{"report_id":"d5a87b12-fc94-46bd-8a2f-d120ce472d3e","version":6,"status":"done","tags":[],"date":"2025-11-10T20:21:20Z","url":{"schema":"https","addr":"guardawallet.co/","fqdn":"guardawallet.co","domain":"guardawallet.co","tld":"co"},"ip":{"addr":"172.67.135.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"title":"Web Multi-currency Wallet | Guarda","dom":{"size":21736,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9957)","md5":"0fff4a8446ac5ef0ed02e58988b8a31b","sha1":"2d1d615fd9136d5694696a38f9681237118b9251","sha256":"230be07fe4919a8280ddcf96bf9798e2541ac342ebbb8f055af69c334dfae7cb","sha512":"8445876237cdf8adc6fc3feeac19d9e26f5ee43a0e3fbc7d927d5024922e6424a341fdfa185fd79dbeca3937f8d1511a0aea191c4efcf8f2853b6a4c36a228f7","ssdeep":"384:w+Mw8xxbR0oIGm50FMZquVQrjxHFjOdErL9d8lZrDQkyb:w+Mw8xxJIGm50FMZquVQrjxlfrL9yS7b","tlshash":"a5a2fb237ed009794323836ae52677cce854484f2a5af857b40cb4a4afd0a6bddb3371","dom_hash":"domhash434dbf0ebca91e15ae538112ef1ae610","first_seen":"2025-11-10T20:21:23.982928Z","last_seen":"2025-11-10T20:21:23.982928Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"guardawallet.co/","fqdn":"guardawallet.co","domain":"guardawallet.co","tld":"co"},"ip":{"addr":"172.67.135.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-15T20:21:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"guardawallet.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-10-15","alert":"Phishing - Other","trigger":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-09T22:17:44.096454Z","alert_count":0,"request_count":3,"received_data":249127,"sent_data":1476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bat.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":24312,"first_seen":"2023-11-04T08:19:21Z","last_seen":"2025-11-09T22:36:31.537536Z","alert_count":0,"request_count":2,"received_data":1054,"sent_data":1370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"guardawallet.co","ip":{"addr":"172.67.135.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-30","domain_rank":0,"first_seen":"2025-07-08T18:03:05.633185Z","last_seen":"2025-11-01T00:35:35.989242Z","alert_count":1,"request_count":1,"received_data":21838,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.wwguarda.com","ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":0,"first_seen":"2025-10-13T01:36:25.035118Z","last_seen":"2025-11-08T03:07:21.508104Z","alert_count":25,"request_count":6,"received_data":71980,"sent_data":3335,"comment":"","tags":null,"fingerprints":[{"name":"Firebase:8.0.0","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"bat.bing.com","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":2924,"first_seen":"2014-04-08T09:23:16Z","last_seen":"2025-11-09T22:31:55.870097Z","alert_count":0,"request_count":2,"received_data":55511,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bat.bing.com/p/action/187120316.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efafdc9aac348ffbb09d482a1097bf0","sha1":"563f05b658ca021fc5808d1155b5b396268d4c40","sha256":"0622e3fde788e8f4938993664ebe05946ff8085c891eb94415561c784f62876d","sha512":"73d67cf36351f3c128cf24fdc1d29a2f52bf8e63cf35638444c5166a41b1423d39b11c9974627f0bbb7f8fc64b9b373c4eebf6cb2168b577cf287b54bbe60449","ssdeep":"","tlshash":"bbe0df1a61d16139d823ec2dd22b868d2fe2a31bd284ec11fd6cc6667fd55282d10f4c","size":399,"data":"","first_seen":"2025-09-26T21:37:57.874276Z","last_seen":"2026-08-09T16:37:47.416058Z","times_seen":79338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fef26ec134c69f52945633829187c00d","sha1":"41420b69a7f3bab9e40c3d20dc80b9aff7ffd8ea","sha256":"15be51c050eb413012120d2f5fb436dcab1074fc34f414634a799f4d1d124567","sha512":"b78bb6b0e38c97c7a482a5586921131881751e984ccd93449f8d31b54c1a4068863346a89965f04e5601ead94b4e4156fd5c0edb4d3f5a802e0a78612b0418be","ssdeep":"384:mcxRfpZ0RCyQ/nzWsxWRazZ+mnEk72zp56BANS:rRfpZACyQ7MOvtmSBANS","tlshash":"a192c8ccf6d6b066439354b8443f700ba33e2918984c80a8b659f4e76df690e956ff78","size":19952,"data":"","first_seen":"2023-03-11T22:51:20Z","last_seen":"2026-07-21T03:39:57.009381Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7712856fe485ccb31dbadd122c6001ea","sha1":"73c1f91ba62e00aa1ffd688563efa28ccb7a653c","sha256":"ac13ad05f05d50be95ee1bc3602cd059f951da74c1b562016f0cf0ff4f64acc0","sha512":"d165eca3c193494d85711000f037380bd84a736f6de43da31f7c5c29d7cba8a2d9cd4912105403672b105476085714a3df61323a13702f96e6e099599ca66c61","ssdeep":"3072:IgnSpBNEnfc8/3xLDxTRYJEJlJWJgJBJZJ+J0J4J7JyJmI:IgnSpDEnfc8/3xFuqz0GzLMyaNk3","tlshash":"c514ca49b691757203a3b5a4413b424ab33ba96da40540ecff68dce27cf494e217bfb4","size":190473,"data":"","first_seen":"2023-10-16T07:56:46Z","last_seen":"2026-06-12T17:08:41.835985Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f5054acbfa2e82233f47c6127abc16","sha1":"b6b29a1d693052983d5363e6953f3e5200352ddc","sha256":"ce71cccf0d728d6844279c01a122088ed8485bcdf9f5024be51f8f71c0fcb0ee","sha512":"908ce72dd4b71c623befe60f545bd28fcd010f6a620bb729aded5d6953cc1b864e2db7e5356c25d95bbaa2d54387e36b107de18b6ee15c78bb29ecf1f7359744","ssdeep":"","tlshash":"4a41ef402d9481b21b9743e76b3f42eaefae95db38e44923d113e8f4344826dd827e71","size":2273,"data":"","first_seen":"2025-10-13T01:36:28.341354Z","last_seen":"2025-11-10T20:21:24.020045Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-storage.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7b4ff50cb9074c589b531445b8caaf","sha1":"13dfda7f0723aed316d76cbdd6c75ce455e78601","sha256":"dee5fdd1355e2056609cbe766fde2e3b092a4424ef1736f2e5108eefe278e7b9","sha512":"0b2bdb3b4e927ac2a0b0dba505215ba5c8a48a2310554c8c942463116d3a6fc18490f4a5f0f9fcf20a1d1c041476eead33ae65b7e4dd160a0e9177b3d1202eb0","ssdeep":"768:GRPCDazaTtyESUbbyD1PJpAKIm67Sdbrk2kdNu59pha1bHBv6y:IPCl3x2MKIm+PdNu59zybHBv3","tlshash":"5af2d789fa92b07247e3647804af1407b33f691e681d806cbb50e9c67df894e5627f78","size":36030,"data":"","first_seen":"2023-03-13T17:44:43Z","last_seen":"2026-01-02T12:42:30.970234Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec7907103e6ae87bb0a11e80b640dff7","sha1":"0dd352fe586aba5254a50cd83c3810541b07d396","sha256":"f4125e55611d3d6f151248c8e05cd0f433403c0ce82878431183808dc5da90e4","sha512":"1cd5f3c5a48c4538a773bf17e3e2ef4865c5c89951eaf31267a808a870f4555e21f3f1dd7c27a49c50ca37c88a2e3264c2c0a4884cb43e89274ffed90c773f03","ssdeep":"192:M1oIGm5UFFMZquV5yCid2/2l/jMcHaFW0iOdErL9Yg3UG8ibei47rDQkyo:koIGm50FMZquVQrjxHFjOdErL9d8lZrT","tlshash":"cd426623bed00a7c436a473aa42a76ddd8544c8e2a5eb46a701cb85415f062feef2573","size":12124,"data":"","first_seen":"2025-10-13T01:36:28.345551Z","last_seen":"2025-11-10T20:21:24.021755Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c03b5ae155d22ad8239f452a64c4ad5a","sha1":"b34b7596761e51eaf3622abb38d0be63a2cc1255","sha256":"bc7a214a7dc8db55162d02aca7c5f1dcfc6b66606c077ded11b96d3081f6e985","sha512":"00e6121328975f936ead3e3fade37f58a94d8993b1fed1878e0d52e4a360ddb9bc380bd00351e3136535bfa4dcd6584b54e2a137d38f8cde700fc4c482355575","ssdeep":"768:YcMOThic7/DNIh+Qm3mT1OoLQBDjf6y+GV/Oj7hu23:TMOTkc7h/3ULMjf6y+Ghur","tlshash":"a3330b4333509a7645f9419c786a2903a337570e30be70ac7a8cf8e6945de4b7237b7a","size":53818,"data":"","first_seen":"2025-10-14T17:07:17.174752Z","last_seen":"2025-12-20T00:29:09.274419Z","times_seen":20816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /firebasejs/8.0.0/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 50800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:40:51 GMT\r\nexpires: Fri, 06 Nov 2026 09:40:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 384008\r\nlast-modified: Mon, 26 Oct 2020 20:17:43 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190473,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7712856fe485ccb31dbadd122c6001ea","sha1":"73c1f91ba62e00aa1ffd688563efa28ccb7a653c","sha256":"ac13ad05f05d50be95ee1bc3602cd059f951da74c1b562016f0cf0ff4f64acc0","sha512":"d165eca3c193494d85711000f037380bd84a736f6de43da31f7c5c29d7cba8a2d9cd4912105403672b105476085714a3df61323a13702f96e6e099599ca66c61","ssdeep":"3072:IgnSpBNEnfc8/3xLDxTRYJEJlJWJgJBJZJ+J0J4J7JyJmI:IgnSpDEnfc8/3xFuqz0GzLMyaNk3","tlshash":"c514ca49b691757203a3b5a4413b424ab33ba96da40540ecff68dce27cf494e217bfb4","first_seen":"2023-10-16T07:56:46Z","last_seen":"2026-06-12T17:08:41.835985Z","times_seen":11,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":110,"dns":1,"connect":21,"send":0,"wait":10,"receive":12,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/actionp/0?ti=187120316\u0026Ver=2\u0026mid=efe56495-8d5b-4ba7-9c33-257a6d13ca75\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:21:00.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 21 Oct 2025 02:00:33 GMT","end":"Sun, 19 Apr 2026 02:00:33 GMT"},"fingerprint":{"sha1":"62:7A:BC:C4:E3:80:17:91:83:49:E3:83:45:24:DB:AE:BF:0B:EB:1F","sha256":"49:47:A8:23:DF:CE:A3:73:C0:ED:8D:5E:33:E9:AB:A1:79:C3:B9:92:74:C0:63:B4:37:11:CF:FB:2E:39:9D:CF"}}},"request":{"raw":"POST /actionp/0?ti=187120316\u0026Ver=2\u0026mid=efe56495-8d5b-4ba7-9c33-257a6d13ca75\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://en.wwguarda.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 30B33EAA5C454007AF4F6A4E84362618 Ref B: OSL231050214023 Ref C: 2025-11-10T20:21:00Z\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":15,"dns":1,"connect":2,"send":0,"wait":28,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guardawallet.co/","fqdn":"guardawallet.co","domain":"guardawallet.co","tld":"co"},"ip":{"addr":"172.67.135.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-10T20:20:58.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guardawallet.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 12:01:43 GMT","end":"Mon, 22 Dec 2025 12:59:24 GMT"},"fingerprint":{"sha1":"E8:A0:E1:17:98:66:2C:7C:17:B0:EA:E9:55:09:F1:30:3C:C4:15:FC","sha256":"6C:EA:07:92:11:05:0F:86:A8:C0:75:AD:8C:16:FF:4B:54:37:F4:7C:99:63:B8:EC:5F:D8:A1:29:81:BA:DF:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: guardawallet.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 10 Nov 2025 20:20:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJ4yVdyJFWp8ETAjzpkBbq9mILL7CatGT38VP0yEW0HHfmp8UcZ6BYr2nG9Pz%2F8J6JW805MMe1SBjCR4N6z5bXydP2DPjLKI28RksunYkg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 99c840ea5c0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":70,"dns":57,"connect":1,"send":0,"wait":184,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"guardawallet.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-10T20:20:58.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 20:20:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 11 Mar 2025 04:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aISsHc8d9jK7EpUgv5MKHsErod0M15So0BbAcz%2ByJQgDBH83%2FMciC%2FqKIjXKXXwJEYq9g43Vl%2Bvsqk7Fh4KIo0SJE1WCkebx8Aimhd4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 99c840ebdd56568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase:8.0.0","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9957), with CRLF line terminators","md5":"6acbf2e5091e306cc63d10ee1afa5682","sha1":"ddd22c2c560bc242c73a0f5172fbcbd465c2addd","sha256":"4cd8e73930029ffdbe6000eaa83752f6b46d0a1cf61a7b5698cedc0b80af8f06","sha512":"b55de35f65a80b91fc1dfda5786a5b74dde85667fcc5bd13bdae0d9e73219ad92eb05a8a5678e60c3588e43057d83bd813490aa6ce98559e6abaa67fcbeeb69b","ssdeep":"384:t+Mw8xmu15oIGm50FMZquVQojxHFjOdErL9d8lZrDQByZ:t+Mw8xr8IGm50FMZquVQojxlfrL9ySIZ","tlshash":"ad92fa23bec009794333836ae62666cdec44484f275aa457b41cb4a56ff0a2bddb3671","first_seen":"2025-10-13T01:36:28.315031Z","last_seen":"2025-11-10T20:21:23.995488Z","times_seen":4,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":46,"dns":29,"connect":1,"send":0,"wait":759,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-10-15","alert":"Phishing - Other","trigger":"en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:21:00.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 09 Sep 2025 10:31:56 GMT","end":"Sun, 08 Mar 2026 10:31:56 GMT"},"fingerprint":{"sha1":"50:8E:E5:0E:CF:A8:D3:35:02:44:1B:62:B8:0C:E5:6C:F2:92:A0:4A","sha256":"AE:24:3D:66:8E:C9:C7:F7:4A:0D:CD:1A:D2:1C:66:76:B4:EF:E3:0C:39:72:89:34:B3:62:09:3A:F8:86:BF:77"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 15042\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Oct 2025 16:30:02 GMT\r\naccept-ranges: bytes\r\netag: \"0a138ca273ddc1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 7C45E999ADCC422E843BC7CCF337BC30 Ref B: OSL231050215034 Ref C: 2025-11-10T20:21:00Z\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53815), with CRLF line terminators","md5":"c03b5ae155d22ad8239f452a64c4ad5a","sha1":"b34b7596761e51eaf3622abb38d0be63a2cc1255","sha256":"bc7a214a7dc8db55162d02aca7c5f1dcfc6b66606c077ded11b96d3081f6e985","sha512":"00e6121328975f936ead3e3fade37f58a94d8993b1fed1878e0d52e4a360ddb9bc380bd00351e3136535bfa4dcd6584b54e2a137d38f8cde700fc4c482355575","ssdeep":"768:YcMOThic7/DNIh+Qm3mT1OoLQBDjf6y+GV/Oj7hu23:TMOTkc7h/3ULMjf6y+Ghur","tlshash":"a3330b4333509a7645f9419c786a2903a337570e30be70ac7a8cf8e6945de4b7237b7a","first_seen":"2025-10-14T17:07:17.174752Z","last_seen":"2025-12-20T00:29:09.274419Z","times_seen":20816,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":15,"dns":2,"connect":4,"send":0,"wait":29,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/187120316.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:21:00.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 09 Sep 2025 10:31:56 GMT","end":"Sun, 08 Mar 2026 10:31:56 GMT"},"fingerprint":{"sha1":"50:8E:E5:0E:CF:A8:D3:35:02:44:1B:62:B8:0C:E5:6C:F2:92:A0:4A","sha256":"AE:24:3D:66:8E:C9:C7:F7:4A:0D:CD:1A:D2:1C:66:76:B4:EF:E3:0C:39:72:89:34:B3:62:09:3A:F8:86:BF:77"}}},"request":{"raw":"GET /p/action/187120316.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 6FBF3CF1E2674F07A1745EAE5A31A502 Ref B: OSL231050215034 Ref C: 2025-11-10T20:21:00Z\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"4efafdc9aac348ffbb09d482a1097bf0","sha1":"563f05b658ca021fc5808d1155b5b396268d4c40","sha256":"0622e3fde788e8f4938993664ebe05946ff8085c891eb94415561c784f62876d","sha512":"73d67cf36351f3c128cf24fdc1d29a2f52bf8e63cf35638444c5166a41b1423d39b11c9974627f0bbb7f8fc64b9b373c4eebf6cb2168b577cf287b54bbe60449","ssdeep":"","tlshash":"bbe0df1a61d16139d823ec2dd22b868d2fe2a31bd284ec11fd6cc6667fd55282d10f4c","first_seen":"2025-09-26T21:37:57.874276Z","last_seen":"2026-08-09T16:37:47.416058Z","times_seen":79338,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/action/0?ti=187120316\u0026Ver=2\u0026mid=efe56495-8d5b-4ba7-9c33-257a6d13ca75\u0026bo=2\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Web%20Multi-currency%20Wallet%20%7C%20Guarda\u0026p=https%3A%2F%2Fen.wwguarda.com%2Fen%2Fapp%2Flauncher%2F%3Frestore%26%3FredirectUri%3D%252Fapp%252F\u0026r=\u0026lt=1532\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=63843","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:21:00.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 21 Oct 2025 02:00:33 GMT","end":"Sun, 19 Apr 2026 02:00:33 GMT"},"fingerprint":{"sha1":"62:7A:BC:C4:E3:80:17:91:83:49:E3:83:45:24:DB:AE:BF:0B:EB:1F","sha256":"49:47:A8:23:DF:CE:A3:73:C0:ED:8D:5E:33:E9:AB:A1:79:C3:B9:92:74:C0:63:B4:37:11:CF:FB:2E:39:9D:CF"}}},"request":{"raw":"GET /action/0?ti=187120316\u0026Ver=2\u0026mid=efe56495-8d5b-4ba7-9c33-257a6d13ca75\u0026bo=2\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Web%20Multi-currency%20Wallet%20%7C%20Guarda\u0026p=https%3A%2F%2Fen.wwguarda.com%2Fen%2Fapp%2Flauncher%2F%3Frestore%26%3FredirectUri%3D%252Fapp%252F\u0026r=\u0026lt=1532\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=63843 HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: AAA35D1900A24DCB9FD876680CED197C Ref B: OSL231050214023 Ref C: 2025-11-10T20:21:00Z\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":65,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/secure.png","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/secure.png HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 04 Mar 2024 20:18:14 GMT\r\netag: W/\"1107-18e0b1deb70\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\ncontent-length: 4359\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX2gYY6A2KG3abaK2h%2FhV0SAUAOHxMy0r8qlUXVBWDUSFucb47CWHDz8OkEf9ZjDYDbIYCg2DJYuLxcy87fnP6kInaTO9MXvVg%2B77uPckg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 99c840f21d2f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 78, 8-bit/color RGBA, non-interlaced","md5":"7df72f0443f6bc2e7d93b4263d61a354","sha1":"71e78781814ead7720e8498c04bc0a4d76ad4cd0","sha256":"52789eb9308d9eec4b9c5f47002ba1e854624c96f5b15f32b8b0d886a48b7e93","sha512":"b1772fb9abd5cf311acca9332ece386319a3ae25f007dd4c356751c23f9ea94e026222a3d4c952929ef7f3904afb0b052606af1c0e8210c1bf5ad8aeabf57261","ssdeep":"96:uFx/FexH6WcMZ2dLmn1H2fVD1CQF6evbDHe4PAnO:eRFexQhE4fVDgQFnvXZAO","tlshash":"0a913b53a2f9a22a1a5db2f9299e54c7d825703a98d2954cae1054c307af0d03d7cf0f","first_seen":"2025-10-13T01:36:28.310748Z","last_seen":"2025-11-10T20:21:24.002065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/b1.png","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/b1.png HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 02 Mar 2024 20:15:50 GMT\r\netag: W/\"52be-18e00cf00f0\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\ncontent-length: 21182\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3%2BCxDA6mrgxpvisCeHjGjtAfSIN53vo%2FmkS9SgvD1bwmZpleGIsepeUXcigUU9vnM0J2LI9La2SKRGVOQpNUsyK17DrMC7OEA5CKiwxCg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 99c840f21d2d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 927 x 436, 8-bit/color RGBA, non-interlaced","md5":"c94176905f5d068d054e41d5edd0f20c","sha1":"7409937f71f129183aa1852d0306c325369fa966","sha256":"f4eb688f72c12247b9c0b6ad5c02f221168d33a36fdd09394a13788635e60cd1","sha512":"0c572307c4d9cb3521e94368170f0e3f768e718729ec6035428edfc02727ef829606f124adc6ee10027506fe31a6eea68ba047f419a2c045c9fe21faed5c4372","ssdeep":"384:etBn90T4nV4W23w6ryn8gT8vDjhLSpuU3O25OLG0P4mwLrttqCLlqX1NN:e3n984yNm8gMB3OLIW7qCLlqlf","tlshash":"2e92bf896de82e2adaed507a94d547d0a10d736f8103867ffb1a45f2c49350f87f8c92","first_seen":"2025-10-13T01:36:28.295695Z","last_seen":"2025-11-10T20:21:24.006502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/icon.png","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:21:00.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/icon.png HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 14 Jan 2024 13:14:57 GMT\r\netag: W/\"2f7-18d081c6c68\"\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\ncontent-length: 759\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBXm1nSOsDNC8BXQDDRdLLQef200xTWsEWyJAG3CmuI5R6KKEjytq9plt2aaRpSx6nrQnq0V43DznBZVDN%2BI%2F8v1Ef8INvSBNtSjpsIZ7A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 99c840f70e6f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"6ceae079682dab152e0d8f088ca777fc","sha1":"62ab9b81a043fe8c419a985ebce2847476eb532a","sha256":"45a8b0965652001435a5f51c6068b5a8f8d12b220706a77b6eb54a1bf4323b89","sha512":"7cacd2ae76b17e5d8360eb1c511eafe2eb5964aef0c289a1d1566f8f4e7d70a5be2e1f7332553c53f3a61c98a2cbeb8c57f42166d6158cccb7aecc0e66862d14","ssdeep":"","tlshash":"e201b5e50f52ec6ae8349caa02371cc4de43b25188d1800e13cbd0520e1f03e975e0f1","first_seen":"2025-10-13T01:36:28.301592Z","last_seen":"2025-11-10T20:21:24.008134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /firebasejs/8.0.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 6538\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:54:44 GMT\r\nexpires: Fri, 06 Nov 2026 09:54:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383175\r\nlast-modified: Mon, 26 Oct 2020 20:17:37 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19952,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19910)","md5":"fef26ec134c69f52945633829187c00d","sha1":"41420b69a7f3bab9e40c3d20dc80b9aff7ffd8ea","sha256":"15be51c050eb413012120d2f5fb436dcab1074fc34f414634a799f4d1d124567","sha512":"b78bb6b0e38c97c7a482a5586921131881751e984ccd93449f8d31b54c1a4068863346a89965f04e5601ead94b4e4156fd5c0edb4d3f5a802e0a78612b0418be","ssdeep":"384:mcxRfpZ0RCyQ/nzWsxWRazZ+mnEk72zp56BANS:rRfpZACyQ7MOvtmSBANS","tlshash":"a192c8ccf6d6b066439354b8443f700ba33e2918984c80a8b659f4e76df690e956ff78","first_seen":"2023-03-11T22:51:20Z","last_seen":"2026-07-21T03:39:57.009381Z","times_seen":38,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/8.0.0/firebase-storage.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /firebasejs/8.0.0/firebase-storage.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 11319\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 10:05:38 GMT\r\nexpires: Fri, 06 Nov 2026 10:05:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 382521\r\nlast-modified: Mon, 26 Oct 2020 20:17:36 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36030,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35984)","md5":"5e7b4ff50cb9074c589b531445b8caaf","sha1":"13dfda7f0723aed316d76cbdd6c75ce455e78601","sha256":"dee5fdd1355e2056609cbe766fde2e3b092a4424ef1736f2e5108eefe278e7b9","sha512":"0b2bdb3b4e927ac2a0b0dba505215ba5c8a48a2310554c8c942463116d3a6fc18490f4a5f0f9fcf20a1d1c041476eead33ae65b7e4dd160a0e9177b3d1202eb0","ssdeep":"768:GRPCDazaTtyESUbbyD1PJpAKIm67Sdbrk2kdNu59pha1bHBv6y:IPCl3x2MKIm+PdNu59zybHBv3","tlshash":"5af2d789fa92b07247e3647804af1407b33f691e681d806cbb50e9c67df894e5627f78","first_seen":"2023-03-13T17:44:43Z","last_seen":"2026-01-02T12:42:30.970234Z","times_seen":8,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":54,"dns":0,"connect":10,"send":0,"wait":10,"receive":5,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/header.png","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/header.png HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 01 Mar 2024 16:12:34 GMT\r\netag: W/\"4be5-18dfac9ed50\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\ncontent-length: 19429\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjAXSfkscEHG7e9Iv4GLFyCkNNlSbusb2N0d06Vj%2B%2BiA1h2O6uDrVFeMI4HmCAPyvMyotMODaSajNj%2FApR2tY1%2FU0MNAjMJocgBtN7dJkg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 99c840f21d2c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2129 x 126, 8-bit/color RGB, non-interlaced","md5":"8271d56d51ff2121c257290836fd2007","sha1":"4ed7416917e8a05be2011d4825dbfb136de3790c","sha256":"3cdf1f53af0294573bbaac469d16347268f66fbd1ed773f86cefc25ba8a8d425","sha512":"3a6db055523ffdf4bc4ffe13334f8a8ab63a82efb4f773054471607a6f19b84b431f5d6253ce2de86c7aec2ebd2f26b6263c651c1e3207d66c6d5b31b2920e3d","ssdeep":"384:3Vr9G2vG72IWg/EnE7LCjpVUM5K6YwxJJi/yRNsC8R9+zsgnh2vy0mSYItS4R:lhG2v09Wg/EE7LCjpWy98j+zxnheyBpS","tlshash":"9392c069473aee67fcd09b3740395c2af510b5f806aaa593423d1e319c3b6b15a5203d","first_seen":"2025-10-13T01:36:28.329403Z","last_seen":"2025-11-10T20:21:24.01721Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":954,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.wwguarda.com/en/app/launcher/eye.png","fqdn":"en.wwguarda.com","domain":"wwguarda.com","tld":"com"},"ip":{"addr":"104.21.21.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F","date":"2025-11-10T20:20:59.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwguarda.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 16:40:33 GMT","end":"Fri, 06 Feb 2026 17:38:19 GMT"},"fingerprint":{"sha1":"5F:F6:FE:A7:1E:0D:00:0F:67:9A:AE:9B:89:60:36:24:57:EB:A5:C7","sha256":"61:B9:34:C8:97:7E:FC:F9:1E:E0:CB:84:1A:EF:5A:A7:92:4C:F7:B8:0A:CC:B5:6A:33:C3:A2:8E:40:EF:7E:33"}}},"request":{"raw":"GET /en/app/launcher/eye.png HTTP/1.1\r\nHost: en.wwguarda.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.3405.13 Safari/537.36 Edg/139.0.3405.13\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://en.wwguarda.com/en/app/launcher/?restore\u0026?redirectUri=%2Fapp%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 04 Mar 2024 18:00:27 GMT\r\netag: W/\"30e-18e0a9fc678\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Mon, 10 Nov 2025 20:21:00 GMT\r\ncontent-length: 782\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEi9R1PDC9o47zsZWhEnrWI2KKIFItV%2B9%2BSH2v3W%2BmTUUp7rSjwx%2BHITJohhJhdDkRHNpJopY21LMU4uiIQSf4sWH0y%2BDrtmt482u2rqZQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 99c840f21d2e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"fe59492ce49a84dbac8e4f651d9a1731","sha1":"099693254e3ebde80f237b7de4fba826e5ad8a91","sha256":"49dfc40861fbad73d12b9cba1ef8c7ad6bb75c2301050b57f06e159ad58b8204","sha512":"072947d2a129e872a9b0eb2aa62fda89b34d54be7578291e305fee13e6d35dac4520e10993cda29fefe20c198374d57bb9f7091a2b1f93b5c7826d19b5e955ae","ssdeep":"","tlshash":"ca0175a9de15c498c14c58ec06f224708d3e94af3d54501919bd48b88275750f7b7b24","first_seen":"2025-10-13T01:36:28.33293Z","last_seen":"2025-11-10T20:21:24.019208Z","times_seen":4,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-10","alert":"Phishing Block","trigger":"en.wwguarda.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-10","alert":"Sinkholed","trigger":"en.wwguarda.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}