mon, 13 Jul 2026 14:25:31 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T12:25:28.285Z","timestamp":1783945528285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wasmer.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 14:06:07 GMT","end":"Sun, 13 Sep 2026 14:06:06 GMT"},"fingerprint":{"sha1":"8B:BD:8F:CC:1E:76:7E:9C:C5:BC:79:F4:B6:04:88:E6:13:B8:A4:F6","sha256":"70:74:22:12:F4:2B:37:8A:77:CB:11:E7:BD:AE:E7:46:7D:FF:8B:F3:89:15:EA:70:46:E7:24:1C:7C:4F:3B:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bve-jkivf.wasmer.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 12:25:28 GMT\r\nx-edge-region: us-hillsboro\r\nx-powered-by: PHP/8.3.21\r\ncontent-type: text/html; charset=UTF-8\r\nx-edge-app-version-id: dav_nzrI7tau48bG\r\nx-wasmer-request-id: 35854ddd-bfe1-4eee-be23-dfd8ae61eaaf\r\nx-edge-rty: w\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3781647,"size_decoded":3781929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"f4da14999ac202f0ae76f7d4d5b853e8","sha1":"ec208d5740e771cd9676d7a50c7122c584b08cc3","sha256":"d3d66db39a430df1bf018fc6d15d64d48fe1ea8a1ebddee9a3c538875294c2bf","sha512":"b86f3de04b6e0cb0a2916cca21c7507156d3adf9269f7dc5f47c2f37d7e1831a0fec88e9cd73f4e83f93adb409aa25ad0d956c06356de34311cf95ae5d11be65","ssdeep":"1536:GlgQ/Jxo1wNz8ikMO3cRwc4ek7HFcOxSEaiI5xddSvbAWOO+e+n6l6l66Hjp65rR:T","tlshash":"c025657e6200ec4d6d2399bffdac3ee09064de5fedc9ab840059841fafd18a975085c6","first_seen":"2026-05-24T12:27:22.043124Z","last_seen":"2026-07-13T12:26:26.304576Z","times_seen":31,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":40,"connect":168,"send":0,"wait":167,"receive":0,"ssl":340},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"bve-jkivf.wasmer.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.712Z","timestamp":1783945530712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 12:25:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 850\r\nexpires: Sat, 03 Jul 2027 12:25:30 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5%2BTkWZEOo9xeOTuca0fdY%2B7VlDhjSpTLyn%2F2LSeFxolgau5vtl68dZfdwhp0xiM4ByKuFujeKPfHbXb55Z3w4fQatCTby09svqUAYeEIu7wtTCyADKL5rZxbiSt2xwfUCM97V7f\"}]}\r\ncf-ray: a1a8454f0956783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":6577,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-17T05:30:46.131239Z","times_seen":298416,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":7,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/navy_files/saved_resource.html","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.727Z","timestamp":1783945530727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wasmer.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 14:06:07 GMT","end":"Sun, 13 Sep 2026 14:06:06 GMT"},"fingerprint":{"sha1":"8B:BD:8F:CC:1E:76:7E:9C:C5:BC:79:F4:B6:04:88:E6:13:B8:A4:F6","sha256":"70:74:22:12:F4:2B:37:8A:77:CB:11:E7:BD:AE:E7:46:7D:FF:8B:F3:89:15:EA:70:46:E7:24:1C:7C:4F:3B:4D"}}},"request":{"raw":"GET /navy_files/saved_resource.html HTTP/1.1\r\nHost: bve-jkivf.wasmer.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 13 Jul 2026 12:25:30 GMT\r\nx-edge-app-version-id: dav_nzrI7tau48bG\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 563\r\nx-wasmer-request-id: 0bfef410-6b52-4768-b033-63f84d455652\r\nx-edge-rty: w\r\nx-edge-region: us-hillsboro\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":563,"size_decoded":840,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6fb93d93e03f47ab0462de916115ea4c","sha1":"455c85d6a73fc28069a6b57eb89c7b1118b6170c","sha256":"424f19fb6203f21d253ea011890be5fd70e4193d88f26cc6aa65bd6f323d1512","sha512":"d1f48099c8e60d649785f30d9d9faf448b5196bdaef6fb7291e573278393758c111010349c666da96bc2547658160973ac2746139939e84ecd98505d01494acf","ssdeep":"","tlshash":"d9f0eb1bc3a2210ef079a4e42dc36350731e0262f4204f38bc562e38e05c8b4287bbcd","first_seen":"2026-04-03T00:11:13.691079Z","last_seen":"2026-07-14T12:22:11.042326Z","times_seen":158,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"bve-jkivf.wasmer.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bve-jkivf.wasmer.app/.11ty/reload-client.js","fqdn":"bve-jkivf.wasmer.app","domain":"bve-jkivf.wasmer.app","tld":"wasmer.app"},"ip":{"addr":"5.78.31.66","port":443,"asn":212317,"as":"Hetzner Online GmbH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:30.729Z","timestamp":1783945530729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wasmer.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 14:06:07 GMT","end":"Sun, 13 Sep 2026 14:06:06 GMT"},"fingerprint":{"sha1":"8B:BD:8F:CC:1E:76:7E:9C:C5:BC:79:F4:B6:04:88:E6:13:B8:A4:F6","sha256":"70:74:22:12:F4:2B:37:8A:77:CB:11:E7:BD:AE:E7:46:7D:FF:8B:F3:89:15:EA:70:46:E7:24:1C:7C:4F:3B:4D"}}},"request":{"raw":"GET /.11ty/reload-client.js HTTP/1.1\r\nHost: bve-jkivf.wasmer.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 13 Jul 2026 12:25:30 GMT\r\nx-edge-app-version-id: dav_nzrI7tau48bG\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 555\r\nx-wasmer-request-id: a885c370-3bea-4034-9442-8cda62f818f9\r\nx-edge-rty: w\r\nx-edge-region: us-hillsboro\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-13","alert":"Phishing Block","trigger":"bve-jkivf.wasmer.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"bve-jkivf.wasmer.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"digitalapps.navyfederal.org/signin/apple-touch-icon.png","fqdn":"digitalapps.navyfederal.org","domain":"navyfederal.org","tld":"org"},"ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bve-jkivf.wasmer.app/","date":"2026-07-13T12:25:31.105Z","timestamp":1783945531105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"digitalapps.navyfederal.org","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:BE:E4:91:4D:E9:18:1E:57:1D:DC:46:05:BE:25:6B:37:B6:18:FC","sha256":"57:78:C2:89:73:4C:23:52:DB:27:90:88:63:E7:5C:40:E0:27:C2:56:51:43:BF:D8:6A:C4:86:97:8A:B2:BC:65"}}},"request":{"raw":"GET /signin/apple-touch-icon.png HTTP/1.1\r\nHost: digitalapps.navyfederal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bve-jkivf.wasmer.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 54\r\nx-edgeconnect-midmile-rtt: 76\r\nx-edgeconnect-origin-mex-latency: 87\r\ncache-control: max-age=86400\r\nexpires: Tue, 14 Jul 2026 12:25:31 GMT\r\ndate: Mon, 13 Jul 2026 12:25:31 GMT\r\nset-cookie: ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/\nakaalb_Digital_ALB=~op=~rv=64~m=~os=~id=ccd56d3764f9a7837fbf0aa4cf303227; path=/; Secure; SameSite=None\nak_bmsc=DDE116A78FADDDEED3A20DEB0F58291A~000000000000000000000000000000~YAAQJ08kF39t2UefAQAAc5BwWwBtQwzz3fGJ45xAcRUekk7dqq9JdYWwXaq7PDwAxR5P8xKfxLg+Zy2T6JB7cRt8xGCPrdrYVKeNXfAI99aYIfre7yVhFHGbIqjhRMr0Y07sbEZXZF6XQgfqZrw9l9hT1yQV6S+QJvEJePkOCLxURVVaPJKyumeeX6R/tgrVgHprc0yIbSXHUpUmAmgulanJMglgezlstweeGZlt8ghkz4H7FRF692IS9RqaPzwQcKEEAIoQArKKIxbvg3J1JJzEufoP5xRn//GhiMFyzjVyDWCiYEig11fmon9tRcdeYsdvQol+dr/JI3JPHQ1HiMUMUIJn8xjMQYm/s03dNVngEwp1tkrIMeopHsvszdFIECtxO9VpJ72Dbh9XISHx1EM=; Domain=.navyfederal.org; Path=/; Expires=Mon, 13 Jul 2026 14:25:31 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}