{"report_id":"b491f50d-e056-467e-8adf-2c8d6a861fda","version":0,"status":"done","tags":[],"date":"2026-09-05T19:09:12Z","url":{"schema":"http","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"title":"Complete the Pattern (blank)..","dom":{"size":48669,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2584)","md5":"c1fc10ce127628ad63ea79a7f77410df","sha1":"fe5a1c21e8d7a7ffb3d69b47ee42e3400ce7b218","sha256":"81fb4d52af3547a25d201c16196f85dc704a205965bd33eb8517a73cc7067109","sha512":"c491b42d83cfceffa0ca1e070bdcc359efa9a64e45aed14297c2119986aaa5dfb3c1d123279127c045a7d6a2417064f0ee0f7598da9700a1e54ff5d080c75fad","ssdeep":"768:ZmDekv+vIs61XITT9iDiniRotQj/7deyVPq/X6tbGUFMJ1J2xF6MsydWwnw2x6qe:Mjs61XITxio8/0khbGUFMJ1J2xIbykiY","tlshash":"6923d7b0eb8c1027403250407975d7de366e853b9b030da6fdaea1a4fbc9dbc193a16d","dom_hash":"domhash9f56d59d04d73453426baa1f7cd102de","first_seen":"2026-09-05T19:09:14.230377Z","last_seen":"2026-09-05T19:09:14.230377Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T19:09:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bearmobiles.com","ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-10-14","domain_rank":0,"first_seen":"2016-10-15T12:15:21Z","last_seen":"2026-03-24T14:28:29.506563Z","alert_count":36,"request_count":12,"received_data":205942,"sent_data":6216,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-08-31T08:43:22.767816Z","alert_count":0,"request_count":1,"received_data":95824,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":1458,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":24393,"sent_data":547,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94840,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-09-06T00:21:50.146922Z","times_seen":24976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/js/patternLock.js","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b97bd41de5d4a82c387dceaf9cb161e","sha1":"120d91046a1b4550574678b88bd037838eeb3086","sha256":"668b980ae577f4dd90d4a045e6d724104544788d725aa0397f84de9e7851c0b2","sha512":"b76b43b4aa8b8edc86bce714c93376fcd59ee616d21bd90584178297db2b2efec4d118ce3a9c56765ab9fd642b6bc012b12fb7f3bbfcde491f557ad872776a26","ssdeep":"192:cVB7bm30UrSv0ZCUNinymgwfqiCCP8pj3y7JPn0nilu:cDfyTpWPY3z","tlshash":"95626308a5731c94e067b29c5bef6808a23095039d0fe907be5d43d49f8966ca7f27de","size":14744,"data":"","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-09-05T19:09:14.237665Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/jquery.tipsy.js","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58773d323f2565e7414e38b4344d07c1","sha1":"ba80e60b8661204dc4351b0a746500a0919643a9","sha256":"6963301ce1c551417dbb540bbc5c41c2f70aae91731775ad4bd625d9a93224a3","sha512":"f315c412a4208b2102d70890c338183e3fffb38d6e141e9b3eb134b40f56ebffa5359f51efaf87c7fc9a7995f61cda7f84ba387e6045ddbd98875f56bb64b996","ssdeep":"192:0iM4pa7W7FuSBWCe4SByTdPd588KtnCnUaCOx15eB0p9W:0WpHlxfnWOWz","tlshash":"3fe1ca6a66e332119563b1fa8f4f412d3130d61b1a4adc24386c47c19fe1534eaf7fa8","size":7388,"data":"","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-09-05T23:28:31.578639Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/common/preload.php?a=1\u0026t=1788635323\u0026lkt=3\u0026r=1\u0026dat=6a6a6b6d6b414141416e6f70416a6d706d706b4169686e416b6a416a696d6d416f706c411f41412632322e72676720231f302b2d20272a233166212d2b676a6d6f71686d416a6868","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bbdc8fad79b1c9b6e11924d08a2d221","sha1":"dfce7444e30863b5374ceb5b824649bc580a6307","sha256":"c231dc20f1172e363cdeb940b5e8984d90f62a79ceec85894ec6ae47e718ca65","sha512":"397881869f7e24fa6aa5c5b0807ee99697923cee6b62145c0de6e059970135f6cd33b22d3c496e449387fa08b419e29814114914f01af04a4ad7fd4ee55ceacb","ssdeep":"","tlshash":"64119ed5a7f95c3eb140fae19d3e07896e30172b4280d5a3b90cc16b91a07a9562b22a","size":934,"data":"","first_seen":"2026-09-05T19:09:14.238526Z","last_seen":"2026-09-05T19:09:14.238526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"a4ecbfad9284b0f55451c80359176c75","sha1":"5504b09045553d75b6f3e60276d1cc231697fcdb","sha256":"b0d266ddff368dfa5501d9122f383a9d5d4443ab9f4376d54db218fa8d92858e","sha512":"f8ef228937454982b07b5683621bf1dcce57479ca23d2b08efb50f8344c258b8ebab92b48c6065b5dccfe779fe5023bdf1ccec0dfa32d5a2459db25d8cdaf063","ssdeep":"","tlshash":"a9010082e080c832080a003a0082000000230000c008a03028000000000028008b8200","size":849,"data":"","first_seen":"2023-04-12T02:00:10Z","last_seen":"2026-09-05T19:09:14.243285Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"050412b06bd8bdfd5f75b930497c041d","sha1":"5919aac5839a14d9e3255a9bda2e098881146a14","sha256":"7adc6ca2ac35c3534d2be5e2c6e64748bf57d80b17641dcf41e37242f7894f8f","sha512":"88653fb88aa7a4b129d8430fd6c42fa120326d4f1eb0e9b32056a170c2f2a35f818bc91810ea108e2d91c27a91ef9bd60c02f46c59461b76611021411088c40a","ssdeep":"","tlshash":"c96000c0c3003f000003003c00000000030000c00030003c000033c00f000000300000","size":13,"data":"","first_seen":"2023-04-11T23:40:52Z","last_seen":"2026-09-05T19:09:14.243869Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bearmobiles.com/common/loader.gif","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.104Z","timestamp":1788635323104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /common/loader.gif HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Aug 2021 23:31:42 GMT\r\netag: \"2d3-5ca426b653380\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKpHUK9fjfBm5Z0QQ6%2BDHTMFtD1UcztynF58leKtBgrhp0GTV1AQIBuxKII%2B08o6u7Z01xWUF1QsuAxYBGlvLzBwPSdl%2Bq7LoYzMjVha%2BetAQ48n2NSsPd7ryH5%2ByCx76FE%3D\"}]}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36786316edd5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 723\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":1459,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 11","md5":"11901e938cbec2f206b8ea93e2107195","sha1":"615fa40a88c6abcca0f7b3523b3d16f301631e41","sha256":"e7a6d3a1d2b1703af26b81a9319bd7e5aaef5459600799322fae93ad515fc490","sha512":"f1f8844c1feccb5cb5e7e324748a75d2c66c0b49747cc274107f01234710fbeadd105191f0619e8698234bf5bd9a1c3cd07462a8e08408ab3cf515f6e56c1e9b","ssdeep":"","tlshash":"49019e17d50fc7b2dcb470b4d93c4b0d7eb1226157ac9b90483858b99c070674419bcb","first_seen":"2023-05-02T13:47:27Z","last_seen":"2026-09-05T23:28:31.577504Z","times_seen":390,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T19:08:42.388Z","timestamp":1788635322388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:42 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MCBHUBwLwSVLroRdRb8B3Ua40RfFfni3MVRxWqsMTKXjd8rMaiXBz%2Bn5FBiaprKbCDh4Lfnfy3neAdP1gY%2FZeMJpxzqw8y%2BS4fvHinwgUuLshR5%2FgkvIlNzUUFsPRW4EeU%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a367862d1e0a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":43420,"size_decoded":12256,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1101), with CRLF, LF line terminators","md5":"706790ffd09b2866a5e5c7bf18823ed0","sha1":"5bc845c470750c9bd8b1d92e290aa1dd44c69434","sha256":"2fe1de5047021168068299be26a93b2236ba2552da44f05b4fec33642ba0c456","sha512":"c1360f8f9169ebc9a237ffdbe851c56367a67a3d465e17ddb8dcd6127219f4c7f8e67349df929c05971b5f35198f426cddbdd9f381775860b85ba8f917abfb5c","ssdeep":"768:XmDekv+vIs61XITT9iDiniRotQj/7HeeZPyueQGr2dJXf2pF+MsydWwnw2x6qrw:Ojs61XITxio8/S4yhQGr2dJXf2pkbykx","tlshash":"3613e874ebcc102b40332044692653ddba2e80379b024da6fdaee156bfe5dbc453f5a9","first_seen":"2026-09-05T19:09:14.232339Z","last_seen":"2026-09-05T19:09:14.232339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":5,"connect":20,"send":0,"wait":278,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.086Z","timestamp":1788635323086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33845\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:50 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:50 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 290093\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94840,"size_decoded":34829,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-09-06T00:21:50.146922Z","times_seen":24976,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":16,"receive":15,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.090Z","timestamp":1788635323090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Lato HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 19:08:43 GMT\r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":1049,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"98e279faae11b60b01b3fad919ce13be","sha1":"8ac03eee80ee8fd37129ee7500a5877642e45eb9","sha256":"eafe40853325aa2a8172690347ad08deabfbd918181feb135d7ba5817966d232","sha512":"77f31dcfeb5b47a3e5a9f377e65587b6230363e7f016e48464f371bbb4d0487e53245e66b5d5ddb59b00345c27372340a9aec7aa4671c1001a797fe2a60b58de","ssdeep":"","tlshash":"6f01bd91096ba40897830cc612cd7d32ef1f624064499821eeff14d8bc67c699362b0d","first_seen":"2025-09-17T00:10:35.559729Z","last_seen":"2026-09-06T00:37:50.652558Z","times_seen":28674,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/css/landing_page1/landing_page1.css","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.091Z","timestamp":1788635323091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/css/landing_page1/landing_page1.css HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aXC65o2snF2JsUhqBelVV6zDCWgFTLxTwkbjWDqk96V9gwhYLZnJqyGsmlDJvWFkqGROlDjDUZCuUe6d00uoEM%2FWidIyOzybL2AknsDETZrnBouIKYVUsAo6%2BpT%2BsX7BcU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\netag: W/\"7e09-5a024a8cfa2c0\"\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36786315ed85696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32265,"size_decoded":5941,"mime_type":"text/css","magic":"ASCII text","md5":"7db3852a8fad4822d885be2206c89c91","sha1":"55768e0018418a36b7eaa049ea1bdeaabc141f34","sha256":"f863d3ea282a03d9c0a8b1f31718ff6828e464699165b0046a5483f7e2e73b69","sha512":"40af9bae22b418429b453b0b1a084ae49acd136d7ebcb718763b031eacff8a66769632074f8a0e7f9e6c1bcb8bdc904e0c076f00a604cf03d5b97d2647a58a17","ssdeep":"768:3X3gU1b1BrOVHNbEFX6BGGTOSBKLBPQK9fHNizy92BB8ec2ZMABBrTKzVBjeBwzX:jbXqVHNbEFX8GGTO0KFPQK9fHNizy9Y8","tlshash":"7de2ff597ae104087133812c7beb9b2c672de023670edc7a77e29495cfd5789d2a2387","first_seen":"2023-04-12T02:00:10Z","last_seen":"2026-09-05T19:09:14.234645Z","times_seen":154,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/img/landing_page1/icon_file.png","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.101Z","timestamp":1788635323101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/img/landing_page1/icon_file.png HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:10 GMT\r\netag: \"4f8e-5a024a8835780\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2Fs3SrXNrOobOpCmyz%2B1xK3nh3qggpNFhP1yWTz6KMg8gkY9TaOFvlA%2FRya%2FTBQY%2B8eFYhhVfzC39OrYW9hKbGGVIUq%2FaVuEdK3kaYr7Dzq9K9oYMna1GkFHKiCDfUxMZ9s%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36786316edb5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20366,"size_decoded":21098,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"efe2054a8ed32b6acc6d3b50dfebdfdb","sha1":"1871de0df9ed22d63a8a5105e871ac04c129a6f1","sha256":"cc710432f408e0cd6bf4f163e8c9181e0a53d7839894e2897edca31a407fa01a","sha512":"516d75143ab7027364a90228636be499140a547bda50442bb6693bce026a7682c457e84a59381b721b8640a7e38d19cfaeaff758863e5c92d85a9cd62956a4a7","ssdeep":"384:9G6hUj41i7xkJR3SjtSLOoZMeLYAHVZBzZbnmreNtYjIjBo:9GQ7I7o3SwcA1pma7o","tlshash":"ff92d08063977f21997d7adae776c3219f06932e8694b0600fba19e5b2cc3807772764","first_seen":"2023-05-27T01:03:34Z","last_seen":"2026-09-05T19:09:14.23522Z","times_seen":154,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/images/back.png","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.102Z","timestamp":1788635323102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /images/back.png HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:32 GMT\r\netag: \"10f6-5a024a9d30900\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8rc8mvKIVY%2FdoqzyuLAWYgx3DgeAaLSujuXa8CGIjWaxV0opwFwo0Zd%2BHfprWoL2RvcTu5rR0jk1Tuapqk0rdwW7ucUdc%2B%2FhHNq41AbYyR%2FjBuQQj9Tr%2BRq01LDzT1hr%2F0%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36786316edc5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4342,"size_decoded":5082,"mime_type":"image/png","magic":"PNG image data, 54 x 50, 8-bit/color RGBA, non-interlaced","md5":"67d834e039c37267f979c545f264ad73","sha1":"07354fa91dc6792ade70158408989cecfb114283","sha256":"9c10b464a02589dd3755b4992a91e6a7a47d1bae064e0f53f100ca38cf6d82a4","sha512":"4270f4121475648e17621f432088c9dc14808ea158a85d1dfa672ccd65865dbacd281b93627fba1cdc31ddea8bfefc4acdaf78e06336cc4530d4392fbed8e868","ssdeep":"96:wwI+7QySkOcSg7fwqB/WW1UkVGfb/ojYgT:NhsyEdgThB/H1lVI/dO","tlshash":"ea917ec0a1577ae7c0aca23139174628d83bbd235e58a5d86afcc2c41d4770f82a9bc7","first_seen":"2023-05-02T13:47:27Z","last_seen":"2026-09-05T23:28:31.586972Z","times_seen":385,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/img/landing_page1/gradient-menu.png","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.105Z","timestamp":1788635323105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/img/landing_page1/gradient-menu.png HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:10 GMT\r\netag: \"f2e-5a024a8835780\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSOoQtcfzSIFRa9FkzNpZ9w37M6j1I2grABBGPcGz0m0sSmlchuBJGa6D%2FgSp5ZwsbrpG6nWUwb1OXyIPNomsLmEqG7xBZZb5QLJwCSo0qLV7%2F4wi8WEbm8x1O67eAvj344%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36786316ede5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3886,"size_decoded":4608,"mime_type":"image/png","magic":"PNG image data, 1920 x 63, 8-bit/color RGBA, non-interlaced","md5":"41c3a383bb42f1d6e91f3563be22ac53","sha1":"4e4e0eb5a2525ad42b04a062679c6401631494fb","sha256":"39089fa94a4057f9448b0a58999b0c9a171fa952ed0b4eb136d1794e2fcee5e0","sha512":"73ab53421c6ac7e99a430391d4f9e796defbd161926e5dec6cf2e33f92e55a8ccd2dc0fe3a28559f82aa2ae64e8ce126303baa035457ec42f6d0430fa5e79ea5","ssdeep":"","tlshash":"db815d8ba0f18ac2e02ddc7619f6da728b3257c10be4f1917956d923cd2416e499a0ca","first_seen":"2023-05-27T01:03:34Z","last_seen":"2026-09-05T19:09:14.237074Z","times_seen":154,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/js/patternLock.js","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.092Z","timestamp":1788635323092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/js/patternLock.js HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWKaFMs3NHM7JjnrGknKuRRGGXV%2FsspZPwevXQljYTNmXo9HLH7BA15fxHPZpJs%2FeWrZvkR9Fxao%2F2pbhB9%2BdY8S6R%2Fm2HanEXt98aBIORU3MJKMZ0isbHuIbWtHqvSTpUk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\netag: W/\"3998-5a024a8a1dc00\"\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36786315eda5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14744,"size_decoded":4739,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1b97bd41de5d4a82c387dceaf9cb161e","sha1":"120d91046a1b4550574678b88bd037838eeb3086","sha256":"668b980ae577f4dd90d4a045e6d724104544788d725aa0397f84de9e7851c0b2","sha512":"b76b43b4aa8b8edc86bce714c93376fcd59ee616d21bd90584178297db2b2efec4d118ce3a9c56765ab9fd642b6bc012b12fb7f3bbfcde491f557ad872776a26","ssdeep":"192:cVB7bm30UrSv0ZCUNinymgwfqiCCP8pj3y7JPn0nilu:cDfyTpWPY3z","tlshash":"95626308a5731c94e067b29c5bef6808a23095039d0fe907be5d43d49f8966ca7f27de","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-09-05T19:09:14.237665Z","times_seen":154,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/common/preload.php?a=1\u0026t=1788635323\u0026lkt=3\u0026r=1\u0026dat=6a6a6b6d6b414141416e6f70416a6d706d706b4169686e416b6a416a696d6d416f706c411f41412632322e72676720231f302b2d20272a233166212d2b676a6d6f71686d416a6868","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.512Z","timestamp":1788635323512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /common/preload.php?a=1\u0026t=1788635323\u0026lkt=3\u0026r=1\u0026dat=6a6a6b6d6b414141416e6f70416a6d706d706b4169686e416b6a416a696d6d416f706c411f41412632322e72676720231f302b2d20272a233166212d2b676a6d6f71686d416a6868 HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: Content-Type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNaNdl41fnC%2Frievo%2FZadQVeh4jDA1tIdi5cr2GwcJZtqYWHwfl6jTRu1QZlikozSlJdX461LhYi7rGWhiaLGSpv2QNnfz4yX0oc2S8xxygIX3%2Bmb4ifYWlfm8yDAQydZro%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3678633fef45696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1174,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (831)","md5":"8bbdc8fad79b1c9b6e11924d08a2d221","sha1":"dfce7444e30863b5374ceb5b824649bc580a6307","sha256":"c231dc20f1172e363cdeb940b5e8984d90f62a79ceec85894ec6ae47e718ca65","sha512":"397881869f7e24fa6aa5c5b0807ee99697923cee6b62145c0de6e059970135f6cd33b22d3c496e449387fa08b419e29814114914f01af04a4ad7fd4ee55ceacb","ssdeep":"","tlshash":"64119ed5a7f95c3eb140fae19d3e07896e30172b4280d5a3b90cc16b91a07a9562b22a","first_seen":"2026-09-05T19:09:14.238526Z","last_seen":"2026-09-05T19:09:14.238526Z","times_seen":1,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.541Z","timestamp":1788635323541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bearmobiles.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 02:02:14 GMT\r\nexpires: Fri, 03 Sep 2027 02:02:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 234389\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-06T02:09:55.136839Z","times_seen":264796,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/fonts/icomoon.woff?-1vhccs","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.542Z","timestamp":1788635323542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/fonts/icomoon.woff?-1vhccs HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/assets/v2/css/landing_page1/landing_page1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:13 GMT\r\netag: \"1048-5a024a8b11e40\"\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1BkN58F%2F3IkW6eYHNuVeCXp%2BL%2BpgzCAoiHOEVNso%2BHP%2BxTJj3mpGSIkbfpFPq5IYl%2B9MC4ywQCFfXzzFNqDMpLLAwVVAeHB8toWLsKV1mR%2B1n59xhq6JZyW5BuGZMlEwd4U%3D\"}]}\r\ncontent-type: font/woff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36786342ef65696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4168,"size_decoded":4877,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 4168, version 0.0","md5":"df3cbfa06a361554a6a1ca2d525df635","sha1":"5542304d378ecebea2f168206726fe3c9bf852f8","sha256":"aea453623b426778eea2e86c025e0cbdaa7d82c8bf6b2e54e58b1373308ff941","sha512":"8909270a14ff649e07be816449f5a0fcbb658480268c4a2aa988c72764fe68ae0761e25ccc8a8df9341deb7082fff696503bb2f7b3bb1ef2377ea4adbf0091b9","ssdeep":"96:Hd8l7aJUovikpMjHwiLIjZqfq/BTY+ee5k5zv+0L4gJz+ZMavPrvx8jdnrRmj5X3:9GaJUXoMjQikdqClY+eeu5zvt74nPrJx","tlshash":"4d81f872c3f1ed5ecc4b8f7948be436007b8f710861c8baf19806886808ece8ce59384","first_seen":"2023-04-12T02:00:10Z","last_seen":"2026-09-05T19:09:14.240058Z","times_seen":154,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/favicon.ico","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.909Z","timestamp":1788635323909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:44 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVJIeV%2BCkiWmFsM4XgfkfDgY7ty67Y3zpnIAQPG%2FoALsfEDlRFiNLr1bGpuR2hKTWTjP70rWWuAWsHFDjkkYZVmVWdYvwAUBCKPvcmy%2BkxSpSl%2FWtaR5nMLhnzVuCMflz4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\netag: W/\"47e-5a024a9d30900\"\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36786367f0f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1404,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"34cd4bc7a26dd5f4fdc3097eab4f7675","sha1":"0698a12d1bd3e77388642c18c6023cb929be4b28","sha256":"65feb706d0e6fea4098634dbed48611cb8608cd45dd3ca279ed66612300aa700","sha512":"b4ca4172c8d923912860dcda29dc9047180fbf020a7a90a8eceefa85e905e6230513da4b1cb892c2449f1a39b4f6619c8555efd743d1bef763346a6009de66e9","ssdeep":"","tlshash":"6f21efdcc5f78688e42a45b907528b12785df71ba67f5b4e08b1f83605f88db8c72c91","first_seen":"2023-05-08T15:38:40Z","last_seen":"2026-09-05T23:28:31.58019Z","times_seen":414,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/jquery.tipsy.js","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.088Z","timestamp":1788635323088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /jquery.tipsy.js HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idn1KnbUFWDz5Fcjxh%2FAF2VcBh0W41oBJ%2BMz7PQCFkD63G7WcIT8q%2FbN4XmEpM%2F%2FrA3R5rdAAbMjy8w1P7zw1XBGrK76DeES6Q4ydIjDsz6KiNoyrw9zlsD7XQr3O8hWSxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\netag: W/\"1cdc-5a024a864d300\"\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36786314ed75696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7388,"size_decoded":2831,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"58773d323f2565e7414e38b4344d07c1","sha1":"ba80e60b8661204dc4351b0a746500a0919643a9","sha256":"6963301ce1c551417dbb540bbc5c41c2f70aae91731775ad4bd625d9a93224a3","sha512":"f315c412a4208b2102d70890c338183e3fffb38d6e141e9b3eb134b40f56ebffa5359f51efaf87c7fc9a7995f61cda7f84ba387e6045ddbd98875f56bb64b996","ssdeep":"192:0iM4pa7W7FuSBWCe4SByTdPd588KtnCnUaCOx15eB0p9W:0WpHlxfnWOWz","tlshash":"3fe1ca6a66e332119563b1fa8f4f412d3130d61b1a4adc24386c47c19fe1534eaf7fa8","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-09-05T23:28:31.578639Z","times_seen":359,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bearmobiles.com/assets/v2/img/landing_page1/bg.png","fqdn":"bearmobiles.com","domain":"bearmobiles.com","tld":"com"},"ip":{"addr":"172.67.180.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bearmobiles.com/","date":"2026-09-05T19:08:43.494Z","timestamp":1788635323494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bearmobiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 04:08:52 GMT","end":"Fri, 06 Nov 2026 05:08:35 GMT"},"fingerprint":{"sha1":"00:6E:D2:94:8E:86:A1:5E:66:30:5D:BB:99:A0:0F:C9:FC:22:42:2A","sha256":"45:04:B9:F2:06:B8:9E:B1:D7:B9:18:12:94:D1:CA:D7:E3:18:48:C7:37:20:B7:30:E9:35:5D:DD:66:2C:6F:98"}}},"request":{"raw":"GET /assets/v2/img/landing_page1/bg.png HTTP/1.1\r\nHost: bearmobiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bearmobiles.com/assets/v2/css/landing_page1/landing_page1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 19:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 00:23:10 GMT\r\netag: \"f9af-5a024a8835780\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=De02V3B7JqW9Hn7qA8AuRbzN8ELH44vJLhxr9QJcY0UyHxIWa%2BeNa6ztmcyu3sJ9bO%2BEneV1CcHmgmALNjwPnIKqPCMr0pT%2BKm%2FI6JCUZgSDShAqH2G%2FtTPQX3Q8irM91FE%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3678633def35696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63919\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63919,"size_decoded":64649,"mime_type":"image/png","magic":"PNG image data, 1500 x 518, 8-bit/color RGBA, non-interlaced","md5":"e0bf21e03d7327718034ae3e70580c1a","sha1":"b19aff56bdd6de56d86d3b240e95bc5e78334b94","sha256":"227b3b0fe4c91f74ba66779525529fdfcc37a778cba09eeffd2e03dc9c26b3b9","sha512":"c757657f0f505b3ffbfbd52f1562c37c500c385900adb91dcd2a245c60e078137448cce52cdddac8db73eb6954f370eeae3d92f639dfd973b71026aee14645b5","ssdeep":"1536:PX8AHgJ7WkDWy1B0SBYk3waWNjCZazBme7zTD+c/VboI:7GXqQB0SB/WoYZ7zuc/pB","tlshash":"a15301984e47db311fbe85874f0a08700c3449d19eeec9f97ae95e9b2ec234252973d6","first_seen":"2023-05-27T01:03:34Z","last_seen":"2026-09-05T19:09:14.242176Z","times_seen":152,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-05","alert":"Phishing Block","trigger":"bearmobiles.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"bearmobiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}