{"report_id":"b82e546c-5f86-499a-bd2b-ee7c46f5014f","version":6,"status":"done","tags":[],"date":"2026-03-18T20:20:52Z","url":{"schema":"http","addr":"invoice.guide/","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.7.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"invoice.guide/","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"title":"Invoice.Guide","dom":{"size":1883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5235ab282f73848db498221c24abfb14","sha1":"957941d63c2bab3d679f0c5d6adbb329caec340b","sha256":"8de9f48b9a3ca5890ccee2f2a5a88d385741c1206f388519b77b7d974b293734","sha512":"113d957b1dafcf0fc8b2760ee8d3c32c50804a44eb75ba563abffc17370cab166abdad9a6daa8e3b5d91fc694afbbc9965d58af24d6727743752de12cd008086","ssdeep":"","tlshash":"e341a0b1019d6cff018192a360317b5e36ff8d646b2b95e194bf015686ffc63ad29085","dom_hash":"domhashb28a76cc7cf90c7fbc72229d4087ea5a","first_seen":"2026-03-18T20:20:53.76772Z","last_seen":"2026-03-18T23:32:38.31701Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"invoice.guide/","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.7.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T20:20:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"invoice.guide","ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-10","domain_rank":0,"first_seen":"2022-01-08T16:29:56Z","last_seen":"2023-04-20T21:21:13Z","alert_count":10,"request_count":10,"received_data":68309,"sent_data":4533,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"invoice.guide/index/icon-eth.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/icon-eth.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f042ebaef3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeoG0v843EFJORMVsUgzx91dw2TokPrQE%2Bs0pr3UcDuqjsCNc3OMiU6KEjVgUzJf%2BVAntoPQXVLP3ilnklNTCAeNdMP1KXxpQFiW9g%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/icon-eth.2dfd97365b.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb020bb96ae33809b5c9c8edf5985925","sha1":"f4d388d45b3f22b3d8d8e321596894fc4d9ee908","sha256":"62ad2990ed101b41fcae0d9ba61e3bbdc24ee19c547aad0320994a2c8cd240df","sha512":"417b50b120eda08d8b6174b6b8db802849f31f1a9c4596643605e6144df2b98dd0bddd957baa5184f1cb8eae4e8a0cf303528de86172e0af152a97a7b93b8341","ssdeep":"","tlshash":"f111f0d0b51cf528d9194fa5ef1f787421223dc8451980866bd02e4bd4a897f1d2bbd8","first_seen":"2026-03-18T20:20:53.769198Z","last_seen":"2026-03-18T23:32:38.318307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/icon-btc.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/icon-btc.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f042ebb0f3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa2nb2HBjBphepHiUPHiVoE0P2htoZcrWLuvUE9YCRgsP63wRWnRdVAJzYw3dL%2BD2rcFbfobPaEWcP3a7P7YJ8rtoSTjlRmdPyEwrw%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/icon-btc.4445b44796.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1009f52fc34beaa85a70a5c42acb476","sha1":"3ba7d2bd02a3a6dc045efeed745ee3afa8aff74c","sha256":"a29e421c99faa77dd96cd2785be6935ff1241f0c60fea95f1ce28b22244b3ec6","sha512":"1f4b289622c349b22aecbbecde949b4f0d428e122a9842443ea7d51cb4ca98605fc9b283387056589ada8f8d3ffda0d39d1c717d23f42ea611ee8a826907c822","ssdeep":"","tlshash":"5a3153eab3ecf6e0e008c3945a79a431396b28f06f00c85587d55d80d65746f041e898","first_seen":"2026-03-18T20:20:53.770097Z","last_seen":"2026-03-18T23:32:38.323986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/fonts/Gilroy/Gilroy-Semibold.woff2","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/fonts/Gilroy/Gilroy-Semibold.woff2 HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/index/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26992\r\ncf-ray: 9de6f0448e86f3c7-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 13047\r\ncache-control: no-store\r\netag: \"index/fonts/Gilroy/Gilroy-Semibold.f890376686.woff2\"\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6bH%2BuBWOvft3lwbdhgvX6syg74MnHn4FbiNC2f0FzYgWvEU64%2BenQrwXlMuY1ehQjdVlgvOfxgAkjp%2FOoWFm0oy8YigMLhMwNDF4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26992, version 1.0","md5":"aebaa8b1ed01037d84d61390cbba818f","sha1":"ea49aea40cff889f541b8901f4f1f8a7f9c7e8ed","sha256":"a009b007bbe610b10c8f99a20f6dfcf009742bdc66a23ecfb439f60a636103cd","sha512":"e0dbd3e872ee9a0becee58668af219ccd5305c6a6fcfec0f38b6e4cec4c33c5c87aa154c7cd726f239eb9d4efc678a2f333509073fcec353a707de3ca2e32a5c","ssdeep":"384:m+rPEkSGLkvSxQD8aLOxR6Ac9Vn2a0Fwp8bCRt55PggUPOec33hyxgvDjm/:m+rPEkH3QDBO9O2aAYBPHvhKCDa/","tlshash":"21c2e09da4a99b19edd535f4787c0a5242ea03fcdf52e69103b1410ed338a2b11672ff","first_seen":"2023-04-30T21:18:40Z","last_seen":"2026-08-01T05:26:45.463626Z","times_seen":465,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/logo.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/logo.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/index/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:32 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f0447e69f3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNGJAhvLVR9iWJs%2BE46ZeuaAlKWab12NErpGXm20Bg1IRDMaglFwrJP14DgTQE%2BYMrEiP030dB%2FYMTLgI3rNcMxHLftqQxlJjTyB5g%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/logo.9ab21cad74.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7879,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e0188cdfcec4470aab39c6ec19e6edc","sha1":"13720da6488c4b5f2a8946549bae92eaea27b300","sha256":"88a339bd9a749c5913597cb090da02ddf23083b8d06321debbc226d4ba40cbe2","sha512":"e18379897661980b304522e93eb87e1d60d9dfb011f2709cef162dcf9be8df334993b53ed24970cb9cd70ef5464a216ef90a223746d19778f8281a7f746455c5","ssdeep":"192:gmUQM20lakwW1/rPPNWghixuWO+oO+d5BeOz21h:LrF0lJ/RuO+o9rq1h","tlshash":"14f1b6dc6bd965e0ec0ae3f5ed22203ef55f70fa5a42cef182459c88b0518ad8c5ec54","first_seen":"2026-03-18T20:20:53.771522Z","last_seen":"2026-03-18T23:32:38.320119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invoice.guide\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 312636\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T09:47:07.639818Z","times_seen":251676,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T20:20:31.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 9de6f0419968f3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 167072\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPlwB%2Bor0RD6Gh72rD6jYx%2BuJpJB4O3Qij3Aegi%2B5d2Pp9Ua5WdOJZCVUUVOuKNtaVL7mFbfM9GniPiVpWaNNxXc3WG8G8ln595zmg%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index.0a8c46d22b.html\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1897,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f14457eaf2dd0f65f1e9f85d0294f769","sha1":"89bf104dda039ed7f90369784322eaed07bc1c6e","sha256":"2320f097bc81bbeb87f337284b68fb429aef3b034592452f359d9ee86ae19f3c","sha512":"73ccc293589559b49af58da6bd4a0a038b38a972b893206cabbb08401a61358434c672bf61f0ed9c7008817907612f5910baf7468ed2a6c14edd57f52d423fc8","ssdeep":"","tlshash":"f441beb0019d6cef018091b360327b5e36fb8d646b1b95e194bf015686ffd63ad29085","first_seen":"2026-03-18T20:20:53.772981Z","last_seen":"2026-03-18T23:32:38.321603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":48,"dns":15,"connect":8,"send":0,"wait":50,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/icon-usdt.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/icon-usdt.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f042ebaff3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZDmlHRAUn0RUIjRXj0ThpJFNDYYVu6%2FGJ9zPDMR8WBnk9F7Ch0raBf7Se3VgJUwsLHY%2FQln429Xi118Yr8w6AbL85aJS9aBBuudLw%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/icon-usdt.56af688d17.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed59738a8a132856da93d54fc3873e1","sha1":"339769c2abf65e529a16986c5ddc131b2317afe3","sha256":"772e8784cc602e543b5a1cb36a4726414e344e2c8088aaf562e45f6005d6dc45","sha512":"ebc0415c6da51e293fad1350134c3740312e6aec0a7624550b5bf67fcef305d91c11bb592550320e8c27045bb524aa4d950a0316a6348e1630c3d8b41d34f352","ssdeep":"","tlshash":"575130cd93daf2e0f016d7e88517ad7439f339bb9e24dea243982e8ad15201e70458d2","first_seen":"2026-03-18T20:20:53.773828Z","last_seen":"2026-03-18T23:32:38.323285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/assets/img/favicon.ico","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-ray: 9de6f043bd19f3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 93523\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyjiqX3CQiPL2vmUlxI3OKE8weEst3Rb%2BUry5Puq%2FmzAUU6zx8beON%2Bmjf9jIzRj%2BQ7P%2BgoPR6K0lkO0TU9wuURBLKf1K8BrWveEQw%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"assets/img/favicon.f1ee040836.ico\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5210,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"a019ec723ddc6da8f3136116af509968","sha1":"0a43d3772533f3e1dd759b8ef967b438bcde8572","sha256":"163056db9370846a5224c7369ac07f75c6344a13443b1c81ccbc3ad1abaa8283","sha512":"345f239171f14dca4953ddf3a8fc8a828ca6df2444cfe2022a48a1f03d1b3fdc3dfa128e8ad6478acb98be282003ef2c427cc4361cfc4b63070e314e405274a0","ssdeep":"96:NmkywNa3uhboWsoP2GOHLd6ae8oxmvEDErvFjJY1RhqrRXSsXlWrQuBMBtS:Nm8g3/UkkaePIrvBJKroxlesS","tlshash":"9fb19ee9db55b047d492f2f5de541a376d2ef009e6a305412c30ce8d7e79c856608ef1","first_seen":"2026-03-18T20:20:53.774701Z","last_seen":"2026-03-18T23:32:38.318934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/logo-icon.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/logo-icon.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/index/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:32 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f0447e63f3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3cM%2FGrsRxHxOZqp95Iw7bsILACwZRlNhtFef2bKFTkYGh%2FWKOkyNah67jnIuKnOrkNGuHgF9fhQZ8HWgSiIfbl0tXjFaouh8PTWhg%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/logo-icon.6a2083b0f5.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":737,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"347f4f8a631791a9f03e5ccf384eea30","sha1":"b9356d11ebb67b685e8b9831f751e783b1923c5f","sha256":"c19f593cff623a278cc1375540283d710964559ca8d40fce9e60a0b32bcf5ea3","sha512":"0675e3d1865b8bf614c1340aa4f61ad9d04616fd67b9d45e03ca9a1142a618db8887a31be1519d086de8ee09780c047dbbc9892f0fdc4f6591b65731f1f95b88","ssdeep":"","tlshash":"5201100513db0bb0e048d3435a34f13e733d58ddd04ea5b8dcc45e55f001b99ac92ca0","first_seen":"2026-03-18T20:20:53.775571Z","last_seen":"2026-03-18T23:32:38.324779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invoice.guide\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 312636\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T09:47:07.639818Z","times_seen":251676,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":117,"dns":0,"connect":21,"send":0,"wait":8,"receive":4,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:32.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://invoice.guide\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:56 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 312636\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T09:47:07.639818Z","times_seen":251676,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":92,"dns":4,"connect":10,"send":0,"wait":8,"receive":7,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 20:20:32 GMT\r\ndate: Wed, 18 Mar 2026 20:20:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-08-03T08:14:34.127022Z","times_seen":9088,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":157,"dns":43,"connect":21,"send":0,"wait":33,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/styles.css","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/styles.css HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9de6f042ebabf3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpe0YMI7DAhm2q7BDcNYsJC%2BAJcUUC8Ufk6OnKE8vIqz3jw5K6dYKVBvEVdECgIJaLmR5q7%2FaiuWX7QG%2F6gl8DEt21ZaBdKmDSYTeg%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/styles.2ec3051986.css\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8283,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"75fea9739e3029c25b5621ac2109bfaa","sha1":"15240ab5e0776010b64835af9a3d7c7f5f976efb","sha256":"60369975666ec1fb470d8be8da64daf08cc5936655d09e15cf1806345eecc565","sha512":"e5b9f191c4250f931fe6e620059657c1b6daa5088b21d6e1bc67c25d62016b231ac579be354d8418141c05a4c160fa6fb89883337c5ccf34a93690ac274a2a2d","ssdeep":"96:YEmjndeuTs+62Dna0HxefnYl5+TZPSFEh2bUiSoJ3SQli4VaqU2P1/m:PmB3Q+62HxWnYWhZ+dvm","tlshash":"d60287762b012c89e20bd568bf99bf244b2d84725e4e5daf64057c6dc3ce1a521f338e","first_seen":"2026-03-18T20:20:53.776882Z","last_seen":"2026-03-18T23:32:38.317699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoice.guide/index/icon-trx.svg","fqdn":"invoice.guide","domain":"invoice.guide","tld":"guide"},"ip":{"addr":"104.26.6.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoice.guide/","date":"2026-03-18T20:20:31.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoice.guide","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 04:22:46 GMT","end":"Sat, 25 Apr 2026 05:22:42 GMT"},"fingerprint":{"sha1":"FE:FF:DD:30:BC:DE:21:59:37:F6:33:8A:0C:B5:E9:80:5E:98:11:4E","sha256":"7F:2C:FD:55:9C:05:EC:5A:48:35:0A:1B:85:7B:E8:7E:32:66:49:74:15:54:59:93:DD:4A:AE:C2:21:93:98:5E"}}},"request":{"raw":"GET /index/icon-trx.svg HTTP/1.1\r\nHost: invoice.guide\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoice.guide/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 20:20:31 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 9de6f042ebacf3c7-ARN\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13047\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdq%2Bd%2FzphfSBoaOcaPIV5yk4zJLk9%2Bx0mYV2qUiXshz2rpy00CUBtjG9PIAsclCf2MAsDmTmZUrYx%2BK3jhWOCxBlS6uI1k2Vp64nbg%3D%3D\"}]}\r\nserver: cloudflare\r\npragma: no-cache\r\ncontent-security-policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; script-src 'self'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"index/icon-trx.298eaf61f8.svg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3135,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90fb52e8ec0b1a8ce54b897df7b0eacc","sha1":"b9323f95b2c531fe6ba09f5e57dff5d104f62e5d","sha256":"5d05aea2f98c89d4c2726dc87fd84cbcb6ce68debeda89eb6668c8de84b4e7eb","sha512":"f308eff45e8aeb124bc1792a4df26908a83747e016557696a7610b9bcedd7d543a7e6d1a277c37c64153088db69e5110fefd72751ae4447d0a73a0b7309bc48d","ssdeep":"","tlshash":"c2513198e3fef6c0f600e3f447aaa4363a2b35e72e21c97447a95ca5db5241c44898c1","first_seen":"2026-03-18T20:20:53.777751Z","last_seen":"2026-03-18T23:32:38.322638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"invoice.guide","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}