{"report_id":"1770479f-792a-4776-a95d-124d2febafda","version":6,"status":"done","tags":[],"date":"2026-05-09T04:47:00Z","url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"title":"Ecount WebMail - Login","dom":{"size":21532,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1014)","md5":"27e305977f012bc301636aa27ac4b590","sha1":"c19f5dfbef51b3a06c1f1b540cb7faf25d2e4b10","sha256":"a8724fc48c63e480bb80938358403c33ef97f68e623630a98d0b84409c111cdf","sha512":"20b8f23d04a8481cadfda4ba55ddf69ebfa3d500a608ddac953d18371abc3f2a2fa69fdf989b95c84a64456c9b74204919ead935e092ab9852a9da70a9be914b","ssdeep":"192:NYD+7Nca26dSpzZIg5eZ9BV9Qq3y3bS3gOv+8qr1hW6WcIZ/96:NI1a26dS5ZIg52VR3HyrZZ","tlshash":"dea2b650a4f91573055381e939a2f6193da2d117cb0ade04baec4bea6fc3f828d0779d","dom_hash":"domhashd91c8d5b13a7fa32efa0619e5f40e989","first_seen":"2026-04-17T23:49:53.707214Z","last_seen":"2026-05-09T04:47:04.624693Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-13T04:47:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"effective-fishstick-hazel.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"effective-fishstick-hazel.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"effective-fishstick-hazel.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-05-03T23:18:09.372888Z","alert_count":0,"request_count":1,"received_data":268971,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"wmail.ecount.com","ip":{"addr":"43.200.46.3","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"domain_registered":"1998-04-29","domain_rank":946475,"first_seen":"2021-07-24T22:10:18Z","last_seen":"2026-05-05T14:50:24.011331Z","alert_count":0,"request_count":1,"received_data":5939,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"resourcev3.ecount.com","ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-04-29","domain_rank":0,"first_seen":"2025-05-15T06:50:42.72999Z","last_seen":"2026-05-06T03:24:46.698305Z","alert_count":0,"request_count":6,"received_data":1209092,"sent_data":3231,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"effective-fishstick-hazel.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-17T23:49:48.402434Z","last_seen":"2026-04-17T23:49:48.402434Z","alert_count":3,"request_count":1,"received_data":22078,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71531f010a975231d230a15cbb05f382","sha1":"d78d2b5f3b558526307e406dcbf069fcbbdeca1d","sha256":"691e01def0b3409a294c83e9843f9dbadfe5eb6e51992fd80a2d3d5dc4851046","sha512":"60e456a6e9e4c6fa2781772810bdcec6aae5cf8729831ce683cdafe1d1f945d0b40f6c6a442869948fb27ac607666724abd6ad19237c105badd557284df6392a","ssdeep":"","tlshash":"95a011032080a0020ab820802b8ea08aa202020ece20a280ba838b0a2b00883282228b","size":76,"data":"","first_seen":"2025-10-16T06:30:22.836863Z","last_seen":"2026-05-18T02:22:19.824942Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fee4784af2a3d85aae73bc973bd9aa54","sha1":"e3abdd0f6a3ef1d9abecb85c05fa5edcde1d4b3b","sha256":"f88d03097547e36e41bec6a28b14c0d87e962e190d2a1eae149ebd736009d0d3","sha512":"772150a38c1bc24f7d63261927d2ff39cd926372ac3c79216fc88e0652d4828d04139a87551a37aaafb12333061fdf9b8deb61ed151f9eeea6246e3784309c2e","ssdeep":"","tlshash":"ecf0a0da3949a5b84b5b25ba712b42c9282492470c05e871be0c79b41f20f82c9ae6e1","size":462,"data":"","first_seen":"2025-10-16T06:30:22.841022Z","last_seen":"2026-06-03T17:38:28.705617Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a33802f34aff0fc2d95588d5075a6128","sha1":"a4152e6f7c8a6ed7a3be6097867db14c828a1d74","sha256":"56c95379baf3bee2a038880d64b556296dd2f1f9d8c5a92a02d157bf8b22576d","sha512":"716ac6b9acc58f62d8d09116038a12d425631c85e314e2934b729b0fc3a85afc247bb9006c113866ec24dae06284c43e047e68ba4decf3f3f283796d0af676de","ssdeep":"","tlshash":"9b41dc0a787b35801db3b03a33bf21097e61a14b1c04ee067a5d5a904f14f1eac777ca","size":2018,"data":"","first_seen":"2026-04-17T23:49:53.728539Z","last_seen":"2026-05-09T04:47:04.637157Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","size":268381,"data":"","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-11T14:31:42.029253Z","times_seen":39261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/css/common-responsive.-727052913155639716.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:45.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/css/common-responsive.-727052913155639716.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effective-fishstick-hazel.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 3872\r\ndate: Tue, 13 Jan 2026 00:37:46 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:46 GMT\r\netag: \"d21ccc5b4fc0ed15383bde0ff4a8229c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: qabjbdD6hE3tHrAnugQysKOOah3Ilzir\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 01TVG_5i14VcBMuFCh8NeFlQ-jbctpng_nr34DFXevP7rnQT6xZVTg==\r\nage: 10037281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17202,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17196), with no line terminators","md5":"b02341b2cd78e3ab9ba018c6ef83e298","sha1":"e8ec29f53db88db6d040432f5cb9afc51b518f3b","sha256":"9e13130b4fab94c28436659e1bf47d44a850776832cfc1e9c23232b0fdf2ef34","sha512":"e63c581e631ad9f111167e3c60184231595448b831acad049a0100f90c46f6ff5b90ebd2995feb712f7bfce9c68025fea99f1e3ec420bfd1ed93b129c020045d","ssdeep":"192:64LyoL4ACVPiBNAJRnZ32BNAJRn1btLjAEzbG8ZHFsVfeT1vtOdfh:6Hm4AC1ZJRZNJRx1fv5Z1vtOdfh","tlshash":"d2721052aff0317f6d35907edf5a37681738113aea5205aef0c5b71e53852aa1342e38","first_seen":"2025-10-16T06:30:22.82173Z","last_seen":"2026-06-03T17:38:28.697284Z","times_seen":102,"resource_available":false,"data":null}},"time_used":2228,"timings":{"blocked":1107,"dns":664,"connect":2,"send":0,"wait":5,"receive":0,"ssl":447},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/images/login/logo.png?2","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:46.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/images/login/logo.png?2 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 78902\r\ndate: Thu, 22 Jan 2026 10:17:42 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:33 GMT\r\netag: \"9f037b958ab4f936c18774ecb1234ff9\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: oMUc23_HnxV6jdrhVtgBV8Ug0R.Sg_xE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ZSZg-Cfk18ZcY6Bo4czFcrlQhve5hK6CJMYm6CjlNw58hgAnFsqQKA==\r\nage: 9224885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":78902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 600, 8-bit/color RGBA, non-interlaced","md5":"9f037b958ab4f936c18774ecb1234ff9","sha1":"98ce7726f8b26ebe73fc69bf2270b9738d51c6b3","sha256":"c97687d6551f4bf74f75a9002c8beed13fc7d09eded0b46a3f3f712191ca9454","sha512":"8c51de86cb2c5811d694b0c733641e123202acf4edb4b57a30ba5663d6e1b394beab245f2defe6d2ec374fb784099d8a4931b5249fae7dbfd80286dc8c8b4378","ssdeep":"1536:s4ENE/M2+v8kxuZPTw/bHYP9qTaANlcuxy7sLkEPnPsMT:8NE/M2+vHxutlqTHhMcnkMT","tlshash":"2373020200764875ea4a10b60f7512433f761543a400fb332e6d79d696e8a7def9eb5f","first_seen":"2025-03-15T02:23:45.467202Z","last_seen":"2026-06-03T17:38:28.703028Z","times_seen":115,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/fonts/fonticon-webfont.woff?v=4.0.1","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:46.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/fonts/fonticon-webfont.woff?v=4.0.1 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://effective-fishstick-hazel.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff\r\ncontent-length: 43116\r\ndate: Sat, 09 May 2026 04:45:47 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:29 GMT\r\netag: \"a8070e70e8878a68824374bcbf0984d9\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: NPuSIg.ADoi9E3sh9R6EUFUWFSsRJdTS\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: u-gE-cfQKrPt12IcYUH1UcHAKYROS0CEruMCTupmQ6XW889dJaA0Mg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16907,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 43116, version 0.0","md5":"1a74b171ed3da1ca7558fb52176f7b5d","sha1":"15a6de5eda2364647b902a25ea2b7b4b7dc4f61f","sha256":"d0fa19cb0a662bd9c9af0053a4e51e123904d562d00f8335323944e6299ecd8e","sha512":"9bfe02afbbfe69044a910fd957b6eef397f865f4ed44223bce689251ebcbe13a1dfa6c7bb69754662753023bc0fb932c572ed7d3f0e8fc838ea68fc1c2cff736","ssdeep":"384:oRJj/rOn98iEZP9Ds3ipv/Yq6yaA8wE7lIMRjlVBUBkvpF9hyAimgmWn4gG:onj/m9eZPdgipv/Yq6A8v7lIC7UBkxNj","tlshash":"0c721966cfc2de8ecd2ae279595789e06dd28d26c039e3c6cf052d163408cec4e7865e","first_seen":"2025-03-15T02:23:45.464761Z","last_seen":"2026-06-02T12:16:32.01751Z","times_seen":30,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":733,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effective-fishstick-hazel.vercel.app/?naps","fqdn":"effective-fishstick-hazel.vercel.app","domain":"effective-fishstick-hazel.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T04:45:44.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /?naps HTTP/1.1\r\nHost: effective-fishstick-hazel.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1211708\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 09 May 2026 04:45:44 GMT\r\netag: W/\"57c0fa9fb699f85931a70956ee866496\"\r\nlast-modified: Sat, 25 Apr 2026 04:10:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::l8dl5-1778301944835-106442875909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21527,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1014)","md5":"57c0fa9fb699f85931a70956ee866496","sha1":"40b304c0b120b4bc559bda3c233fdf1111030302","sha256":"661005ebc1c9f697fd05f09b2a00abb83dfedf8a0e644a3595f8ab87d9341f0a","sha512":"5ccde46e9d8a7d4e941ad3e9e7a5be67d21c161b1181686752b9b1c9e475dbe97e092687e178b39a495450d8f39a947e4f638549e8c5cf6284823d02b3b99db3","ssdeep":"192:NYD+7Nca06dSpzZIg5eZ9BV9Qq3y3bS3gOv+8qr1hW6WcIZ/9U:NI1a06dS5ZIg52VR3HyrZH","tlshash":"84a2b650a4f91573055381e939a2f6193da2d117cb0ade04baec4bea5fc3f828d0779d","first_seen":"2026-04-17T23:49:53.712647Z","last_seen":"2026-05-09T04:47:04.630056Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":33,"dns":10,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"effective-fishstick-hazel.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"effective-fishstick-hazel.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"effective-fishstick-hazel.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/bundle/bundle.style.noauth.6706716913516587922.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:45.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/bundle/bundle.style.noauth.6706716913516587922.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effective-fishstick-hazel.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 161636\r\ndate: Wed, 21 Jan 2026 01:45:01 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:45 GMT\r\netag: \"25dcf74fba6b5259998326ffca635df3\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: dtwb3xUF56UPrIGLERc14m5NgGpU7gT5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: C4XGVvj_AeiJKLvMAECLdVs_EXkcFZYgvtADligMbhCGFkZehxdflQ==\r\nage: 9342046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1004283,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"7c3451a6ff4eedf5490a7ce19609a9f0","sha1":"7341516335c917d6a3279949a3260172afc6f052","sha256":"f48423f63fdfba45215eb500fc40a76e8832c6b1a9719b775cbc59e5a0508af3","sha512":"c648c1e2c8d570ac2e97447b562588b20685dd397d9ef3bd69235b37ad75f25ac11d2ca0d1a5cf60749943b60e4b0621022644155729b5a9e99dba5834d57c62","ssdeep":"6144:FqB+n8nNj1//+9hlU/PngVE4N2UI9d3k5clr4L5yAgjvsyWGpZ2Xshay:F98nNj1//53k5OHbsyxpZ2Xhy","tlshash":"2a2519a6e351373e9e23d667d77d74a82425f10a9d13a6ebb01c2b45428cbe7218733c","first_seen":"2025-10-16T06:30:22.809306Z","last_seen":"2026-06-03T17:38:28.696014Z","times_seen":102,"resource_available":false,"data":null}},"time_used":2229,"timings":{"blocked":1109,"dns":660,"connect":1,"send":0,"wait":3,"receive":7,"ssl":444},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:45.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /ec3/freq/wmail/contents/css/login.-3673191320641001309.19.css HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effective-fishstick-hazel.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 11285\r\ndate: Thu, 16 Apr 2026 02:12:55 GMT\r\nlast-modified: Thu, 18 Jul 2024 02:22:47 GMT\r\netag: \"872b93aa740f7a9faface0efaa8bf6a0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-amz-version-id: sXbC1V5n4jYNPKB1cOwWEndR1n8wHMYf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: rnlr1QSS5c23a4ALtTwBSU0YzbZJSzHxQalPt5cdiTWTvl0-Zgw5vA==\r\nage: 1996372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":45187,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (45185), with no line terminators","md5":"ae4eec031a7176844c743bc2e701d5d9","sha1":"3c12c3adb0846cd88f8083787afea40c670a6a9a","sha256":"692c3846ef59bc6ebb3b45046e73c8dc0549be801addad84997b7d322af7b137","sha512":"45b5a862e699a560e7e06f4c4ffc8bb4c9be12c01f06bf6712d41b8616e29d295fbc21542b7ea1f59462d0f519dc027c49ab76349cf8e2f5a0cd712626da195f","ssdeep":"384:S5JR02JR2kakhNvO9JRT1ZwwJRzMEPHdjx0xBR6JRySfJR2IJR2upx/JRR3ZJRYQ:SuHEqwcLPHtmhSJ13j8U","tlshash":"8413ea3a424c397a6d162a26a6ef758d207de0b16942cfbe6c381d40cd9e33c355b76c","first_seen":"2025-10-16T06:30:22.796726Z","last_seen":"2026-06-03T17:38:28.703869Z","times_seen":102,"resource_available":false,"data":null}},"time_used":2234,"timings":{"blocked":1109,"dns":663,"connect":1,"send":0,"wait":9,"receive":1,"ssl":443},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:45.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.9.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effective-fishstick-hazel.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-4185d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 04:45:45 GMT\r\nage: 2492359\r\nx-served-by: cache-lga21952-LGA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 31, 2541\r\nx-timer: S1778301945.207515,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 79506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":268381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-11T14:31:42.029253Z","times_seen":39261,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":65,"dns":1,"connect":26,"send":0,"wait":28,"receive":41,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wmail.ecount.com/static/contents/images/ci/favicon.ico","fqdn":"wmail.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"43.200.46.3","port":443,"asn":16509,"as":"AMAZON-02","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:46.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/images/ci/favicon.ico HTTP/1.1\r\nHost: wmail.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effective-fishstick-hazel.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ebwTshVxxZlfMUBRQyXaeGyRH6jhXSZDJOQ0V6grMH0PZ4qtw7QjZmvAojAqIlwVV8Fd3o5dW/w=\r\nx-amz-request-id: K9MDTERCYRR7T3VY\r\ndate: Sat, 09 May 2026 04:45:48 GMT\r\nlast-modified: Thu, 20 Nov 2025 06:37:30 GMT\r\netag: \"e3279a746dee822d494b1f832ac5e698\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K0_GZxnJU1h5tvno9b8YIL7mqwZIUCRU\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nserver: AmazonS3\r\nset-cookie: SVID=S3|af67/; path=/\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e3279a746dee822d494b1f832ac5e698","sha1":"7710bce7942674a0de4c9922cb10b1418a79f31b","sha256":"6ef6670479aa92a09a256f3459bbf504f26b851e22ff16258dab7a1d650d4f16","sha512":"af8714710cd53a41985d17ea6a010a76089fe839d0dd425075a2a7df676c3e0c3b470ad218b635312ade55289bd9e7eb751db2a234f767ecadfc3352c458095d","ssdeep":"12:E2AKKKKKKKKKKvvmKKKKKKKSmHmKKKKKKKL2KKKKKKKKGKKKKKKKKHHmKKKKKKKe:E2OP4nQq","tlshash":"bfb102bb63c2c6998854c22cc913afe9c9de5c87f71d381fb95d7e4ab53300004ab562","first_seen":"2024-12-23T09:49:29.524593Z","last_seen":"2026-06-04T09:32:45.611205Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":-1,"dns":618,"connect":296,"send":0,"wait":331,"receive":1,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resourcev3.ecount.com/static/contents/fonts/fonticon-webfont.ttf?v=4.0.1","fqdn":"resourcev3.ecount.com","domain":"ecount.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://effective-fishstick-hazel.vercel.app/?naps","date":"2026-05-09T04:45:47.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ecount.com","organization":"ECOUNT INC."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 00:56:16 GMT","end":"Wed, 19 Aug 2026 00:56:15 GMT"},"fingerprint":{"sha1":"9E:A7:2A:AA:DF:3B:10:8C:D7:E0:87:A3:6D:71:DD:A6:43:45:2A:FD","sha256":"65:88:81:47:0F:31:03:8A:AF:EE:C4:62:BA:D5:22:DD:38:DA:D7:17:CA:E1:1F:59:C1:A5:DB:A7:6F:A0:EC:C2"}}},"request":{"raw":"GET /static/contents/fonts/fonticon-webfont.ttf?v=4.0.1 HTTP/1.1\r\nHost: resourcev3.ecount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://effective-fishstick-hazel.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://resourcev3.ecount.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-font-ttf\r\ndate: Wed, 06 May 2026 08:38:45 GMT\r\nlast-modified: Thu, 25 Sep 2025 21:14:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: yvO8PlHg9LcuNoqe2HP81anl2fMe9JZw\r\ncontent-encoding: gzip\r\netag: W/\"1f55e9592f3c0ccf5cc289db5af2ccf0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7ojX5faWF8zl4PEP3mCaqR8CrO39dRdavUjcmOF5Rlz341V3PR7gyQ==\r\nage: 245223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":43040,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"1f55e9592f3c0ccf5cc289db5af2ccf0","sha1":"fe1b60f4c2bac4ec97189b1906bf50dc8833a44c","sha256":"38666d6f9bf147bf533e751902e310963e157035da71271f7efe83bea584b9a8","sha512":"06bbeca3a812b3f251000fad36948102c7cc2e0ed18f532f0ce4dddf823f3acce46656620689c3f2fc4e87d73acc6b6627d9ffff3ddf62f0163a65d77c721f11","ssdeep":"768:Vnj/m9eZPdgipv/Yq6A8v7lIC7UBkxN5t6rY6qzW3vWWy9IAoXnNPHxs4szAEhhr:Vna9eyipvr6A8vh97UBkxTt6rjqzW3v2","tlshash":"b7131b23db83fbcedc2aa278494781505de98e22d23ed3c69e452d45a414cfc4d39e9e","first_seen":"2025-03-15T02:23:45.466128Z","last_seen":"2026-06-03T17:38:28.693281Z","times_seen":101,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}