{"report_id":"062d5d12-a993-4fb6-814e-66fa80f15e0d","version":0,"status":"done","tags":[],"date":"2026-08-19T09:43:58Z","url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"title":"Welcome | Federal Reserve Bank of New York","dom":{"size":57119,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11636)","md5":"c8e6adea826932633282cec8765cdfdf","sha1":"4558df240bd7317b2bc6f4d576d56fd388eb71d1","sha256":"3b093196bf5a5b0a8a377e7d21da8a892e425494f42863f5153d611f9078d1ae","sha512":"458a0666ce47229806b2f4b2223c4df8c439850d024bb3ba2c86260a78c4139d651e7ca8f6e79389584aebd9016fece3b3abb43311b73e015fed52124f6a4eab","ssdeep":"1536:DhgXZhgXFzNLs2R6Mu2XNhr30tV2X7hrijDhHv36BvFYPo7x:DhMhc5yP36BvFYPo7x","tlshash":"f443d7117991e81a00cf4dc456b21a2866f9eb13d20305cafabd97f45f9fcade673248","dom_hash":"domhasha2e22af118925dc4ffdfe73731ee81e2","first_seen":"2026-08-19T09:44:07.03598Z","last_seen":"2026-08-19T09:44:07.03598Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T09:43:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":1,"received_data":7063,"sent_data":580,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-16T23:15:38.642647Z","alert_count":0,"request_count":3,"received_data":27865,"sent_data":1899,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-08-14T13:46:03.941086Z","alert_count":0,"request_count":2,"received_data":1216,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"federalreservesavings.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-28","domain_rank":0,"first_seen":"2026-08-19T09:42:17.713411Z","last_seen":"2026-08-19T09:42:17.713411Z","alert_count":68,"request_count":34,"received_data":5221079,"sent_data":17481,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-08-18T23:34:26.854235Z","alert_count":0,"request_count":1,"received_data":32123,"sent_data":584,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-08-17T17:31:26.339042Z","alert_count":0,"request_count":2,"received_data":214304,"sent_data":1249,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"federalreservesavings.com/_/translate_http/_/js/k=translate_http.tr.en_GB.wrWIJCRNWIE.O/am=wA/d=1/rs=AN8SPfqQDCzDHeLwZhevJ-UvfbcdAv9c8w/m=el_conf","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9e8076e02672d7f0f173c62e2f801ce","sha1":"8d843c5e618f4ddc3cda89ccc50301909b4df3db","sha256":"d597932fbc38df29ffdddd27d87b95a51f6052519ff1cf27546198e80f15cd28","sha512":"d94f4ce582d5a66dde27b952b6363d10611f014cae27bef2a40a62b6fc2e4e7fbd82aab1cda7028bfc27cc775c2e4fed30bab5ce986c9293f9923fd86ed3499f","ssdeep":"1536:XWYnbstXuozubBQqMwrJXTVkhgvOBYe/7rqWvVAbuKjiowNWdB:XN/B1tJDVzOPOljigB","tlshash":"a093a888b2a271658267b5b5413f000fb27f599af84c4dacb288d8e16df094d427bf7d","size":89685,"data":"","first_seen":"2024-04-30T11:19:40Z","last_seen":"2026-08-19T09:44:07.081739Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcbf868e616fc584a4962ac645f70e72","sha1":"05b050d8b96479c2cfec017bc2ed4225e65e93d4","sha256":"d7637d2215e1f840a8852ae2d4b20a64b28075312e2e6fe28b4d849fa27e6e51","sha512":"2787c495b8b4c609b2b1b3b036d6298a2cba3a5e0f185904eb7184a3212221f74ead837a1c5cf687530d53b80b34b8a07e28649c2bd865634a43d38f7e431426","ssdeep":"","tlshash":"d6b0022cd222170de8b31300bee4243ed04e61051fa9750483ca2af106292d92cac824","size":108,"data":"","first_seen":"2026-06-09T10:39:22.578586Z","last_seen":"2026-08-19T09:44:07.086741Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/js/script.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9ef9ab530fdbc207ca97abcba3be5b0","sha1":"3895bc4ca8a10d2d3743b583d6cef295f72bffd8","sha256":"a8a44a7dea1bb181c3097dcedbfe6ed85a2790289920a19e81436f86565dd54d","sha512":"54a67e623898b3994c6424a1cbcbfe82f6f07c47b295581600b28cfae1984d4f0df5a31a130ca6ca31f9cecaff35cbc5781ee428057a0b67546b4b39e7f1a3c5","ssdeep":"768:eA4Zzc+LkLMpaGlPk+d/MbRuFVECPPovMQZUY08tUEIxIS3IUBanAtMeJPobeMaG:eAYycW0Y08tUEIxIS3IUB6Yc71JCG","tlshash":"3a03c6d6f74c106b453721ac6c6d52c861bca171c9008c7bbc6da6a4abe4c7d633ae3d","size":40697,"data":"","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.06368Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/vendor/flatpickr/flatpickr.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"da3c57326c30dcf6d59a3a4f866e9189","sha1":"a4b2552b79bbca0948fde4860748dbe09c564706","sha256":"fe2ac5219992a3608a5c9e2bc4759fac8fb2189b88d7a674d395ff6c435da536","sha512":"ff414e9aae5f0357023ccef3934b31ff8de7403e5d84116d4b74aa0c4d9900cb31546da683794a34e6d92fbb792143f79b5986252c24ae114d76327028a3a8e5","ssdeep":"768:lAQnzb0qC3AZ1hGI4kf0iwY5Z60mF/OH23r80OxQ8GgEmaf5WE/+J6pPS:lX5C3Vkf0iwY5Z6J9OHuTOxHGgEmaf5W","tlshash":"1e23d48639183d3357da5cacc4af015dbb301fe6488390a0b96ef1587ca8d81927ffa5","size":48518,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-08-19T09:44:07.072925Z","times_seen":1287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_GB.wrWIJCRNWIE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoz05lXvNPWKMwqOF1usHd4eWSlug/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b23f56f68ce6a674271153e8167e6","sha1":"a65509d83429369ac4e43ada1151cc2a7438ea62","sha256":"1d9cb11e03f12b8ae3ff94372e8a7f692f92b69b62b18eaf42f400b7ddac2ed6","sha512":"f2764135b347476d4ec11126777d29aec34a21eff2fcfd781af909d4100a0d62a903b23b7bcbab82b818c24194d0326a904644ce5caa2831fbbe1bb985fe2c18","ssdeep":"3072:afCG0jLUIfyp4IWCVHpJ5Zx2AuKcfS7Tm8VZ:XgIqpJT","tlshash":"0724e9d9b2527066d263f4a5513f004eb23b689af8484dbcb68cd8e26df48590177f7c","size":212914,"data":"","first_seen":"2024-01-12T02:31:55Z","last_seen":"2026-08-19T09:44:07.045181Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/language.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2132f44ea14c90d4f6b707d02d697bf","sha1":"428dcafad8ba31a5786cef80f16bd66537925781","sha256":"d4b42bc77b776da28e454297a2f069bcbf561130af24d4804e201eeb43a237b6","sha512":"b1cdb85adf6fc0d793ce0874574234a81ecbe1724a96cc899202d29d7f9e6738605ef4aaba79f3b08cfec0023d94a6cca78cda294ea7dc55ee4ee6f0573168ae","ssdeep":"","tlshash":"4221a5aa31df909f1315e34307bf480df29cfa82433a54b0a9e888087880e88533cdac","size":1351,"data":"","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.043841Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-08-19T09:44:07.087854Z","times_seen":4582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/javascript/countries.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"27da020aff43db7190dd11bc4b5cb694","sha1":"409f637aa91189207466bd323a377bedc6efb092","sha256":"d3929ff7ebd95ab559611c9f5f3688ae25d5dd2a42a2164e06e98fb51ac047c4","sha512":"c21757dd3b0cf01ac2229dfe2639d64edb97733bcbf574870e451c268b5b608d727e8a2d8fba8a0305c89cbc55e9ccd5ffe8833fa93bcecef4bf64f366ca8054","ssdeep":"1536:x4kcjNQM4fK37wyi701GamPc5971E+6V/XRVuixKik6:WkQyXfK378w1b/9+rV/XRVuWK6","tlshash":"ee436de4b1983cbfc8faa57d8847e3125756c01ea9569c33f8d82e4d8f0e56b6214f18","size":55665,"data":"","first_seen":"2023-06-02T10:14:26Z","last_seen":"2026-08-19T09:44:07.041987Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/js/core.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07d383cb3c462a5f8341bce14aa8501","sha1":"ee082b80c09bacb6b97ea5e4fcdb4291305f0050","sha256":"d3fbe8d67960de17c5a17cd13d54eeeb97a2952a2fe3c62576d4a11c080969de","sha512":"acaf3ae3a81b6c7417ffc055106b18634931c70377bcf84b62bacbbf9df1d57f6f8788884f69a9561dc272c07c0dccb3b142be14c28dee72f41d90a5cee62e1e","ssdeep":"12288:4ezpLO4u9YoR9Kt4BmgcTIUkRuoWmFUxOGSL:4eFO4u9fgt4Bi0UkRuoWmmOr","tlshash":"f5d43a8d7251717243eb21e6617f420b7236652eb40980a8b26dc8ed6dbcc49227ff7d","size":609991,"data":"","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.082955Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/fontawesome.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"884e73502238edc93424438a65ed571d","sha1":"1a39cfe45f8d25350c06a55371953290fd08583b","sha256":"d65190b9987c6b812271c33111cd7c2748789e1af9a029971173f371af8b6eb9","sha512":"cb0693f0cf5bf959c9fa3346d7852045a2a0fa07fcc95062b14d9c7be609ae55b065af41699004e462b961dec205c3fa517a009f3891425e34feefeac15662e1","ssdeep":"768:POYDSmk6tReHNMYCQFzm1vnGMHl7ehNHsF1pivehgXwUz0AH4d:PO2k6TetMVQFzmSvehgXzz0g4d","tlshash":"05f2096d724132b24e57043091ef160eb13abb1a759a8ca1e117e4c6687cedda0b3f5f","size":37331,"data":"","first_seen":"2023-03-07T14:00:22Z","last_seen":"2026-08-19T09:44:07.055565Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/all.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e29440867fdb02a48dffded02338c31","sha1":"c8bfbbfca7eb327e2e98caf637d6de05e5ee737a","sha256":"812ab0e46f86b2ce98ab2425ab2224b90d0845952a1ac0d5abd734b6217e98bf","sha512":"4e7da6d13229815c93cf3be6c4b36ea9b4891f724ff239be0b2de1bc7ad6ee77530dc275c399818a4b2a0c16fc1a913692c92d16f0c1ff2919d260e9b198f6d3","ssdeep":"6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8eK8wDKp:AD57EEhNwtRw53O3l0V","tlshash":"6845d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1196706,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-19T09:44:07.089278Z","times_seen":3739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.0.0","filename":"https://federalreservesavings.com/assets/js/core.min.js","line_number":18,"column_number":454}]},"http":[{"url":{"schema":"https","addr":"code.tidio.co/ynas9z11augeklnxxphbzhvsmheorfl3.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.144Z","timestamp":1787132603144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 20:02:32 GMT","end":"Sat, 19 Sep 2026 21:02:13 GMT"},"fingerprint":{"sha1":"B4:2F:9E:39:BF:54:A9:3D:84:9B:3D:A5:1E:C6:7A:DE:29:83:DC:D2","sha256":"CF:10:9D:C6:D1:72:BD:AB:36:BF:B0:F3:01:C9:0F:59:EA:1D:4A:4A:8A:18:0E:B4:82:77:9B:92:D7:AE:5E:4E"}}},"request":{"raw":"GET /ynas9z11augeklnxxphbzhvsmheorfl3.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, s-maxage=480, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4Asrgzl8D5cKvKScWDwRH5VcCaAGXMiHGtBt9g%2FfanTqJZKZ257wNwXgisX3nrKe0ENeXMu8uoaXgytDsQ%2FUh1OcIRzI2QLX82oQqfbHpjPeAcwizk6cEw9Hkt1n4I%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 114\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2d836b1aa560b49-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T11:45:02.864616Z","times_seen":17973103,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/ban1.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.282Z","timestamp":1787132603282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/ban1.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57110\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57110,"size_decoded":57377,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 768x432, components 3","md5":"dff4a997b3ed39de1caa6e8c065ed4e9","sha1":"115dce97f182b88afb050a5cf5c8d59d9563b309","sha256":"a222fe15acb889b6b98ee3bca82ff94f300aeb478739df45942c2a5cfd7139b1","sha512":"5b75a928fb05088175493dc21896594091343764c0ed434d8957a591c5d66fbe734f750d6e39269fc19edf2cc28195e9ac3247f21cbb439045a4645e5f05ddc2","ssdeep":"1536:C/hw0L4jQxAbYTneQ7mTCL1EeZSS88j40:N0LSQxpTYCpnS800","tlshash":"914312f36edd48a7d87507692321672d1dbb486c3b121d6ad032c1d0f74eb5d82b28b8","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.038477Z","times_seen":343,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=en-GB\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{a36c4f08-94f3-4059-96e7-dbb66bd6bb54}?https://federalreservesavings.com","date":"2026-08-19T09:43:23.743Z","timestamp":1787132603743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:45 GMT","end":"Wed, 28 Oct 2026 20:43:44 GMT"},"fingerprint":{"sha1":"1E:50:A8:26:86:57:06:AF:03:D0:36:74:91:62:52:AE:87:D0:50:0C","sha256":"18:6F:33:F9:74:07:4C:C9:5D:94:38:03:B5:86:40:07:10:6F:E2:91:F9:CC:9C:DC:92:11:AA:41:F7:ED:5A:8E"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=en-GB\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: ESF\r\ncontent-length: 2690\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=534=Y3hX-qKkXAs5IOD1OnShaUZvNyMibV40TbLaxHoGgGRtm8EHWExvl5-Y2EG6xj1py87TeozrI8L4qHMNImP7z3V8SaVUp4UICqbmvD7f2TCJqNh7398IdvIwsDU4-jKDyzj8eCUTgyd4VgNgQSe2nJQ004hhDmllM8M5c_se0RW4C-sN4kCWGGYz5Dkt60t0odl6BC0xksiCwmZOuN8hPmJ6PLKrtUtw; expires=Thu, 18-Feb-2027 09:43:23 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Wed, 19 Aug 2026 09:43:23 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"534=Y3hX-qKkXAs5IOD1OnShaUZvNyMibV40TbLaxHoGgGRtm8EHWExvl5-Y2EG6xj1py87TeozrI8L4qHMNImP7z3V8SaVUp4UICqbmvD7f2TCJqNh7398IdvIwsDU4-jKDyzj8eCUTgyd4VgNgQSe2nJQ004hhDmllM8M5c_se0RW4C-sN4kCWGGYz5Dkt60t0odl6BC0xksiCwmZOuN8hPmJ6PLKrtUtw","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-02-18T09:43:23Z","raw_expires":"Thu, 18-Feb-2027 09:43:23 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=534=Y3hX-qKkXAs5IOD1OnShaUZvNyMibV40TbLaxHoGgGRtm8EHWExvl5-Y2EG6xj1py87TeozrI8L4qHMNImP7z3V8SaVUp4UICqbmvD7f2TCJqNh7398IdvIwsDU4-jKDyzj8eCUTgyd4VgNgQSe2nJQ004hhDmllM8M5c_se0RW4C-sN4kCWGGYz5Dkt60t0odl6BC0xksiCwmZOuN8hPmJ6PLKrtUtw; expires=Thu, 18-Feb-2027 09:43:23 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31256,"size_decoded":3557,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"61e97bdece891215e62b18cabc8f1cf9","sha1":"6aefc1466b40486d418ac41951dd62b47d2a5524","sha256":"428b7615810a23a8c57dba37b1c12189ec96dc2ea2f3a1ab214762c73c2d17f0","sha512":"1adba68ffda7ff575f0c71e4c5533b57311b38995e217116e9c35df73201cb5705f87f045a76b41732d57043282ac2017b1a876737bf1dd04634f98bca627f13","ssdeep":"192:STvoh18oUO8HnhZFncLUVizrTvoU18oUO8HnhZFncLUViT:Gohx8BZWLlznoUx8BZWLlT","tlshash":"4ce256bae9b50c9b2a5e25b012ba2b53302051d71eac3c053b5c0e4c6fdec5e2d7179e","first_seen":"2024-11-05T04:11:36.208137Z","last_seen":"2026-08-19T09:44:07.039423Z","times_seen":200,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":30,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T09:43:22.364Z","timestamp":1787132602364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 05 Aug 2026 12:59:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5623\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":25139,"size_decoded":6052,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (506)","md5":"a0b0acb58da3fd51c4ed709af928c25e","sha1":"333488e7aa77e889f4702440648233b5377713aa","sha256":"8fbdf79ca48b442ab4bee6ad510602637f062e58c85010cfe13db0490f397019","sha512":"17e473536359d5e2394712e267553a9bc370616c5c767dd90d264a5217cb1bbb0c44ecd24d39b934646bef1003d52d2e2e08553004d10a47befa40fd1dfc0e65","ssdeep":"384:Js9JqwZz/S9eGs2mfFSWnM79HxCc2BWT9L9yp0K+K8HVqwXi7LOUvMGUkRNvFYPx:afFSWagc2MT9L9yGK8Hj6LOYRNvFYPx","tlshash":"bbb2832074f5642b00c790c56aa21b16aff9db27d50b5605b6fe4be84fa3c8add3394c","first_seen":"2026-08-19T09:42:26.335094Z","last_seen":"2026-08-19T09:44:07.039971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":31,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/vendor/flatpickr/flatpickr.min.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.672Z","timestamp":1787132602672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/vendor/flatpickr/flatpickr.min.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2810\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15954,"size_decoded":3119,"mime_type":"text/css","magic":"ASCII text, with very long lines (11843)","md5":"30f64a741bc93036f3122eea50392b8d","sha1":"67c96d166ca3ac5321b4fbf905eb5b4bb4dfbdaf","sha256":"661e00570c65c29528d9ce6ee19e5e9939986716c293def67b07f8b6a191b018","sha512":"998acfd7cc5f154dd0c44d8cc7d4659b60fc58ee205496b7bf6b650985bd9442cc22cbbbec43c239f0f852e9a3ec02537929e885ead04200a2ea3d759f456282","ssdeep":"192:z6B/T2d2Y/TV6w51BY0njIN7JtPqCqsWYeuN/GBOUkl8/d7jRir:2Bb2DjIN7JFjKudGBOUklL","tlshash":"f262523695321219a537eb3b1ef022897312c122a5c21adee6de77318bc770e25f92d5","first_seen":"2023-04-10T08:07:22Z","last_seen":"2026-08-19T09:44:07.040642Z","times_seen":1802,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/css/style.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.677Z","timestamp":1787132602677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30658\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":246068,"size_decoded":30968,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators","md5":"68bdb2e9a42acf8585c7ebf3b5ce12f2","sha1":"64a98a3977ef328256a10afe8f78c20d6c131583","sha256":"e62211ce4bd8ede4f2e10fe0df5d6cc41c242a60b19589cce79144b1ea917343","sha512":"643e5534294e40074834ab9f5e187655082ed1715642094b2cde22a62e4442e96958fa4d272e23b83c172dbf7f234aeb57ce16b2baa626c51022155b32bd1eb9","ssdeep":"1536:7V/S27Y0Z+2QqP8Pd9rac5IMNPj8CMKmOEI:76oCf","tlshash":"0034939ca657300ea303ab9cb3f55b215f1990326f1b49dff1d2514ec2e96ac53226ce","first_seen":"2025-04-27T13:44:34.224979Z","last_seen":"2026-08-19T09:44:07.041431Z","times_seen":290,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/javascript/countries.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.690Z","timestamp":1787132602690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/javascript/countries.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26736\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55665,"size_decoded":26974,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3562)","md5":"27da020aff43db7190dd11bc4b5cb694","sha1":"409f637aa91189207466bd323a377bedc6efb092","sha256":"d3929ff7ebd95ab559611c9f5f3688ae25d5dd2a42a2164e06e98fb51ac047c4","sha512":"c21757dd3b0cf01ac2229dfe2639d64edb97733bcbf574870e451c268b5b608d727e8a2d8fba8a0305c89cbc55e9ccd5ffe8833fa93bcecef4bf64f366ca8054","ssdeep":"1536:x4kcjNQM4fK37wyi701GamPc5971E+6V/XRVuixKik6:WkQyXfK378w1b/9+rV/XRVuWK6","tlshash":"ee436de4b1983cbfc8faa57d8847e3125756c01ea9569c33f8d82e4d8f0e56b6214f18","first_seen":"2023-06-02T10:14:26Z","last_seen":"2026-08-19T09:44:07.041987Z","times_seen":357,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/webfonts/fa-solid-900.woff","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.146Z","timestamp":1787132603146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/online/assets/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T11:43:15.972169Z","times_seen":151100,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/upload/968kinsmen_favicon.png","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.345Z","timestamp":1787132603345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/upload/968kinsmen_favicon.png HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 13:03:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57503\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57503,"size_decoded":57769,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 448x446, components 3","md5":"8067a6f49a4b24052132b07a3c7ba242","sha1":"f19ff83b3d4229ec097e9c3d4a27abf82ce42f5c","sha256":"65104b8ed0277a7d0bc140e1ed33d6cd7abce5010cc8d5a01d0e8189c588aa4d","sha512":"f8ac7b64d3a401bbf5f0ee5bf7f11aa6244b78f5c2f2080989bf241f6ccda7145975f765a2cebf831347cd5ea8e05432d6b6d03f0a134d6c650039c24888c5cb","ssdeep":"1536:bLWIKn4PUedu8mjN1657FXPveJIItT+obJn8VjilxUVw+L:O74Mt8mjH65t08a8VjileVj","tlshash":"9443f29888c721b969ff661c84e2af706db74909ab69df95234342f3cb944b7008c5fd","first_seen":"2026-08-19T09:42:26.319191Z","last_seen":"2026-08-19T09:44:07.04312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:33.567Z","timestamp":1787132613567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://federalreservesavings.com/\r\nOrigin: https://federalreservesavings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://federalreservesavings.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 19 Aug 2026 09:43:33 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":533,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T11:45:02.864616Z","times_seen":17973103,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":28,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/language.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.687Z","timestamp":1787132602687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/js/language.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 712\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1351,"size_decoded":948,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (657), with CRLF line terminators","md5":"d2132f44ea14c90d4f6b707d02d697bf","sha1":"428dcafad8ba31a5786cef80f16bd66537925781","sha256":"d4b42bc77b776da28e454297a2f069bcbf561130af24d4804e201eeb43a237b6","sha512":"b1cdb85adf6fc0d793ce0874574234a81ecbe1724a96cc899202d29d7f9e6738605ef4aaba79f3b08cfec0023d94a6cca78cda294ea7dc55ee4ee6f0573168ae","ssdeep":"","tlshash":"4221a5aa31df909f1315e34307bf480df29cfa82433a54b0a9e888087880e88533cdac","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.043841Z","times_seen":351,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/all.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.695Z","timestamp":1787132602695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/js/all.min.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428789\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1196706,"size_decoded":429028,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65350)","md5":"2d9d9b069e47169ddae2974313b81ffd","sha1":"c6571df94b2761716f88ef6437175e1a04b1a060","sha256":"7e4ff4e387c60326df452201a8e4d43c52817ae2b07cbad481711a3326537913","sha512":"8c652cccaa0fe30618aca6a34cf8ebd6d002c6363a7b8141e2c4dac8769cc0c867ea2ccf4ae10c21a73b410868a051e034943e72e550ca35503173a333d171fc","ssdeep":"6144:9YompD57E8DjS2sDVW4oUchNV2Dnio/NULo9tRtKeDVs3O3seX/YJF2S8o:AD57EEhNwtRw53O3lS","tlshash":"9125c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-07-26T22:50:29.143682Z","last_seen":"2026-08-19T09:44:07.044634Z","times_seen":2340,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_GB.wrWIJCRNWIE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoz05lXvNPWKMwqOF1usHd4eWSlug/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.019Z","timestamp":1787132603019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.en_GB.wrWIJCRNWIE.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoz05lXvNPWKMwqOF1usHd4eWSlug/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 73587\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 09:41:26 GMT\r\nexpires: Thu, 19 Aug 2027 09:41:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Jan 2024 00:11:15 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 117\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":212914,"size_decoded":74444,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"c15b23f56f68ce6a674271153e8167e6","sha1":"a65509d83429369ac4e43ada1151cc2a7438ea62","sha256":"1d9cb11e03f12b8ae3ff94372e8a7f692f92b69b62b18eaf42f400b7ddac2ed6","sha512":"f2764135b347476d4ec11126777d29aec34a21eff2fcfd781af909d4100a0d62a903b23b7bcbab82b818c24194d0326a904644ce5caa2831fbbe1bb985fe2c18","ssdeep":"3072:afCG0jLUIfyp4IWCVHpJ5Zx2AuKcfS7Tm8VZ:XgIqpJT","tlshash":"0724e9d9b2527066d263f4a5513f004eb23b689af8484dbcb68cd8e26df48590177f7c","first_seen":"2024-01-12T02:31:55Z","last_seen":"2026-08-19T09:44:07.045181Z","times_seen":501,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":17,"receive":27,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/pay.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.022Z","timestamp":1787132603022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/pay.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 252310\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":252310,"size_decoded":252578,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82\", baseline, precision 8, 2560x1707, components 3","md5":"03dda808042f3a0e3a1df315121cb20d","sha1":"017b209760e6e4ace617fcbdda1369c520b1369c","sha256":"2ccff1a76ad6739d0b7b6f4a036d374c2331064fe4e01f3ea0c1bd10289745b8","sha512":"409513aa38230a562c03dcdace5aa231e0f1a4d4ba66b46c990ec2767221a950d067f20959be6014ccac99eede6f596e0e8571092b2162e889a5e9de3639849c","ssdeep":"6144:6QTGGWXAXie6TGi1MZFtj2x8WpqcLWHiqCAX:6MGoS9vyFtj2dpqvPX","tlshash":"28340293880ddfc3906d87e8bf174b5c1b432b5ef1823cdf61a8aa4779316111ead229","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.046139Z","times_seen":349,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/fonts/mercury-regularc4ef.woff","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.071Z","timestamp":1787132603071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/fonts/mercury-regularc4ef.woff HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26828\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26828,"size_decoded":27094,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26828, version 1.0","md5":"6d9a7b8cf5f24ce717aea5c470a1f0de","sha1":"90cc880c8347260efde0cb265c46f6158e673fdd","sha256":"2db79787e5180b42b8a4e49755f41a637dac50d12a87e19bd504133345a2fa0b","sha512":"f7f3afa0569ffc1154093db542d7763292e44823bdd7edb61c0d7a9564c6922306f17e05a9f93d35f239046016404dfb8793da550d56f12b6dc80e68aca4bc24","ssdeep":"384:SdWoPL8z4D1K91YjlvoNDQAEqOxf8lHZ2nSQdNWgNKRHvRaXm+pQleig:GWoo9slvK0jVFGZ2nSwW6m+pQ9g","tlshash":"bfc2d08eda949b01f0c88ca3a2d5eb1558ddbdd46685938fe140bf9e06d1fc1423c9bb","first_seen":"2023-05-19T09:04:44Z","last_seen":"2026-08-19T09:44:07.04689Z","times_seen":433,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/fonts/materialdesignicons-webfont14e6.woff2","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.076Z","timestamp":1787132603076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/fonts/materialdesignicons-webfont14e6.woff2 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79756\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79756,"size_decoded":80023,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79756, version 1.0","md5":"380a87ac162f7313bdc7556fcca4fd38","sha1":"4b29d05c0445f92f14a1c058fc06e34ab6e7f869","sha256":"56ca131e02e335cbc5604cf53451ad97f160b33a46bba0b0b8f41578de9715c1","sha512":"589b7c0ecee83caef16b5ae433fcdace49fc7a56faa491bcbbccf1b0b154fd9953380277b0d6193dfe4c12fabf27400c0dc6cbb0bd22e00f62db60349ca72e5e","ssdeep":"1536:VvZft0QGumed0hO5E8uoXO8W9+FxBJCyVHv0ZdKr8e:VvDc8dkO5E8uo+8Waxzh0de","tlshash":"f47302614b6630ba06ea1fb723d61511488624f1306cf2fe6b6ddd2981b94321dfe9ce","first_seen":"2023-05-01T23:21:28Z","last_seen":"2026-08-19T09:44:07.050066Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/css.css?family=Lato:300,300i,400,400i,700,900","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.671Z","timestamp":1787132602671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /css.css?family=Lato:300,300i,400,400i,700,900 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Jan 2024 07:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 200\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1046,"size_decoded":686,"mime_type":"text/css","magic":"ASCII text","md5":"39e67a399282a6f934bd6cc2b9ddd2d4","sha1":"0041fcd6eac316a576fe28acdaa5374c9051ee76","sha256":"78775bf03edbf5e3fd6de3b33bcf6fc0e8cf4d7bad60556d75d5f91765ec8d01","sha512":"634e767aa4f4633f66f7c5efeccd02b2c88fcd48373afde19d3f9bdecbffe7945deabf1f442ecf3aaa809b80a8da2d4c1451953ebb685b73d589e03e5b85a628","ssdeep":"","tlshash":"c011dd55025ee579e5600daa33df2e38ee4d24482097c47ec7b94cd8ace2c2b4351f5d","first_seen":"2024-08-19T20:37:00.78502Z","last_seen":"2026-08-19T09:44:07.051661Z","times_seen":296,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/css/fonts.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.675Z","timestamp":1787132602675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/css/fonts.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17953\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114280,"size_decoded":18263,"mime_type":"text/css","magic":"ASCII text, with very long lines (365), with CRLF, CR line terminators","md5":"c080a07d2604cf22bf81e9334eac3c25","sha1":"98e7ce8e63ba0e0cfcc4f7886cabee6422c76714","sha256":"9810332735f6956672a0db633a010f4eaad7fa6884d287154351ce7bd8dc7500","sha512":"75e60fa0ac895f8b3ca35de55c08a053171f860cf9616c9c2319584bfe59324052221401f606e5bdc58b7dcfe0a4063540dd2015af813d1ec7c46a137f3a4a96","ssdeep":"768:9lhiJKiL8+lGzcUZeXTT5/1LTa/7WM73gEvVnH73leRHXXxuHo7DGmuP:9lhiXlGYueXTLLm/6A3reRHHxuHoemuP","tlshash":"c2b327b4dd4d11b35782fa99e34163d2732dbe6ceb402e5ad0063d3d99c362419e23ea","first_seen":"2024-08-19T20:37:00.787257Z","last_seen":"2026-08-19T09:44:07.052458Z","times_seen":307,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/js/fontawesome.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.694Z","timestamp":1787132602694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/js/fontawesome.min.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12484\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37331,"size_decoded":12722,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37145)","md5":"884e73502238edc93424438a65ed571d","sha1":"1a39cfe45f8d25350c06a55371953290fd08583b","sha256":"d65190b9987c6b812271c33111cd7c2748789e1af9a029971173f371af8b6eb9","sha512":"cb0693f0cf5bf959c9fa3346d7852045a2a0fa07fcc95062b14d9c7be609ae55b065af41699004e462b961dec205c3fa517a009f3891425e34feefeac15662e1","ssdeep":"768:POYDSmk6tReHNMYCQFzm1vnGMHl7ehNHsF1pivehgXwUz0AH4d:PO2k6TetMVQFzmSvehgXzz0g4d","tlshash":"05f2096d724132b24e57043091ef160eb13abb1a759a8ca1e117e4c6687cedda0b3f5f","first_seen":"2023-03-07T14:00:22Z","last_seen":"2026-08-19T09:44:07.055565Z","times_seen":511,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/side1.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.024Z","timestamp":1787132603024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/side1.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48513\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48513,"size_decoded":48780,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3","md5":"9e76ccc1717e1ad3b409c455f6de392e","sha1":"4b93fe3a7e91f2695c9d122c12371b28b6d91098","sha256":"f610e7f66ba9e5d5bfbef8656dddf23399068de617c7a83289899e408989683b","sha512":"c4e0aef26c9aea8985415d47165f4314f3930f06fb4cc708f75cdfba3b18c9cc82fba40ec36184b8bf7c6e502c0e8effd1cca238321dfe5dbe485a6a52e8324f","ssdeep":"768:kX+jLqhKMYWuWDI7YZqJKnoESDlIxRYpxIXpZgSAsMAdLJnVDnwyEOLbwaqbJTeQ:kXgLqhKMhulYDSI3YpCZZtFEO4ay5Tzr","tlshash":"e423f143e58e4b0c8a5e5f73923c1ec19b1c4c90f3146c827c61e14e6b7b4966b6f9a7","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.058051Z","times_seen":347,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/webfonts/fa-solid-900.woff2","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.075Z","timestamp":1787132603075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/online/assets/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T11:43:15.972169Z","times_seen":151100,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/webfonts/fa-solid-900.ttf","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.195Z","timestamp":1787132603195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/online/assets/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-19T11:43:15.972169Z","times_seen":151100,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/ban3.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.279Z","timestamp":1787132603279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/ban3.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 117150\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117150,"size_decoded":117418,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 (12.0x20100115 [20100115.m.998 2010/01/15:02:00:00 cutoff; m branch])  Windows, datetime=2021:02:28 10:30:49], progressive, precision 8, 1920x718, components 3","md5":"21519159bf4b0181ebc72de75047e72d","sha1":"f2626138213922a306ea75d107d6942c2b048a57","sha256":"617f882b6834af41fac6c138f31ae7560e08566920e75b41ab6b8568b99387e0","sha512":"30653252b937990611309f6656c35f92f831bfcb4284dbe770edb0b07e97a3c5f985013e6d44bd6e8bf4effed6293575acb0dda57ec71d0e20ddb187d07e9c81","ssdeep":"3072:I/kofcvXSBEC3jDuJzRXwokFQeIx7Xo7PqQXSNM:S56C3jDuJzifQeXPqQ4M","tlshash":"0fb30214a2a5ec16f9d0ad38f469da493332c51d6753c423bc1cba2a773038a4ddebb5","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.059913Z","times_seen":344,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/css/fontawesome.min.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.683Z","timestamp":1787132602683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 18:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12122\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57873,"size_decoded":12432,"mime_type":"text/css","magic":"ASCII text, with very long lines (57687)","md5":"a227f005fa7ae066c1068ac4b963514c","sha1":"0a5885758759f084fdc5fd16a550deb8be722ea8","sha256":"0588d1661498d804543dc1537f9784877a962b9f0ef3c4ccee765eb7f2543611","sha512":"3fdbc95172be2f2bc0ce3f28b5338acdd7c5d45dd4615975dfe17c1687fcff640d6fc4f077a55bf950f9d88efef3bb5ec7d517c67ccf816037ac7f7a444c40ec","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzO:PE0PxXE4YXJgndFTfy9lQC","tlshash":"5043f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T03:24:42Z","last_seen":"2026-08-19T10:38:18.587451Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/css/all.min.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.685Z","timestamp":1787132602685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/css/all.min.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 18:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12370\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59305,"size_decoded":12680,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-08-19T11:31:23.91409Z","times_seen":47881,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/js/script.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.692Z","timestamp":1787132602692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9734\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40697,"size_decoded":9971,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b9ef9ab530fdbc207ca97abcba3be5b0","sha1":"3895bc4ca8a10d2d3743b583d6cef295f72bffd8","sha256":"a8a44a7dea1bb181c3097dcedbfe6ed85a2790289920a19e81436f86565dd54d","sha512":"54a67e623898b3994c6424a1cbcbfe82f6f07c47b295581600b28cfae1984d4f0df5a31a130ca6ca31f9cecaff35cbc5781ee428057a0b67546b4b39e7f1a3c5","ssdeep":"768:eA4Zzc+LkLMpaGlPk+d/MbRuFVECPPovMQZUY08tUEIxIS3IUBanAtMeJPobeMaG:eAYycW0Y08tUEIxIS3IUB6Yc71JCG","tlshash":"3a03c6d6f74c106b453721ac6c6d52c861bca171c9008c7bbc6da6a4abe4c7d633ae3d","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.06368Z","times_seen":356,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/fonts/fontawesome-webfont3e6e.woff2","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.073Z","timestamp":1787132603073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont3e6e.woff2 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/assets/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":77427,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-19T11:44:21.260697Z","times_seen":533102,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/vid.mp4","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.129Z","timestamp":1787132603129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/vid.mp4 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncontent-type: video/mp4\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\ncontent-range: bytes 0-27236718/27236719\r\ncontent-length: 27236719\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1338905,"size_decoded":1339115,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ceb210e769a87d3242f69d29575235b3","sha1":"0cb6ae473a05803efa316b66b46ef1364038511d","sha256":"0f0d0fdf66ccb018e84298f747960ebeb781eea2d011c87eec027d8a51936a48","sha512":"625c6ac6cacaeb3ac0a752f7bb61d5c64d45d7e9b67ae56f9557774318a165c9ad4b4b2dfbd711b58208010a66bf690e77468a1cc88d10b1ebd5e5b729709cf8","ssdeep":"24576:rGmzy3LOn9AgOm9zUlyn1yCr1bSTLxHMNpTnTMCTb:63C7p9ziy15SpsPnTvf","tlshash":"1825338af795e207f1245135fef30b244f95eae3235126233b8096076e6d2e86ec19f5","first_seen":"2025-08-05T12:03:51.007267Z","last_seen":"2026-08-19T09:44:07.067751Z","times_seen":44,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/upload/968kinsmen_favicon.png","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.342Z","timestamp":1787132603342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/upload/968kinsmen_favicon.png HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 13:03:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57503\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57503,"size_decoded":57769,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 448x446, components 3","md5":"8067a6f49a4b24052132b07a3c7ba242","sha1":"f19ff83b3d4229ec097e9c3d4a27abf82ce42f5c","sha256":"65104b8ed0277a7d0bc140e1ed33d6cd7abce5010cc8d5a01d0e8189c588aa4d","sha512":"f8ac7b64d3a401bbf5f0ee5bf7f11aa6244b78f5c2f2080989bf241f6ccda7145975f765a2cebf831347cd5ea8e05432d6b6d03f0a134d6c650039c24888c5cb","ssdeep":"1536:bLWIKn4PUedu8mjN1657FXPveJIItT+obJn8VjilxUVw+L:O74Mt8mjH65t08a8VjileVj","tlshash":"9443f29888c721b969ff661c84e2af706db74909ab69df95234342f3cb944b7008c5fd","first_seen":"2026-08-19T09:42:26.319191Z","last_seen":"2026-08-19T09:44:07.04312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.629Z","timestamp":1787132603629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:10:10 GMT\r\nexpires: Fri, 13 Aug 2027 10:10:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516793\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-19T11:32:31.068722Z","times_seen":80163,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/css/others.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.678Z","timestamp":1787132602678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/css/others.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 18:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 306\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1008,"size_decoded":614,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2d167398c5ece6bd52752c5e8ff6d05f","sha1":"75bbef0f4f92efe64338c7c0b097bd23ab8d2999","sha256":"0c3378c612315237483e3b901784c54250939ade0b4955f070ad33ab9eadc517","sha512":"ddaa318afde7401158ef7e600b510ed0c809f61a5a2d438a63193347811568324ea9bfe209993f26308234019fd6c6945508923390313964361b073edc123de5","ssdeep":"","tlshash":"77110892735d914e8241470265b6bb28dd6cdc3097560ffff969b130cea9054075d7f1","first_seen":"2024-04-30T11:19:41Z","last_seen":"2026-08-19T09:44:07.07163Z","times_seen":322,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/online/assets/vendor/flatpickr/flatpickr.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.696Z","timestamp":1787132602696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /online/assets/vendor/flatpickr/flatpickr.min.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 18:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13376\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48518,"size_decoded":13614,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48480)","md5":"da3c57326c30dcf6d59a3a4f866e9189","sha1":"a4b2552b79bbca0948fde4860748dbe09c564706","sha256":"fe2ac5219992a3608a5c9e2bc4759fac8fb2189b88d7a674d395ff6c435da536","sha512":"ff414e9aae5f0357023ccef3934b31ff8de7403e5d84116d4b74aa0c4d9900cb31546da683794a34e6d92fbb792143f79b5986252c24ae114d76327028a3a8e5","ssdeep":"768:lAQnzb0qC3AZ1hGI4kf0iwY5Z60mF/OH23r80OxQ8GgEmaf5WE/+J6pPS:lX5C3Vkf0iwY5Z6J9OHuTOxHGgEmaf5W","tlshash":"1e23d48639183d3357da5cacc4af015dbb301fe6488390a0b96ef1587ca8d81927ffa5","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-08-19T09:44:07.072925Z","times_seen":1287,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ynas9z11augeklnxxphbzhvsmheorfl3.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.900Z","timestamp":1787132602900,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /ynas9z11augeklnxxphbzhvsmheorfl3.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, s-maxage=480, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06OU9dcAQ%2F1XBbr9G5D8fXuTqt8JsLks%2BuD9Dw3FK5dFw5rNnLMG6t%2BtzHGfOWF6j7D1Wz8svaCWX%2BV5i3peTUNLCYo9ZVp6NZhg9X0iXBW%2BxvBMKnsZUSHpdtZv%2BF4%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 113\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2d836b039860b49-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T11:45:02.864616Z","times_seen":17973103,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.h-8nNKmS1Ow.L.X.O/am=wA/d=0/rs=AN8SPfqOzVW1i408g0LEgF6U1C6yVO6EEA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.017Z","timestamp":1787132603017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.h-8nNKmS1Ow.L.X.O/am=wA/d=0/rs=AN8SPfqOzVW1i408g0LEgF6U1C6yVO6EEA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 4190\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 09:41:25 GMT\r\nexpires: Thu, 19 Aug 2027 09:41:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 01 Dec 2023 04:11:49 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 118\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22917,"size_decoded":5039,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22917), with no line terminators","md5":"6522218677337f86e43b9a17e0209090","sha1":"5cb8aba04193baf1c9dd93ae9f75376a1a02c56f","sha256":"f7d07c4040dea3c1018d954f71e55193fa1e34c5c2bde0492e8f95f582ce2b8a","sha512":"bd5c3aa07002e4f15240bdeb22bfd88487dbbfb672aff58cdb7a994b78e14698a5f376834d942c90b11af09ec06422d867d0135a0952a25041f4a509a4e15a9e","ssdeep":"384:kM78SievMpjuFzoqCWaqWoYlpTpIQoPNYsCnG:172evMlcQoPsG","tlshash":"4fa2cc21079ed019a7afe85354d36dff72d488db50113eeaaf5a3352cd822f231ea215","first_seen":"2024-04-30T11:19:41Z","last_seen":"2026-08-19T09:44:07.074309Z","times_seen":776,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":17,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.630Z","timestamp":1787132603630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:24 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592379\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-19T10:01:54.122332Z","times_seen":57502,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.632Z","timestamp":1787132603632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.h-8nNKmS1Ow.L.X.O/am=wA/d=0/rs=AN8SPfqOzVW1i408g0LEgF6U1C6yVO6EEA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 17 Aug 2026 11:42:44 GMT\r\nexpires: Tue, 17 Aug 2027 11:42:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 165639\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-19T11:32:31.116147Z","times_seen":75144,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/side2.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.025Z","timestamp":1787132603025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/side2.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108187\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108187,"size_decoded":108455,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=Young man sitting at the cafe and paying online with credit card��\u0005Yhttp://ns.adobe.com/xap/1.0/, orientation=upper-left], baseline, precision 8, 509x339, components 3","md5":"985e7a30b617e5d28e62cfd75ee1d1ec","sha1":"84c0333f12d312af93197d56be141a0fd082862a","sha256":"cb0753f3f9b14910c094a227b97597ce693556e11363d34e3e079cc4caa2c587","sha512":"6324a9817e5fecf6bd271a501817c5f0b8cda22d8e348c99814a6b30f6ad85fd7c427f73a832a9dbfb326f3fb0d27044b7a1b26b380381d2d116fe2224e43413","ssdeep":"3072:7uuk0K/jSTWlf+dQ1OIuodlzRVp3nlRLvo:KuIbnZM+uAp3Vs","tlshash":"e7b31252b5f762b1ca5893712dfdd84cd2c20b20b3d49b90fa557a7a497854fc32e388","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.079775Z","times_seen":349,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/cen2.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.702Z","timestamp":1787132603702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/cen2.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153421\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153421,"size_decoded":153689,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x920, components 3","md5":"76ee61cff063388f12561842795642a9","sha1":"7fc243553309902b5b912179a51befdba64e5b38","sha256":"3934fbc5bdf4d845ac2aa27ef418c2cf1da1c1a5cad97ed43f1f24cfbcae5d4b","sha512":"7695f0b1700fe1bdc4bb667ea155c8dda8a147520451a54ec232abe40842e019258ab62b051be358253916727041e25612d0fb6e2310eb5dfe8a411ee90f6d74","ssdeep":"3072:SURKb2RLydchyj/47XvkmWioL9g+04k6Geaze7RuruyhaKSQdoN7s:SURvcdchTpa9g+Y6Ize7RuruyFSQG7s","tlshash":"72e3129cf7c1eb60de1a2a3010d3d2d0779e575d87801f9a16fc19120b8a2f4da96f7a","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.080406Z","times_seen":349,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/css/bootstrap.css","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.674Z","timestamp":1787132602674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/css/bootstrap.css HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17781\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146790,"size_decoded":18091,"mime_type":"text/css","magic":"ASCII text, with very long lines (579), with CRLF line terminators","md5":"f53900ebf9b51a81077e914ffe5ba917","sha1":"a8fb8cab661543cb5fdc404523c931709ef964f0","sha256":"db7eeb5204ea8714bf3d57111f1356461d6515922df3da4ae50669976b7cf143","sha512":"c8da5b889d978e073d8b126f1082587fd3d0c128e8541f475cdc32dc5551a21119aab14cb8175cb08f4a6a1e771024be60d35df2f3b02a1231e3413b19f400c8","ssdeep":"1536:gS5jObJZ1dZR01xA1eKXbQMGK64p3kWPKEnPGEq:D5m0WPKEnPGEq","tlshash":"bbe376adb592204f47838b88a7b56e755e398030d76bc5fef0e32618c2c89981df25dd","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.081123Z","times_seen":349,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.688Z","timestamp":1787132602688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Jan 2024 07:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30091\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89685,"size_decoded":30329,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2084)","md5":"f9e8076e02672d7f0f173c62e2f801ce","sha1":"8d843c5e618f4ddc3cda89ccc50301909b4df3db","sha256":"d597932fbc38df29ffdddd27d87b95a51f6052519ff1cf27546198e80f15cd28","sha512":"d94f4ce582d5a66dde27b952b6363d10611f014cae27bef2a40a62b6fc2e4e7fbd82aab1cda7028bfc27cc775c2e4fed30bab5ce986c9293f9923fd86ed3499f","ssdeep":"1536:XWYnbstXuozubBQqMwrJXTVkhgvOBYe/7rqWvVAbuKjiowNWdB:XN/B1tJDVzOPOljigB","tlshash":"a093a888b2a271658267b5b5413f000fb27f599af84c4dacb288d8e16df094d427bf7d","first_seen":"2024-04-30T11:19:40Z","last_seen":"2026-08-19T09:44:07.081739Z","times_seen":327,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/js/core.min.js","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.691Z","timestamp":1787132602691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/js/core.min.js HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 160688\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":609991,"size_decoded":160927,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65330)","md5":"d07d383cb3c462a5f8341bce14aa8501","sha1":"ee082b80c09bacb6b97ea5e4fcdb4291305f0050","sha256":"d3fbe8d67960de17c5a17cd13d54eeeb97a2952a2fe3c62576d4a11c080969de","sha512":"acaf3ae3a81b6c7417ffc055106b18634931c70377bcf84b62bacbbf9df1d57f6f8788884f69a9561dc272c07c0dccb3b142be14c28dee72f41d90a5cee62e1e","ssdeep":"12288:4ezpLO4u9YoR9Kt4BmgcTIUkRuoWmFUxOGSL:4eFO4u9fgt4Bi0UkRuoWmmOr","tlshash":"f5d43a8d7251717243eb21e6617f420b7236652eb40980a8b26dc8ed6dbcc49227ff7d","first_seen":"2023-12-19T05:07:27Z","last_seen":"2026-08-19T09:44:07.082955Z","times_seen":356,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/img/ban2.jpg","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:23.280Z","timestamp":1787132603280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/img/ban2.jpg HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 01 Apr 2024 18:30:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71964\r\ndate: Wed, 19 Aug 2026 09:43:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71964,"size_decoded":72231,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x808, components 3","md5":"cfd6bc5b32a72b9fef49bbaf5c378f29","sha1":"413658250db8db3c822459b88e265c2f39d20bf5","sha256":"28a6669775da28d794f6c3ce33e9c34b658b33e65983e5ca9196eabe46509f34","sha512":"79b09382bd96a873cdb54c1f1d5666095bc80f64f9cc8e3fc6ee2dc650d4421109f95025c964935efe332f0ebaf861aea95cfc009f8e9e26a7ce4788055d9615","ssdeep":"1536:NxO10np8hq0s9zewE6MkPZ/168jO7ZHL1aSw6Uq:T80ahJ/J4J8KeZpaSyq","tlshash":"b163df5b5b917981f0a18a7c11f74b17bb79c022b68753abca3810217cf33a56d069ae","first_seen":"2023-11-09T05:18:54Z","last_seen":"2026-08-19T09:44:07.084169Z","times_seen":352,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"federalreservesavings.com/assets/images/logo/logo.png","fqdn":"federalreservesavings.com","domain":"federalreservesavings.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://federalreservesavings.com/","date":"2026-08-19T09:43:22.907Z","timestamp":1787132602907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"federalreservesavings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 11:31:28 GMT","end":"Fri, 30 Oct 2026 11:31:27 GMT"},"fingerprint":{"sha1":"C1:14:F9:B1:A6:BB:C8:A0:2A:69:F2:BD:32:A4:35:B1:B2:21:76:12","sha256":"BD:74:5C:88:07:5C:EA:BD:AE:FE:68:1A:5C:BD:59:A7:37:00:EB:AC:2A:AD:87:92:33:26:24:47:09:6E:1C:7A"}}},"request":{"raw":"GET /assets/images/logo/logo.png HTTP/1.1\r\nHost: federalreservesavings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://federalreservesavings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 09:43:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 12:57:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14319\r\ndate: Wed, 19 Aug 2026 09:43:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14319,"size_decoded":14585,"mime_type":"image/png","magic":"PNG image data, 238 x 212, 8-bit colormap, non-interlaced","md5":"79bf57bf344765231be95668055fb5d2","sha1":"782037efa667b81d94f9bc827c67bfdce62c5e36","sha256":"cf0de0c97dc2d5f474f509edd2a5108fbfe3f5d9560467ce9b2d41e18edd4245","sha512":"97384921d8755d7fd9feed2a6a2b7659f77d5622881b37a8c64abb24e851965a7ad95aaa4cb8abd8cac5e0e44d65b2153b7cc7dbecfbec7fd229848ecc458421","ssdeep":"384:CACoKL5irISZ3FXiIx7V/Ddku+HgeFxcbMDQqj:9627V/DdPs3kbMHj","tlshash":"0852cf9265cb91111cd22970fb05212c729e5781d094283df61b5fb6dfbf9eb8a04ace","first_seen":"2026-08-19T09:42:26.337588Z","last_seen":"2026-08-19T09:44:07.085546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"federalreservesavings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"federalreservesavings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}