{"report_id":"1c2d0ab5-742a-4534-a24e-b1488528f36c","version":0,"status":"done","tags":[],"date":"2026-09-12T18:45:44Z","url":{"schema":"http","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"172.67.181.196","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"title":"HSBC Press ~ K2-12th Grade Bible Curriculum ~ (772) 545-1455","dom":{"size":116961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26339)","md5":"743ad4b1c630559ea15a77698a8c6046","sha1":"ae59192371c040b0f01ed9b5eb9b7168e0f8e2cd","sha256":"5a5d72ea7bae562ddafbf0975340d281be1d1a1b068a1773f416e9ea770f4281","sha512":"f1e0d5342e71c696e66d9082c5d991cf9c47e4d036d0ebc424f26c782eef84bc54326e157454d9b72c795cb3252bc38a3e05c198cfa07bae8e23327113dff303","ssdeep":"768:PLtfjZdypaTCrpvlvImIB2wAMm1RKp+SYk80gjpE7YhrkTFhg/Lv8LpxwipV:ZypPrNnwLm1T/FE7YhrUF8LvKbwipV","tlshash":"e2b3f9af5bb6327972138759fad97728826cc22395120dd97c69a14c8f81bf301b721f","dom_hash":"domhash89fbd5ff8e3fc04b97fbb4088bd9a8fa","first_seen":"2026-09-12T18:24:23.229396Z","last_seen":"2026-09-12T18:45:56.956877Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"172.67.181.196","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T18:45:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":103026,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-09-10T07:51:20.745815Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"form.jotform.com","ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-11-09","domain_rank":26652,"first_seen":"2012-07-07T19:04:45Z","last_seen":"2026-09-12T13:45:37.737016Z","alert_count":0,"request_count":1,"received_data":36944,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]}]},{"fqdn":"events.jotform.com","ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-11-09","domain_rank":176883,"first_seen":"2015-06-12T10:07:49Z","last_seen":"2026-09-09T19:47:42.172454Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":670,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"75f04dff3930.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-12T18:45:53.003505Z","last_seen":"2026-09-12T18:45:53.003505Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"hsbcpress.com","ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-12T18:24:14.886513Z","last_seen":"2026-09-12T18:24:14.886513Z","alert_count":50,"request_count":25,"received_data":2884855,"sent_data":12969,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Divi","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS:4.27.8","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:28.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":195268,"sent_data":2847,"comment":"","tags":null,"fingerprints":null},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-09-09T21:36:57.029316Z","alert_count":0,"request_count":3,"received_data":2284951,"sent_data":2518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":3135,"first_seen":"2018-04-03T03:49:29Z","last_seen":"2026-09-11T09:52:50.200643Z","alert_count":0,"request_count":1,"received_data":356422,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jotfor.ms","ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-28","domain_rank":110910,"first_seen":"2012-05-29T14:25:03Z","last_seen":"2026-09-08T12:30:31.647774Z","alert_count":0,"request_count":15,"received_data":1928720,"sent_data":7945,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11a83cd25aa7.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-12T18:45:52.999503Z","last_seen":"2026-09-12T18:45:52.999503Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-09-17T18:48:13.463498Z","times_seen":70249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/errorNavigation.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c39b92d9e8a5b62b5324df5b6ff11481","sha1":"2ff2002f2eae663ae8bcaae9aad7b2855c2dda6f","sha256":"18e6ffdb46598c47d00f5d7a94fc73a3433a15235a7a57f802df232d6f03c2e3","sha512":"4de336bc9af2cf710f5f5f8a00fad40875bef63fd4ca1e16baedfb6edf69cde6b80b0929af4ee9ff3e9c8562d98a7315e5e7f3dc98e4eb76e14cf689dd82c493","ssdeep":"192:ju7GRcWLCsZLL2vh61zxG3jeqRsyBQI2MRUr03Y5mWo1C5anN66mCa0iidLCUZLp:j0WOs9LEh0zu6qRswQZMRG5mW867CtLp","tlshash":"5632758518b22177483b227b739f4041b57150ab5428ee0238edd2547fd8ea05aafbef","size":11290,"data":"","first_seen":"2026-08-12T16:17:23.285391Z","last_seen":"2026-09-17T16:17:58.602853Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/static/jotform.forms.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16e6ee130f7beeb1d3dd2a5c46eac3c2","sha1":"f202f3f6efbed641af78da34bfe17da37a3e58c9","sha256":"60a8c704e31b333da853b9fa9ec2e7f7f71097464547d4440ff5bb20906db3a6","sha512":"d5a9f267c6bfebb854071526fad1c4f9157496b85e8283c9ce276d4051315f0d5ddaf22a8ce6b5e5f2045aee62b290dded122511e4fe750bf5542ba40fb7ca55","ssdeep":"12288:SZu2+CUqMBBBiR5Z5AnR0GJ0+x4OqX+0XOX/Hj0n:SA2aqMBBBF0GJ0pX+0XOX/D0n","tlshash":"3bf41aa5756021b60aff13bb60ff938977312374d8010494a57c98a526bce87237bfad","size":743739,"data":"","first_seen":"2026-09-11T10:00:55.882214Z","last_seen":"2026-09-17T14:12:23.140725Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"260ff0f48b8109c511f68f078a21c9d1","sha1":"d3c6a71e9ee00823ea715c4268559413db840e7c","sha256":"149d495d0882769e1a3885cead4b6e1615147d4fcd178657f945517794a28859","sha512":"5a8b868e25509528bd4d5898c51c7792179371635c2314159336df8465de8b0510a0efa21a3af5c85246969c0a613b59eed7caf27e43eed34707bbd09f6fcb45","ssdeep":"","tlshash":"9be02659114a080b3a32002c234ffa86e013607b8fe96800b80c0a24af75a53c5441f8","size":350,"data":"","first_seen":"2026-06-07T08:55:00.711847Z","last_seen":"2026-09-17T14:12:23.144497Z","times_seen":400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15f8f9a5299d26ce3cb14c079a8da206","sha1":"15f9d54da33172c81a3798d95701213506b8b102","sha256":"9fad65b9cfc275a8b25c8ccdf49095e96dad90d4882dad0d9ba3a4ecdab53582","sha512":"0344882d44ac665697ab0e7c3191a5e7ded4b85376ec0fecce37004da971e8c276e161f55e517bb772d2248a686fd4907915aff17c824dfec77707d0b1f8b66b","ssdeep":"","tlshash":"698000e0008020aa002c82af2332222022080c828032082a0a00082ae8c82038a888c0","size":31,"data":"","first_seen":"2024-11-20T22:50:16.295565Z","last_seen":"2026-09-17T16:17:58.698982Z","times_seen":3040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"065903517dde38f3aa040540ca0e5354","sha1":"6aab7781c430f820c6dfa8d445410d29cf4785dd","sha256":"75ba92727916114f70c9affb9fc17453abbf747416ea676fa0f1353c0ab29587","sha512":"0bb0b3c3d19f05d3fe3ef64b08abf8c4179282a408255acf25a4c7358eb6ae5563a158ea2015f1b73dea69ce9898e059c02fc09559c7f08992400a776f58ade8","ssdeep":"","tlshash":"239004500503543c541c475101d31d101140f45f044101d0c150041df5403c307455dd","size":40,"data":"","first_seen":"2026-03-20T22:56:10.922031Z","last_seen":"2026-09-17T16:17:58.699985Z","times_seen":1454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"30e6bbbbc9c82e6fc8390a3e14c1bd2c","sha1":"e5e43d830c506bccac51024b774d545ec3c21886","sha256":"e6f0e767227fa7491a7d7c41fc03fc30d6d953a4304181997ab1b6f339a29304","sha512":"833c9a80df050739212afebda9a0848a46af2dd5ca9dd14db76b0ecff4871fb3458d480ea2de45ab7278ae9d6a5df3eaf51b0b2d32087ef6323fa2f275a60d32","ssdeep":"","tlshash":"7980045f00013545113044d433c7f5cf54071045044100154404110130404574444044","size":35,"data":"","first_seen":"2026-01-01T03:18:24.037631Z","last_seen":"2026-09-17T16:17:58.703177Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea1f9c000f521a76da97f37fdcd0e812","sha1":"3e9b613829a1b90e088f52eeac8c906abc451698","sha256":"8dc374faf7a90cb84ca5b3e4d5481d18546ebcefa911917d74e2a0d2dd3861b8","sha512":"8535c2b4964caef03470c371faac05a5319d92137271045f6b88d73e718b36cdb72f304e49f717b0dd76b8c764e1a79cd6eac13c98b04b813cda31dc123c76f8","ssdeep":"","tlshash":"26a0025f820696d6167355f4378365dd715221291842416ae01d674ab004d5e8c39884","size":61,"data":"","first_seen":"2026-09-12T18:24:23.28485Z","last_seen":"2026-09-12T18:45:56.992229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ad48f426e5504f01512660a800025ae","sha1":"843c689479136db9e00506835f4f761abc868859","sha256":"afe0996e92ebc4b4be72b5a7ccb41f4d7d9a3fa30e929a2967fad16c0c8252df","sha512":"2dec9bbf455129da6b93670a90f26f36f2cb15a36472eadc2699f874ffe068519088602dd8e5c3cdaf7d19b16e0f5eb8c958551f7cf6a40efcd0b49f62091f7c","ssdeep":"","tlshash":"17a0025f8a56d6cb0d7395e4379365fee082513d0ca2506ac42f6fc2b084d5f865c194","size":67,"data":"","first_seen":"2026-09-12T18:24:23.286001Z","last_seen":"2026-09-12T18:45:56.992766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fdcdb41fdc333bb0fdbd908224641f0","sha1":"70be70c3e03b4622c078511c2a1e62e4dcae4103","sha256":"9d5ce3ed994e4c88dc581f2909d6087e3e8e46eb23cc6bd6cbd5c4a9565f0fa2","sha512":"67e86bfaad4c6a162a3436b09b740a9d82c39a5cf53c555dfdf8ee306ac121697b0defab80bdd3c76386b0767b59f3e490c229154143597d693487286b9f1aed","ssdeep":"","tlshash":"e1b0125ac404f4c1c4ea103147751507400010086e4805389607d4ed576c15301eee90","size":88,"data":"","first_seen":"2026-09-12T18:24:23.287043Z","last_seen":"2026-09-12T18:45:56.993331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e76fac8006d58d2324204984e29ef932","sha1":"66689a8a763b55d7fa55924ea480b5c1636d9c5e","sha256":"1e26bb2e386d9618a462f347646938a2cd157900232219c09029ce911bdf7c83","sha512":"4ef6a46bd71c92b6116bdc2480fc0a67e6eda9a5c58237f4e05edf339633a7c36e910bd37d30102a57b52c59c2a3ec78747d93844df828b5e6ce544957bbd8ff","ssdeep":"384:1TT7rNOoVKaZ4TuDxVF+NX2NQ4FcVuDSIE9ea4FrPa0:xTkoV5DxVF+NX2bcVumn9ea49","tlshash":"1452b64b068625bf1f4702c63ccf9d467bd051f5eaa00e0db06e046ab1eadcaf14b399","size":13221,"data":"","first_seen":"2026-09-12T18:24:23.288588Z","last_seen":"2026-09-12T18:45:56.993911Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0eb1c8f811a9cd4286db3cd3049418c","sha1":"d9fa3df1fe71e3f0d17fb708bb0f23a16d49be5d","sha256":"6f62e3d6742436e15bef17b666f1fb9403176e5443d10122c557e5acc0cbfc37","sha512":"7877e170c8ac3731b5fd1222ef85d71f9c608182928443bd63adf97ac2508dec0ba0560e0e01c29af185ecfed2cdc077bca7a3c50db1f02f584b984fb13c9054","ssdeep":"","tlshash":"6ef06d3859b3cf532e6313f96befe44a51d74907528a8c147fac48c04f818582bb9b4c","size":633,"data":"","first_seen":"2026-06-10T14:31:40.272127Z","last_seen":"2026-09-12T18:45:56.994675Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16888fdb9469b3de44002b213d4bfa02","sha1":"089840eceda42de338a4173b8c49ca296ee7e196","sha256":"340416398ea5129b10ca55255fdc4ce1d6c607959eed22884c3dfa6c058c3c5a","sha512":"a8383a5252ec2aaf973f102f837cbf3430f6f06554c18d25167e57e55588a7015f19c52a645c5839baad18fb120b3fa91e8c06c3121478e35628e3c645b33947","ssdeep":"","tlshash":"6b800002bc00a0ca0bc8b3f888b2c80a33a008b080b22be0a020082e003228808cbb22","size":33,"data":"","first_seen":"2026-06-07T08:55:00.716966Z","last_seen":"2026-09-17T16:17:58.70896Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e348a65131569e17f3448c41dde9a87a","sha1":"b318dde460d85ffe935bfed1bf5bf5bdeb280d76","sha256":"31c80290919082d13f32e7f418dde469859659913be4ad0afe0495e0f2077ce2","sha512":"0a18258a2f5dc0fb5af03f9cddef8275cce25324f8617d0a59d2d240f7dc30103c8aee7d520a8d13f49e2abc29f7b3ad9dcb56c288d6e6e34a2d077afb9d3d33","ssdeep":"","tlshash":"18900445745455d0cf555f0d1170dd703740d1d4517003c0f4c414d4013075000d7304","size":45,"data":"","first_seen":"2025-08-25T11:57:40.824512Z","last_seen":"2026-09-17T16:17:58.709558Z","times_seen":899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"704db593407d7b570025e7efa7f9b8d6","sha1":"d31eff45eb6098140a0216c85155273f5e46cbdd","sha256":"5b04d5e19b1caa0e02b2e7fa984618457588cdf239c3ec620d85b6c37d9a0e41","sha512":"dd6dcae479ab3129d85c5fbe031d0a99d42dbb9bed70c89229c4c2deb3933c8b43834db35e7f17665a5a48fe3143c94d296be284ecb6a0f6fdcc0c65579e2b66","ssdeep":"","tlshash":"b5d012441c2241797733ab6dc37f10d6165803079e9c74a6be1ee053af64926f8dd077","size":209,"data":"","first_seen":"2026-09-12T18:24:23.291859Z","last_seen":"2026-09-12T18:45:56.996212Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d0330e47d802384d965907a050230ff","sha1":"6133c3ac88e201d5d288fc80138fdc86bc962aac","sha256":"170e7fabf1e12aa5d9a8a8c3efa888b5f189745e40ebcf70ff79b55360dd2569","sha512":"bc32579615d5fb6757ad57bba596288203961b00c4081da2d547c7016ea5af941636ab406f8a600076bb6ea9e173bf9afaeae9312f697b2d1c191c7a2938df12","ssdeep":"","tlshash":"11700088008082a3c2020300222888ae30028823c020008000302300082220c0002302","size":23,"data":"","first_seen":"2023-06-26T21:29:36Z","last_seen":"2026-09-17T16:17:58.711566Z","times_seen":3181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/jquery-js-after","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eb635a95b8a2d5c4ed9652072d4e5c7","sha1":"e8c3759410074d65363123d72499d6c330fff5b9","sha256":"95fdac6baa7b5a9dbec450c34134a6af9340f7d2667b1e88c2419670697b4e27","sha512":"72dda122f40660332b550a4164f14f363122642e6eeacf4aff066db6f3d551ee3cc56a00b2d8350982aa9d5e9622b5e75fc208af6a9ac3f2d29dc3ef7399eccb","ssdeep":"","tlshash":"49d0a75df248ab9d10b31834a42b5329607f7731f5564058914ee464283ed191153a80","size":291,"data":"","first_seen":"2026-05-22T11:02:30.496404Z","last_seen":"2026-09-12T18:45:56.997192Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/156ef9683ba4f3cd3d10596965260ef6c0cbffe55032c7e9e7b8b03e7acd6355/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62f5588c20fdd4e8ac0f411b51ab6784","sha1":"f429f42ff28698654bebdda57f008f609cf0d456","sha256":"8834eb280c5784a0174c41de364adc4afe1fb5042db23ff12754d3f66d38ebd5","sha512":"c8569ca2f74fe00ce0b97787a23061ca2f0918524b8141066e5ad05951533ccb4224c9eda04837f6ce9396e0ef6d1df19835fe20f7a3d930bac9e75493c58cbe","ssdeep":"24576:LtjtfdZclQhLCxLZC/nSkJd48OfKMV83zQ1lFDNkQhMJ:VXr","tlshash":"8f253a7e6317aebedbb601fd049a73676c4844eb81858d91cf4dc5a7a4a01bf094a0fc","size":1029525,"data":"","first_seen":"2026-09-12T18:24:23.275859Z","last_seen":"2026-09-15T08:46:09.558022Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5cf85f5319541b973cec298560e3db","sha1":"4e6b7bbc4d565b965a1db971597f340464e99577","sha256":"54354334d453444ba9c144d69eaea2b5a35d7354c511515b5d5e319404bb1a8c","sha512":"ab47f12cb8484093d5b53c17e866e3a465c669218749d05f31cb28ca3f6bbfb3281b81d9ae267a164d455a5a55221c90785a873f4f57ae2c65e25350819a06e9","ssdeep":"","tlshash":"1390047170114c34074d100d713cc3d43cf4405077433c00c07c504c0070dc34400d4c","size":42,"data":"","first_seen":"2023-03-07T01:16:43Z","last_seen":"2026-09-17T18:35:13.285542Z","times_seen":10441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89125ad04aa60b44b078bda9f3a1ca29","sha1":"9c277746a57e669b793154fd2a4291fbbd4b5ace","sha256":"82fdf6f7dd07c87fa7c1455e2a0029f9c18aa81ba304576d2f689d5d55480f5b","sha512":"8bc579d1bc746de32705e5ae88861ec14705bcaa47e75b6b42ac1382a6874489fbd761460770b715c16715c40ddc4b19ad343088cb4d4be90189c215994f8e99","ssdeep":"","tlshash":"96011e195e12e2dc55b2652ef13b43b879ff770730d6909da90c645d1c1ce1974226fc","size":735,"data":"","first_seen":"2023-03-07T12:56:05Z","last_seen":"2026-09-17T18:35:13.286086Z","times_seen":7143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb0435fb6ba10869497f9fd09d72b10","sha1":"42ef3655cbf2afe82fbce6427a2d7540dd2f7d29","sha256":"27f1693733f6e44cfeb8f73c98537a3ad33bc45c3c82f3ac352f57eb7657fd71","sha512":"a80c89849ade3a8428b5666ae9dfa76d3004418901e18b20bee9fb4ba46b9cc7ea8f8ad87a2c643646b093d1bc1b0f0aed0cf10cfd6f19b32fafa34a03251efb","ssdeep":"","tlshash":"07d0231d324cbfdd00f31814e43f5329507f673175564054514fe4542c3ed191153b80","size":208,"data":"","first_seen":"2025-12-11T13:04:04.267229Z","last_seen":"2026-09-17T18:35:13.286563Z","times_seen":4182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0524409f01b0f7303500240d58afe54","sha1":"a5725d6f1ee741be375ee7309a7b49a2d5cc02f2","sha256":"4c622157f65f7d7cd58e7605b3d192108f1c30ccf0e5656b20130afb7275588a","sha512":"4aaff0116a470394c8678295629003250f708bb02c74b1bea4850adce85724fa8ebc66c2603d6fe2366a3307275fed6dba14841ce7796e708a3d96e221795a83","ssdeep":"","tlshash":"6371ceba8c574934416368aa2babb649367240573008e8213c5cd214bfb4f6787adffc","size":3641,"data":"","first_seen":"2026-09-12T18:24:23.296368Z","last_seen":"2026-09-12T18:45:56.999707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30f579ae38cd9f7d5c7e1c1a320099b6","sha1":"3d6d5d21b954e5827403ab301c6b0b4a5a328fcd","sha256":"79cc14e7c78da1a94c2776d1eb62684efc63afabee154c2fbd4a988504e832ee","sha512":"663b284386ac296199738fd5960cf286d5eb925747527b561243d973721eed7e6250ff0077d4355f88f6f3d31c3ca2b6cca453255e13eb53bd93b21e99bd2830","ssdeep":"","tlshash":"dd21a0e9272e8efb65af26aa453f231a40feb5d082dc0cc3e9e95c28cb506350413d19","size":1372,"data":"","first_seen":"2026-09-12T18:24:23.297337Z","last_seen":"2026-09-12T18:45:57.000281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d01e3bbb3fb8dffb6711250be9df05b4","sha1":"e0ad17eab971332427f01a83c4a24c6982803059","sha256":"28aceb124fccae25e413192437c3c0d7d0d56bb2c0e76c3845d960539cb68e3d","sha512":"ccae19a34745cd14e737043053ed9152ca26839422f016830e0a966e7c6efb4810fe252482fe27aab0e41a442ef9156b7897e6bd0b9c96116b75533e641c3a82","ssdeep":"","tlshash":"e2c08c14ba68988447ca82b380208fb5034c2a828c12f422b690800810aa2ca0d83c21","size":151,"data":"","first_seen":"2026-05-22T08:31:20.41869Z","last_seen":"2026-09-15T12:21:54.911231Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"148a702a8c6a513e7c39d6b364359440","sha1":"7739117a9760f085ff94236bf59c11c163fe44df","sha256":"1ee33177ba586e34569acaecaeb55b257b340c526139ee7b98567d982c770719","sha512":"af517381469a68c8fe85d0bc80ffa4cd58ff1ebdb56aa3b5e9ee10f3631127f0de947f5d54fa491a67eab7a18b9554367109da80e829b41194551900f0798ec3","ssdeep":"","tlshash":"183111b648895e364fb3408d682ebf06d8a54179ebc4ad18eedd481d13cae662523609","size":1590,"data":"","first_seen":"2026-09-12T18:24:23.299484Z","last_seen":"2026-09-12T18:45:57.001365Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/umd/53f877d31b4/for-aria-notify-polyfill.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51825f3b42fa274aa9c57ac4740e9161","sha1":"f19b94bf7ea07ac755e922f500aa42761fee0b2d","sha256":"803ed748d3ee62e44d293ce409e316f7e9a20a251ba5fed558e8839e0d6c2b05","sha512":"6f5f1c984f87f3d56e0d035c3e3a16fe53bee37202b3bcee63585769be5722c2ca80023dc8c8d6a1ad4a563a4ac5b7739dcae1ac1c40cf228394aeae7ab5cf8b","ssdeep":"","tlshash":"4581d704f326b17606f720a7722f0247f531545a5d46081476eceaf778f2e9a61b5f30","size":3854,"data":"","first_seen":"2026-05-12T14:53:19.648376Z","last_seen":"2026-09-17T16:17:58.638221Z","times_seen":1071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"542047d5519f8f7786da3347cacd50f1","sha1":"26126775ecd7dc31220350803c52a7906f5b7f84","sha256":"044864a3a23637e127e34fb229fb61ad454086cdcddc913be30cf177d1808f2d","sha512":"a95b0d5e19779e50e983254ac5cffb26bd6f0245baf36a4d931a9c8edfdba26ebcc7e331a13c32504e6002f7a8d5ee3e353fe6d85d2340f9eb90c38498b7f78b","ssdeep":"","tlshash":"699004dd34c370104753115400571cc4f074dc70144c4d40c04cd4511cd5030711d45c","size":39,"data":"","first_seen":"2023-05-12T18:19:29Z","last_seen":"2026-09-17T18:48:13.464768Z","times_seen":2942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/secure-message-bus.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6fd0164c7d5f12dc98fd717e12b540","sha1":"da28b2fe3fca98b6f57403e9208fdcb4afef6831","sha256":"14f65246bd6da3f493f5ed1fcc151c182b1ff0c5ca15237bf45459dabe0d7717","sha512":"4abcf511b68571ba2062a228ed13da10c62b8f8c98d9824bb031d64f6206d9430eb7e26fb1c4271de5d888da76c553227229d8fb48b4e6d6cc55332e0e14a023","ssdeep":"384:S74ZVnyUm9PDUdfxiqxs1aqJt3liZLfeeO:UaVn9mdoQHJt1gL5O","tlshash":"c44275de65e72c1a0b13b1ad9b9fa49172356853240ce680fc1c4fa05f6562d82f37ee","size":12644,"data":"","first_seen":"2026-09-08T12:16:10.059614Z","last_seen":"2026-09-17T14:12:23.064636Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df0d709e41d1360d78ad68ff27da0d24","sha1":"b182a49d746fbb23a337c628fb0532f79eca1114","sha256":"99ba6db8522de562ccf84562b9f0c25da483393a9ed100bbd82c1478185f5f71","sha512":"a19676cf7f7590b25c8b5923215d1d1f75410c1bee12a03f7571aa7e9e44658dda8f95bcfe262d8616d4f8346b7ae32ee36704bfe62224a07f8c1629fdb81130","ssdeep":"3072:3ej+eZFrMyB5Jhu+hVCnQsH+SbtK/gZAcHj6PGp56S3dzRsttCxoS0+7iU5nIMCS:p8rM2hBqK/sASjog6tCxo3Q5IML5","tlshash":"6674d88cb3a5f4b162fb60a5402f770ab1766c16b40598c0e272e0f49d78d8e6163f7e","size":369288,"data":"","first_seen":"2026-08-20T07:44:00.40122Z","last_seen":"2026-09-17T18:00:01.027963Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa07f10043b891dacdb82f26fd2b42bc","sha1":"9c1dc49e9747758e033c0e9a7d016401bd78602c","sha256":"462747422c6af30aa81a0373fa1cfd736455cef52bdbb816f67be9531d84eace","sha512":"828f723649ae5a7b996de43fefc9b904d1a1d54f83671cc6998fdc7e0bb75c7761c8e0bb4a4497f2e4658606c193953c7019d7859e6ebab3db34c794ec575618","ssdeep":"","tlshash":"1361316932a6282d4d5330ef1eaf4014b619c0b707ebe86c78be85c98f849480625bfd","size":3349,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-09-17T18:00:01.044594Z","times_seen":45062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-17T18:42:10.790758Z","times_seen":415692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=checkbox\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a8108feec1c4f8177df726c3952d116","sha1":"6a1b3978b8eecaf4fe9699bc6f4af319febe148e","sha256":"f4a5f645dd0b637b31eec3d54837532c901d12ba3f3173f078d8c73413ac79f5","sha512":"597131440395606dc2e510bd0e5ef1fdc0bf7ca462eb70a52ba515e785bb4ba4bbbae4735227321636e06cf6577d2b700a8a7891dfc4b6fc2ba0786c6b35c6ed","ssdeep":"6144:4wGsCcCsa8ylcZv0PsGfEtdLzB6iFMa5EiZoN8eSyA7uE2:y9Ca8yq6ifEcL2","tlshash":"ccd4e6ab6390712e42db53d194ee220b23b7d92a2516545cf731d8efbc6c64b103eb39","size":625054,"data":"","first_seen":"2026-09-11T21:55:41.895841Z","last_seen":"2026-09-15T08:15:07.253973Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/vendor/smoothscroll.min.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbaa5350ea1e35997f589fc49947accc","sha1":"fc9253ec0b5dea916b9255fb0445e99c733164c8","sha256":"49176b244de4b07d2a8a79cd8663a2fced053acc22b1807929521665d09f3e3a","sha512":"c84dba63ef055137ce0fd9212e33bdd76f7a747dd01bb24fb319c67f63cb9c2930820066bce802499828f897ca967d1311d9403f03cd02d55f2b6bc3b321f66b","ssdeep":"96:TuJQHAqIgxbv0tAp3LWBE7MKmslSrKigRUdA8eCu:+QH/SaMMUdZeCu","tlshash":"23a10d49a41171c31def4290c1becb4b7065a327735348d4182aefb8522cfff618baa9","size":5056,"data":"","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-09-17T16:17:58.683532Z","times_seen":2126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-09-17T18:48:13.465441Z","times_seen":65558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-09-17T18:35:13.290578Z","times_seen":36572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-17T18:41:55.748415Z","times_seen":202238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-17T18:35:13.260318Z","times_seen":968930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3430044318f2c4008f856e39717b1db","sha1":"3165d2243ddaba79838ba0d4ba3708eafd79595f","sha256":"0e0ac3858c11824cc19725149dc85d70c84a21e8dbf3536284f9a911693e71da","sha512":"f0be531550a22aefef55c33f7b2628faf4bf377cf5ac10df5f5c90e91cb27ea30227d86762e3e9b726aedda8b113c77eb816a7bb2b571dcf1cd242109a5e8524","ssdeep":"6144:bwjY8/viA2Buwqpaloel4rdhLqIaU5yxQ:yQuN","tlshash":"5c743ebb6791a22e53e757d0d8e9230b23b6dd272414241ef331a8efbc5d643503da26","size":355549,"data":"","first_seen":"2026-09-11T21:55:41.874842Z","last_seen":"2026-09-15T08:15:07.231222Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-17T18:35:13.278609Z","times_seen":68834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-17T18:35:13.282082Z","times_seen":1059715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/divi-custom-script-js-extra","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75ac67ac1d4c86c4b8e4c543e3b93925","sha1":"25db7d3a75001f7fe3688c04d2a0682e35c33280","sha256":"3e9b07a819e34e4832dd62d080aac7f236434bd6d4c21836bc90ac181b893466","sha512":"6e6bf60be7fe1b819fb5ad680be3f523a50f95be3d5073ef0d14ffcd271ec6426941f5aa4b4f62291020814f69bb6d8553b71caa1c6da7a8d50b2bc6de90fcf8","ssdeep":"","tlshash":"a24144b6c8491e324fb340bd682ebf07d8a54179ebc49c08eedd441d13cae622523609","size":2113,"data":"","first_seen":"2026-09-12T18:24:23.30244Z","last_seen":"2026-09-12T18:45:57.00539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/pgc-simply-gallery-plugin-lightbox-script-js-extra","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f33f41ceb7642dd0fc09b927863b4b9","sha1":"06b733f8c10f90a2541f02029caf160ce0da8a99","sha256":"23bb53491dfb82b4f7708837e7867926a29a2a3833baac2dc7fec377225f2dc4","sha512":"359544f39eddc5dcc0bb2a005aff0fabe132382d4a268743ce91d802c75c46945b572b173a43ad2f5f30457aba2e438acf91f0de9b20bb14140fb5093db09a4c","ssdeep":"","tlshash":"be018c14fa68988487cac6b380208fb6038c2a82cc12f422b694c00810ea2ca0d83c21","size":669,"data":"","first_seen":"2026-09-12T18:24:23.293439Z","last_seen":"2026-09-12T18:45:57.005921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/punycode-1.4.1.min.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f57ed28889ac6c64cd5f338c757f3a5a","sha1":"89a78113a6d87756c5c17b3cc5d901f21222d7aa","sha256":"e18bd528ff34a5e1e62a82cde24e3271f4f2296db9fccb6f11c94a4ddf4b193e","sha512":"9ce02dd1c4b55f14f90067ecb445d849b648921c68df4128d69171b9711cbf00f9223e40702cdce2e5f9cf2ba9cce60014a4c115f9c95a3816b2c17c0e48c350","ssdeep":"","tlshash":"085176ca3497a8174bd61de81adf504fe9bc582308cc0805935892e939f98f486ebe6d","size":2754,"data":"","first_seen":"2023-09-24T21:57:20Z","last_seen":"2026-09-17T16:17:58.644104Z","times_seen":2841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"5a24ea567084e3e985c772c343d492d1","sha1":"d5f8fd64d95c8eeab05704ce0bbd3f4873980b66","sha256":"8c21ade39fba374fc8c863f4caa97070b587bdff369e3710cb7e4b13df1d2742","sha512":"73e091c0b9a49322bb4dc7917ad4d31410d5e97924d160f887d30bba16722effef52ce0be3cc311df2663bf758a0cb7e237455c417bbabd54b19178e8f9900a4","ssdeep":"","tlshash":"e880008c2c08002c20fc0a0082222be2322a2a02a30200a0000008ea20003b33080388","size":27,"data":"","first_seen":"2023-04-11T09:25:15Z","last_seen":"2026-09-17T14:12:23.155717Z","times_seen":711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/static/prototype.forms.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b51f5d8d66922f4954734e37abccba","sha1":"064001f49c7ed074b9ec764c875018008d675db4","sha256":"d85cfad6c6e6c6282d20874651707f324dab618f2db8744fe20ecf0010718d99","sha512":"327ba854f52310e56fa9edc1b704b2c312d88a35db17eb2cffbdb02ad4aaa348588e6f2c7c8845fd48f58b012c1df456dbb07aadeeb78b3489198268d243ef01","ssdeep":"1536:uNRlidpmbvPOQFFZ9L8fm8kroQh5g0KkTy8O8MPpW+LOgpN/prY/z4vP2JKDhtPE:0LPOQhbDy8ipvrSz5XwYMtMB","tlshash":"ecc3c5e87182b57a428f527f106f128df23e556484089080e5b9dce4bcb8e96b17bf7d","size":122749,"data":"","first_seen":"2026-09-08T12:16:10.096195Z","last_seen":"2026-09-17T14:12:23.107901Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=3.4.2","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f53774306f147442d7e68dfeeea8b78b","sha1":"c6cb920166613fd7b28cb9a504bdd4452ce8513b","sha256":"6fda8f990239bf4b65334e2e16aea28276a639a2ffe5ac828ccab00e5dbf85f8","sha512":"bdc3c0cdf5cc89ebb447e48a8b4a5b2748c92ab211a543bd4c3019310f2a07e1d8d4c99ed457b825800fb4bfbe7c19be7ddaf1efa65f53ecbb6be6ec34ee6122","ssdeep":"3072:SyN4K7SKgDwXWCU+nyOwLJ8fZ2akRlF+dKz:/AcY8fZPkRl4dKz","tlshash":"e9142a5f7246343441caa1ada52f170973322886e5c6c88cb47fecf58ad8d89717afb4","size":196105,"data":"","first_seen":"2026-09-12T18:24:23.265131Z","last_seen":"2026-09-14T19:34:02.673758Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a8108feec1c4f8177df726c3952d116","sha1":"6a1b3978b8eecaf4fe9699bc6f4af319febe148e","sha256":"f4a5f645dd0b637b31eec3d54837532c901d12ba3f3173f078d8c73413ac79f5","sha512":"597131440395606dc2e510bd0e5ef1fdc0bf7ca462eb70a52ba515e785bb4ba4bbbae4735227321636e06cf6577d2b700a8a7891dfc4b6fc2ba0786c6b35c6ed","ssdeep":"6144:4wGsCcCsa8ylcZv0PsGfEtdLzB6iFMa5EiZoN8eSyA7uE2:y9Ca8yq6ifEcL2","tlshash":"ccd4e6ab6390712e42db53d194ee220b23b7d92a2516545cf731d8efbc6c64b103eb39","size":625054,"data":"","first_seen":"2026-09-11T21:55:41.895841Z","last_seen":"2026-09-15T08:15:07.253973Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/divi-child/wmscripts.js?ver=a3624c365b59d66ded9c30b6ac8df7b6","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"311757cc518ce649f85bf8a2b83ebdef","sha1":"238e288218b48ef28d549888c91f038f15e871f4","sha256":"59d588fe1f18d4c65bbe970289fd4fbda364cb928c8ef720227ddb33ff850cec","sha512":"cdd988704d965a1a6ddd8a3cbda71198a6800e77919b2fddbaf6998e738fc2123d25515da6554a151595b7097db449381f27b22735e882d5ca903ae9720cd7ae","ssdeep":"","tlshash":"1ed07d79fce968c545733464ee7e010814173502fd4d508a40a400b16c1b538228281d","size":282,"data":"","first_seen":"2026-09-12T18:24:23.233781Z","last_seen":"2026-09-12T18:45:56.962213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://hsbcpress.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"log","text":" SimpLy Lightbox v.3.4.2","filename":"https://hsbcpress.com/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=3.4.2","line_number":1,"column_number":190408}]},"http":[{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/style.css","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.071Z","timestamp":1789238705071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/Divi/style.css HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/wp-content/themes/divi-child/style.css?ver=4.27.8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 16:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uE%2FVSNN7KIITKIUkEcxA5R%2BzR9DDlT5T%2FR2gLVyvQiqByqcF3akVYgfQjwWoJwpiAdOtR6sxEHT1%2B1Q1aYXfvwhFOQNddb%2BxxS6jGb7axFuMBTBsYkaotLp384Z6vhXA\"}]}\r\ncf-ray: a3a11132bd5d4c11-OSL\r\ncontent-length: 195\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":344,"size_decoded":1251,"mime_type":"text/css","magic":"ASCII text","md5":"766384dcec26f733a2f053f0f7709353","sha1":"8d3a3f1913a34c522f9e29ecf2dbd0e66fc80f1f","sha256":"0686c0ee97b0186c87fbd506a314f34bb0c961fbbc95d07aaa18c76481ef429c","sha512":"4a579faa448f2de8a7f5ad0fc95b4464d90ffb5ca9ba6d9afa07632b4563ee93f76fc089abd8c92506c0d6b4182790e00a2cb4621208c48aedd213e5f8cd0c63","ssdeep":"","tlshash":"f0e0c00c3c1ef3b351b54a0938f2730a936c23a4a0c46061f402410c483671141f0b2b","first_seen":"2026-08-23T15:03:41.12354Z","last_seen":"2026-09-16T12:09:48.198203Z","times_seen":21,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/errorNavigation.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.863Z","timestamp":1789238706863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/js/errorNavigation.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 47\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:46 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:43 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7ae7-7ccb-a0f2-a36f98490c4f\r\ncf-cache-status: REVALIDATED\r\netag: W/\"c39b92d9e8a5b62b5324df5b6ff11481\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113dfd3a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11290,"size_decoded":4038,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c39b92d9e8a5b62b5324df5b6ff11481","sha1":"2ff2002f2eae663ae8bcaae9aad7b2855c2dda6f","sha256":"18e6ffdb46598c47d00f5d7a94fc73a3433a15235a7a57f802df232d6f03c2e3","sha512":"4de336bc9af2cf710f5f5f8a00fad40875bef63fd4ca1e16baedfb6edf69cde6b80b0929af4ee9ff3e9c8562d98a7315e5e7f3dc98e4eb76e14cf689dd82c493","ssdeep":"192:ju7GRcWLCsZLL2vh61zxG3jeqRsyBQI2MRUr03Y5mWo1C5anN66mCa0iidLCUZLp:j0WOs9LEh0zu6qRswQZMRG5mW867CtLp","tlshash":"5632758518b22177483b227b739f4041b57150ab5428ee0238edd2547fd8ea05aafbef","first_seen":"2026-08-12T16:17:23.285391Z","last_seen":"2026-09-17T16:17:58.602853Z","times_seen":145,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2026/08/Worldview-Cover-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.557Z","timestamp":1789238705557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Worldview-Cover-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Aug 2026 15:43:09 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClXNdB%2BRk6osKVTz8zZ9%2F0sO6gGprnBoRgtSbclSEZYFfHb8uTDy7FhcyFox4JPhli4xHe4%2BdVqDUMK7Q9BRfmZ%2FzBb0odQbltLDKJxGSrJNH%2FTGWiW5%2BSmXBi2aEYCf\"}]}\r\ncf-ray: a3a11135bdef4c11-OSL\r\ncontent-length: 242751\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242751,"size_decoded":243772,"mime_type":"image/png","magic":"PNG image data, 675 x 865, 8-bit colormap, non-interlaced","md5":"aa590fe56a1573f29f915aea12dc4f08","sha1":"3f0051199ea364afee42b8f7b4ff22f26ec915eb","sha256":"a570bc7350f9b3935f588f913fc04efdeae5139ea81b946e4d3f0264b41542d6","sha512":"15407030ad2ea5df867e0c9ffbd1d97fab9287b6b5eac770737c96bf26b87fc23d73b78ec0fc50fb2f882bf8229d624f9d399b232b0f985eeca85fbcfbf331cd","ssdeep":"3072:kHxjFJybhOuMBUKiSlVejwC6s6HHXoadBZTRGapVHNyMd031M7yhMDybgaKPLUoW:kZ7ybhOzUTjxdqZTxVHNpd2g1rAOC1","tlshash":"813423f81130e6ec4a92c19ca06e647dbfff6914182c8e1673558c9e36e8debb560b44","first_seen":"2026-09-12T18:24:23.277146Z","last_seen":"2026-09-12T18:45:56.959366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.571Z","timestamp":1789238705571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hsbcpress.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288823\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-17T18:41:55.73915Z","times_seen":342556,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.036Z","timestamp":1789238705036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gVBIIVycdkkcFFmy6WYNIaxUAooBlYxApRSDUm%2FtrJtbLnrKJIi%2FoiAu0KWxQII96lF0dvCpyalg80hzwBy1nNKg9cx3NJEzwiKlIWfSujAiv7sAQfCbrKUKNB%2BuFyw\"}]}\r\ncf-ray: a3a111327d4b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30805,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-17T18:35:13.282082Z","times_seen":1059715,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.037Z","timestamp":1789238705037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aL0L3WdkM4ec2d%2BRd8Rq4OByKbMnwj8hD6tKmIcxnPJCNVZ6JihusCwtuZU%2F4CpXkCi83X4rEUXJxKI0spnJ%2BE6kmM4E%2BMHgQGQwsCF632xEMfbLFTdltDj8HjBWQ24F\"}]}\r\ncf-ray: a3a111327d4c4c11-OSL\r\ncontent-length: 4678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":5740,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-17T18:35:13.260318Z","times_seen":968930,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/divi-child/wmscripts.js?ver=a3624c365b59d66ded9c30b6ac8df7b6","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.038Z","timestamp":1789238705038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/divi-child/wmscripts.js?ver=a3624c365b59d66ded9c30b6ac8df7b6 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jan 2024 15:30:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49AzXsoBmqv2%2B22KCCPMgPLl67fCnjbVUJ8Y45k7DcjEW66DYEo7U2QxmHwfwrt2LKflgzbhgnwEcdtEC2b%2FZZJ0Tmj3Ez89vMfnT75HzK9uwk5z9JfYeC2oVBKPz0uw\"}]}\r\ncf-ray: a3a111328d4d4c11-OSL\r\ncontent-length: 168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":282,"size_decoded":1225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"311757cc518ce649f85bf8a2b83ebdef","sha1":"238e288218b48ef28d549888c91f038f15e871f4","sha256":"59d588fe1f18d4c65bbe970289fd4fbda364cb928c8ef720227ddb33ff850cec","sha512":"cdd988704d965a1a6ddd8a3cbda71198a6800e77919b2fddbaf6998e738fc2123d25515da6554a151595b7097db449381f27b22735e882d5ca903ae9720cd7ae","ssdeep":"","tlshash":"1ed07d79fce968c545733464ee7e010814173502fd4d508a40a400b16c1b538228281d","first_seen":"2026-09-12T18:24:23.233781Z","last_seen":"2026-09-12T18:45:56.962213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/css/styles/payment/payment_styles.css?4.1.1357","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.851Z","timestamp":1789238706851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/css/styles/payment/payment_styles.css?4.1.1357 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 52\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:45 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:43 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7ade-732e-ad3f-245963740666\r\ncf-cache-status: REVALIDATED\r\netag: W/\"fd5cee8ab0dfce246d443e15727c339d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113ded2b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100621,"size_decoded":18132,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (404)","md5":"fd5cee8ab0dfce246d443e15727c339d","sha1":"bc8f8a383e4bd4eea729d6da9f4dfcbd31da8f55","sha256":"b063031d9214ec11cf0e818ce12f316bbc25ac6a000304284f9d0831d606c768","sha512":"2e6f7a3a5349e67ed976d0998eb17cc484896f60ec89c51091970b487ed01fe22291f5b972abc1518410bb15156971b4ffa5b4a2497926d7a4d995462fbe6e70","ssdeep":"1536:Bk8zSrWqZzjHyK9rCUxLFL3xNu5aUByr3Zk7pS2yhwSj65zWmkJMyXW+gN+sx5F8:WdFl9xPy5PkR","tlshash":"77a363d1eeb40498b56ac6793491a7ca7b28a103c10dcd787df0b0acae4d3e65673b4d","first_seen":"2026-08-22T17:03:10.081201Z","last_seen":"2026-09-17T16:17:58.646035Z","times_seen":141,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":243,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11a83cd25aa7.w.hcaptcha.com/logo.png","fqdn":"11a83cd25aa7.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-12T18:45:07.678Z","timestamp":1789238707678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 11a83cd25aa7.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=rmSlyCFnblIKFVk0UKtpHtkTU3FTmGzEVvTqnwFS8vc-1789238707.7000995-1.0.1.1-mkfXwpvrGhlUwj_3Z8KkxW6iC4C0cgqYbcRX2Mcl4qv29ZuaUFBS6jyZQSyAet8ApseCeP4BkbtcGJb3PuYzbwyJeqngwLP.Zw_bGY0z7lVb_X3WKABTN7qh11h.3ST7; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:07 GMT\r\nServer: cloudflare\r\nCF-RAY: a3a111431e0c5a0f-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"rmSlyCFnblIKFVk0UKtpHtkTU3FTmGzEVvTqnwFS8vc-1789238707.7000995-1.0.1.1-mkfXwpvrGhlUwj_3Z8KkxW6iC4C0cgqYbcRX2Mcl4qv29ZuaUFBS6jyZQSyAet8ApseCeP4BkbtcGJb3PuYzbwyJeqngwLP.Zw_bGY0z7lVb_X3WKABTN7qh11h.3ST7","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-12T19:15:07Z","raw_expires":"Sat, 12 Sep 2026 19:15:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=rmSlyCFnblIKFVk0UKtpHtkTU3FTmGzEVvTqnwFS8vc-1789238707.7000995-1.0.1.1-mkfXwpvrGhlUwj_3Z8KkxW6iC4C0cgqYbcRX2Mcl4qv29ZuaUFBS6jyZQSyAet8ApseCeP4BkbtcGJb3PuYzbwyJeqngwLP.Zw_bGY0z7lVb_X3WKABTN7qh11h.3ST7; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"0a4e287c589a858a286612ff61974c83","sha1":"6c9c17067c1ee8089c40b3d4dd926a9c1fc0b68a","sha256":"615f4e0cff17a85a1821f0ef1f851e06266d4a759ce09d7e7f727e22013f10d3","sha512":"76c57f5401d7c4dc847a00ddcdaac49f986afe2b078d137bff10658019a24c86c01bfd794ae9bbd847a85c46783df90c359ef11bff866210ffc1ed4f0f42685a","ssdeep":"","tlshash":"bf5171471f05064ad80e0f7112741f16eab2eeb97b2c6b477825b9389efb3c2153a185","first_seen":"2026-09-12T18:45:56.963509Z","last_seen":"2026-09-12T18:45:56.963509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":8,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2026/08/worldview-heading-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.558Z","timestamp":1789238705558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/worldview-heading-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Aug 2026 15:43:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eqnUDKBeKcgBA47Fbk5C%2FJRJGtkbBQ9F9IzbAZb1blmCtjTLtjKYBek1h2AARt%2FsH7bj57N7QTH3A622XOLb9CQ25dQyA1q48xItaSb905y6M8J%2FJHX4E6QTLbRvbDN\"}]}\r\ncf-ray: a3a11135cdf24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8379,"size_decoded":9392,"mime_type":"image/png","magic":"PNG image data, 562 x 159, 8-bit colormap, non-interlaced","md5":"0a9490d53414baf38b0bc7cd79d3f2ce","sha1":"be2599a9e76e7eb8be37c67817ad3416a21ecc16","sha256":"1454aad540c7bee3086f1d71cc22c3b618806af636466a2dabe6cb94fd5607e3","sha512":"2473bfd0c0b3021c432733371f0630143d597ba0341e2397580450dafd5ad196c0805e5c7071bd0ee1bbc8b61b4e60be38cc8d1cf9a4b57b4fd0c0ecc526bd47","ssdeep":"192:Fihp3xglyXOmS0Elk6g2qVUKzq95TwySB1waU5gH:FiNgyX7S0Elk6g2qV1zq95A3egH","tlshash":"65029ec03ed4816ac0dc64484351a479278be365e4d2cde444ff56bd0c6b3266a75be4","first_seen":"2026-09-12T18:24:23.241498Z","last_seen":"2026-09-12T18:45:56.964557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.style.css?ver=3.4.2","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.027Z","timestamp":1789238705027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.style.css?ver=3.4.2 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Sep 2026 07:14:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZLqVSVyLwjgMdF6GDiLD2Vz6MpgLBJjgxkqNskNO5bIgCNsGMTJ5mpC0YsaxS5wZFZYxOOGunHh2RfgA40%2FoDDmN%2BkTdjOGjA1yVG%2FOHOqzEQthszKffxoTHiWWy7GP\"}]}\r\ncf-ray: a3a111326d464c11-OSL\r\ncontent-length: 2783\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16192,"size_decoded":3836,"mime_type":"text/css","magic":"ASCII text, with very long lines (5810)","md5":"3a8dfa0e36cb1b864e7c956cf6397e0c","sha1":"1d730750cdc985f1e4c4084a370706e16856b957","sha256":"b8757b14ae7d36de70bbb081c069b4ab4880dedeea45b2e424c5b2785418097c","sha512":"77d5f2066b5988b794df5f7e63c493acbbeda3454f0660600fa59027f9b48f880032370684ea66c138ca98efceba2204f40105e43e94a3fa714674a7357da657","ssdeep":"192:VCxb8a3TJOZgrGspMQPO+yUBFEYHOdUyAYtddJRijLjJkuCxAZF3SulA:V8b8aDCgrGsphMHYHOdVp7WPVkuCxAZm","tlshash":"82725f316a872124414ba31155f1aab79f78c542f72249cffee1eb1be18e59d0c313ab","first_seen":"2025-02-26T14:38:03.787456Z","last_seen":"2026-09-15T10:55:50.301115Z","times_seen":660,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=3.4.2","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.043Z","timestamp":1789238705043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/plugins/simply-gallery-block/plugins/pgc_sgb_lightbox.min.js?ver=3.4.2 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Sep 2026 07:14:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOIO285pJiqDmMDGQD6gw1KE5hEjjJI0AQNaYBssSPDLxBa63iIv4KWGEpqFAHqtPd%2FrFfskwlLrXNbaAVE3ItSt0unN%2Fk%2BstTOyzX320oz3Y6ZNcsJ3kT1EpKY0UecC\"}]}\r\ncf-ray: a3a111328d514c11-OSL\r\ncontent-length: 45513\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":196105,"size_decoded":46574,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f53774306f147442d7e68dfeeea8b78b","sha1":"c6cb920166613fd7b28cb9a504bdd4452ce8513b","sha256":"6fda8f990239bf4b65334e2e16aea28276a639a2ffe5ac828ccab00e5dbf85f8","sha512":"bdc3c0cdf5cc89ebb447e48a8b4a5b2748c92ab211a543bd4c3019310f2a07e1d8d4c99ed457b825800fb4bfbe7c19be7ddaf1efa65f53ecbb6be6ec34ee6122","ssdeep":"3072:SyN4K7SKgDwXWCU+nyOwLJ8fZ2akRlF+dKz:/AcY8fZPkRl4dKz","tlshash":"e9142a5f7246343441caa1ada52f170973322886e5c6c88cb47fecf58ad8d89717afb4","first_seen":"2026-09-12T18:24:23.265131Z","last_seen":"2026-09-14T19:34:02.673758Z","times_seen":3,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/bg.jpg","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.503Z","timestamp":1789238705503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/bg.jpg HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 22 Jan 2024 23:18:50 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UDbS7rfuOjUPv6c5BXI2pfJhskHY7VwgCPh0onmbVRz766CyGWnnUKnJGniXy2a1dRgqCLvTvoDQPu9%2BjFe7eAVHlHXigfLJNkFMx%2FPTYlG%2BPdDKMo6kZpT8iiAkwcf\"}]}\r\ncf-ray: a3a111356dd44c11-OSL\r\ncontent-length: 908896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":908896,"size_decoded":909912,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2560x1594, components 3","md5":"af34863f98590ebe093d7dc1a23a13c7","sha1":"0a2722895bf9461edabeb116f66cea04efe3d8a1","sha256":"2cd487691da1ad33ffd4b1b3fbe84281a0556065e237c9ca7eafa847801c6488","sha512":"4a0bb341cb3f3e5461f3de96e97987c4209113b94d25e0594380d649d93b3d95d0308db62365a8d89f011d2850072816bc31fbea09cf9847f084179ed7dd966a","ssdeep":"24576:/3Ghlq+Ablf2YMmZW3dMl7kAfbD9Auw8F8a:/3Gy+RtqkAf3Kuz8a","tlshash":"781533af17b63602e4b6ba64fda55cc8c64b8c1775c61c1472eda2d02b1031b7f5b3a2","first_seen":"2026-09-12T18:24:23.24784Z","last_seen":"2026-09-12T18:45:56.96643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.428Z","timestamp":1789238707428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nCookie: __cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/html\r\ncf-ray: a3a1114189075697-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":626806,"size_decoded":190998,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"16f72bf1a54af8449b59a22b1887fc2a","sha1":"5ec97a600bdacccb9cd86911365214bef4f1b580","sha256":"9c5bf7082423c4ce64cdf841d43ca84957f7a1ab24e17ed5cb7164dd0b9cf699","sha512":"aeb52a5c9e458a6830782786cb1a67fb1c75de31426f8f47a95c16990515835f893b8c3434f0f6ce041ea5b596146f937c674311968a68af2774c81e6f0f4f3a","ssdeep":"6144:5wGsCcCsa8ylcZv0PsGfEtdLzB6iFMa5EiZoN8eSyA7uEZ:h9Ca8yq6ifEcLZ","tlshash":"06d4e6ab6390712e42db53d194ee220b23b7d92a2516545cf731d8efbc6c64b103eb39","first_seen":"2026-09-11T21:55:41.877249Z","last_seen":"2026-09-15T08:15:07.216906Z","times_seen":172,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":39,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800\u0026subset=latin,latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.030Z","timestamp":1789238705030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800\u0026subset=latin,latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hsbcpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:45:05 GMT\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60285,"size_decoded":3065,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5e5b4b2e4d78154ea73b0609805cc2d5","sha1":"ceeed0d32187afdc105bd721bfbd69673a1d371e","sha256":"831b4f88e3e23e5cee5dae66d5ad1b348bd4a5dd9ecfa1d88c40938751b6f909","sha512":"a8c2cfd51edb65116da470fe1a8486154f8f9f1e09d42886633d3a92b24d4d815bb1f6111aaebc174d46dc63aca916ac8b3726925cdeb1398166d90fbfc1fc41","ssdeep":"384:+oOcL9tMTv9qY49OnL6dOhqqt5Iv0qY49HnQdXO/UQtXWvyqY49tnyTUOYnht4v2:wdBIM84eKcZd4oIp+6hFzFCuVh","tlshash":"d043fb9104171440aa435dd233de7e34ee0fa6616044c0baabfd9bdbeecad6963b435c","first_seen":"2025-09-17T04:42:01.875528Z","last_seen":"2026-09-17T14:48:30.454885Z","times_seen":19479,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/divi-child/style.css?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.035Z","timestamp":1789238705035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/divi-child/style.css?ver=4.27.8 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Jan 2024 04:52:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnJljvHWdAc8bQpfl6I3DkgRDfYi3OVa7ggTJ3t7Jqyi%2Bu1P%2BeygPtndjEy9OO48ZEiIe3tctksm4NhZWhJ%2B417CIEKXeDw9I0r67ArDoNERJ01LPxoJf4X7yPDdIROc\"}]}\r\ncf-ray: a3a111327d4a4c11-OSL\r\ncontent-length: 1166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3253,"size_decoded":2219,"mime_type":"text/css","magic":"ASCII text","md5":"30384d2b3fa8a8a57f195ba3cb39e0a5","sha1":"a26f7554005720a9a1f1fbc09221c3aff4b94814","sha256":"fef4e4e31598431dd920dd792e82aa9419e035714d86d72f81199bfe103f3db7","sha512":"9fa09d00837c11a20bcea5faf79dbc875bc7dd571d101430d3e24b7baad78a22b6f87501d989484841ae322805a835c4e4e4ce3d32a5e3999ab6bcf7c25cd91b","ssdeep":"","tlshash":"20614f52ee425be2d417c83531cb7323db25e213cb85aeb8704294289fca6910dbe35f","first_seen":"2026-09-12T18:24:23.262776Z","last_seen":"2026-09-12T18:45:56.968041Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=481ef825909d36ec3d5777ef46cc1c8557f3555e\u0026host=form.jotform.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-12T18:45:07.846Z","timestamp":1789238707846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"POST /checksiteconfig?v=481ef825909d36ec3d5777ef46cc1c8557f3555e\u0026host=form.jotform.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a111441d2b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1237,"mime_type":"application/json","magic":"JSON text data","md5":"84843d65213277487c79578600e8d28a","sha1":"4c825b701efbf64c4e7e86e89f598731c955ab0c","sha256":"59f293aa8a402147e23365b057391ec0d78b6d6ab3824c339b151b320aab9dfc","sha512":"783e2aad70d8612e9d976baecc1b17ca9137208c75772c0bb69aa70f564313a87f47e3dd0ff1364e1aeddf9b64b9846c9870090e5acb120b4febbde1ce50dd18","ssdeep":"","tlshash":"7d01caf007646937d456879617271f770e1805f30db014ef0cc60556d36158c445613b","first_seen":"2026-09-12T18:45:56.968627Z","last_seen":"2026-09-12T18:45:56.968627Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":3,"dns":2,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/et-cache/7/et-divi-dynamic-7.css?ver=1788367986","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.032Z","timestamp":1789238705032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-divi-dynamic-7.css?ver=1788367986 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 16:53:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Fkrb2TSey15JaoeNONPW4CT%2BFpI2LWomc1QooBtXmbpCcjNM%2FqvLDep%2FsO1XU8iWwZqBHRhYjO9%2BYLqQAEJ%2Bxga8yFULi%2FQceqrH%2FtUvKbLV%2F5ZgGu6BcOGlpgEW3nY\"}]}\r\ncf-ray: a3a111327d484c11-OSL\r\ncontent-length: 1123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5396,"size_decoded":2188,"mime_type":"text/css","magic":"ASCII text, with very long lines (5359)","md5":"19b9b3dfb262114e3fe8c990f1a0dd42","sha1":"2b5875e558a11725b99270dd4ca2ba3bb678478a","sha256":"d736fc8bb60fb0bd0d8139f6516e51bf0a6f642462e1b96b3944ac9ac5a593cd","sha512":"f57522ccef3307da0f285408b5ac7e0bc7df8277b1fc2e4a00da33d24aa67d46e5feed7bcb9edacad838bb941c1cfafdc231ef9caba5e453c77b91f18ee887d2","ssdeep":"48:J0nmL01F5KTGQurLrTMuGDT5gaFmobWB7VB6IbxqLTMwTBUe1rwZ:2mQ73fMVgas8WsI1qLoF","tlshash":"54b142e6a32a29e27363c047c344e706dec5e521b90a4b53ed4b135d8ef231a3472e9d","first_seen":"2023-06-11T21:15:27Z","last_seen":"2026-09-15T15:12:13.081765Z","times_seen":210,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Playfair+Display:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic|Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026subset=latin,latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.033Z","timestamp":1789238705033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Playfair+Display:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic|Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026subset=latin,latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hsbcpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:45:05 GMT\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41393,"size_decoded":2060,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9877f848b16a689245b486af4da3ee2b","sha1":"97988f79d6bfef503b90e2b5ee06c882f46c8c55","sha256":"148c7e66510d0b57761cc0323cae05dca154eb3c88bb346201529db71572bcaf","sha512":"eca7d8c675e90209c192124fe8ae87801a2385df7b31c460a53baab4e09eac782181d3e372f92db03de83c4304accd12dac41cfa5bb18dec983bf863abe56208","ssdeep":"768:2XaKHS/vMRkUBcZJGbueLWTDJaOw/0veaHwG02xaww50pAahwI047aywT0DCarwY:v","tlshash":"ba03cda2097ba114ab871cc223cf7e36ae5ea1547440d67c6ffd1cc8ac9bc665360b1d","first_seen":"2025-09-29T00:32:52.465851Z","last_seen":"2026-09-17T09:51:21.036236Z","times_seen":141,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.045Z","timestamp":1789238705045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.8 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 16:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBUATxTVqk2Gg5JgK%2F7rCQDN%2Frqze8QIcg3%2B6krEr9P9d05LKq2STR7fMlj5CaR%2BMcHLJueM2wxQ4riosMoV2e51ckncyrj2PjmHdV90nohSYcTIDBQxcQqL2cijZjky\"}]}\r\ncf-ray: a3a111328d534c11-OSL\r\ncontent-length: 92891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":369288,"size_decoded":93954,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"df0d709e41d1360d78ad68ff27da0d24","sha1":"b182a49d746fbb23a337c628fb0532f79eca1114","sha256":"99ba6db8522de562ccf84562b9f0c25da483393a9ed100bbd82c1478185f5f71","sha512":"a19676cf7f7590b25c8b5923215d1d1f75410c1bee12a03f7571aa7e9e44658dda8f95bcfe262d8616d4f8346b7ae32ee36704bfe62224a07f8c1629fdb81130","ssdeep":"3072:3ej+eZFrMyB5Jhu+hVCnQsH+SbtK/gZAcHj6PGp56S3dzRsttCxoS0+7iU5nIMCS:p8rM2hBqK/sASjog6tCxo3Q5IML5","tlshash":"6674d88cb3a5f4b162fb60a5402f770ab1766c16b40598c0e272e0f49d78d8e6163f7e","first_seen":"2026-08-20T07:44:00.40122Z","last_seen":"2026-09-17T18:00:01.027963Z","times_seen":416,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.529Z","timestamp":1789238705529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hsbcpress.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:08 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288837\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-09-17T18:18:47.36549Z","times_seen":72436,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":36,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/fonts/inter/fonts/Inter-Regular.woff2","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.409Z","timestamp":1789238707409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /fonts/inter/fonts/Inter-Regular.woff2 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://form.jotform.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jotfor.ms/fonts/?family=Inter\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: font/woff2\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 1235026\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nexpires: Sat, 29 Aug 2026 11:07:46 GMT\r\nlast-modified: Wed, 03 Jun 2026 09:50:17 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 019fadab-9a2c-7ca5-b04e-58a67abe6fe5\r\netag: W/\"5891e05821cbf2402b6dd3f4a84cfe12\"\r\nserver: cloudflare\r\ncf-ray: a3a11141583832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103152,"size_decoded":103869,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 103152, version 3.1245","md5":"5891e05821cbf2402b6dd3f4a84cfe12","sha1":"43371fc7dd74393cb3f1de7f500164b4156a7a50","sha256":"f536bae011685cdeb84a3ec10450fd024d62536949d870582f4651cd47404067","sha512":"fd7cea275466038869df18a833a015877ac7f8f88f678e35d75be55a0395e73114cce57571e493318bad3003e97c43117ff50f0ae6893223e8457c1c9a0654ef","ssdeep":"3072:UybGyvjK0dMNeHrFYonvqDcFPLJNpwIYt+Xb/oVJ:fjXMNe3vqDcZWIe+Xbw3","tlshash":"faa3023c6068a4adfc71fd8978f42b019d6558a5d3a5d9ecf212bb503bcc188e63cb46","first_seen":"2023-04-15T05:52:33Z","last_seen":"2026-09-17T14:12:23.056418Z","times_seen":3446,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T18:45:04.008Z","timestamp":1789238704008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nwpo-cache-status: cached\r\nlast-modified: Sat, 12 Sep 2026 07:31:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 12 Sep 2026 18:45:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAw56AvOItgHB%2BSqsRhpp9wSDRCBkNtgWVaOK6nA%2BYQ63KZ2F1z9%2BjlY7qdsybWn1K%2F8tS0o%2B5RvW4QUlhcjwwTEZa%2FcKDvz89x%2B%2FTRzPQvuqVLndVnq2CLOHGDF9XPC\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3a1112c3be14c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Divi","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WP-Optimize","description":"WP-Optimize is an all-in-one WordPress plugin that cleans your database, compresses your large images and caches your site.","website":"https://getwpo.com","common_platform_enumeration":"","icon":"WP-Optimize.png","categories":["WordPress plugins","Performance"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS:4.27.8","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Yoast SEO:28.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116337,"size_decoded":24627,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26339)","md5":"fd12f8059b053f058d0e6a4c6bc288ab","sha1":"9ae2f8df1bc75acc655b402e75181e33ccd5606f","sha256":"1d8f6ffd0d611a613510d047beccd7c239f675e17cb74a88ca148add1c140cd2","sha512":"de782a29c64ace092bf79ae435cb6f732f8f41abe128ee17e1f4c91f46ade449ea405b2f4e474109d8f7a450e1dc3471584ac875c33c38ab231baa9b3f3377ac","ssdeep":"768:iLVZdypaTGrpvlvImIB2wAOm13K7lSYk8IaTpNjTFbg/v8LpxwipK:OypPrNnwXm1cz1NfFYvKbwipK","tlshash":"47b3f8af5bb6327972138719fad96728826cc22395124dd97c6da14c8f81bf301b721f","first_seen":"2026-09-12T18:24:23.240384Z","last_seen":"2026-09-12T18:45:56.972698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":8,"connect":18,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form.jotform.com/240216804650146?isIframeEmbed=1","fqdn":"form.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.543Z","timestamp":1789238705543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotform.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Aug 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:23:C2:90:E8:CF:00:DD:85:DB:0C:3F:A1:20:C7:F4:CD:3A:D9:27","sha256":"C8:F3:07:4D:A4:0E:7C:0E:02:FA:65:85:C2:1C:B9:03:79:DC:4B:E2:8A:EE:9E:4B:1B:57:E8:06:60:C9:A5:72"}}},"request":{"raw":"GET /240216804650146?isIframeEmbed=1 HTTP/1.1\r\nHost: form.jotform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hsbcpress.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncache-hit: L2\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nvary: Accept-Encoding\r\nx-httpx-dc: ew4\r\nx-httpx-id: 01a096ef-fdc4-706a-a5c0-b35961ab6427\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]}],"data":{"size":36557,"size_decoded":8621,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5887)","md5":"6ec33c9817adc15a0ca65a8b32f4a251","sha1":"c8cd5a02b147986156f94babd7969a2902d07219","sha256":"715018ba57bc8689071a069c62e318103df25f69e9e869d779525d352e3af358","sha512":"74794b5926c2071b18db5e43ee1bc9a905a4fe71d6c7184f7208a1d5c353e0f7529279620a67d8fc65ae7469b1e198a3afda1a8b83a448d18c144257693daccc","ssdeep":"768:K93xBExppQrUsYSNkc4qiMCc2PHP2IP6PXP8PNPXNTkoV5DxVF+NX2bcVumn9eaK:MrUsYSNkcP/x2POICf0FPNTkmDxaXCSk","tlshash":"cbf22b0679a14d6b2a2349e8f9cfef4427e88192c6484c54f06e18e977eded1e2173dc","first_seen":"2026-09-12T18:24:23.256622Z","last_seen":"2026-09-12T18:45:56.973236Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":1164,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1788367986","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.040Z","timestamp":1789238705040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1788367986 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 16:53:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEWFKZgxgZn5udarx3JxV1UJ34k2wK81KUrPNoXLed3H0iqX1aZa8iq%2Fb8GiDzH7plJs8WG2ortCsGd4TOzU%2FS3qvAmb2pXf7d50u6X5Fg1jzatT1ZLpC6azB7%2FUlv0V\"}]}\r\ncf-ray: a3a111328d4f4c11-OSL\r\ncontent-length: 894\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4063,"size_decoded":1946,"mime_type":"text/css","magic":"ASCII text, with very long lines (4063), with no line terminators","md5":"919a82903c9d176e25fb1a7e5dda16ac","sha1":"eb33aad1c017bbe670423e3fecdd1db1a4a94f6c","sha256":"445d9ca4c4783ed4f7fe2663ae3a7435ff9ee9c0ed30be0aafc79d7ac39c83db","sha512":"e6571a406d6c4123ab1cc9e92d50f66b4644c93208a0f60e6ee4bed50ecb503012f2cf894dd37217201c297f1744715351ad94a1ad37e24eaf73c4eb62f21a5d","ssdeep":"","tlshash":"9681e14fa773793a35675059f82337bc9db98043d25a4ba5bc21ab60cb920a3103625e","first_seen":"2026-09-12T18:24:23.263686Z","last_seen":"2026-09-12T18:45:56.973796Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.048Z","timestamp":1789238705048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.8 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 16:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjOjFAC7gv1YtnNaSOAqQERDI4FvyKPOM2IkyH%2B4Hsod6VGgiDxno9Mv4qHpOtBDLdwQw%2FDtbzKrfJt%2B%2BUNOCBmOlZYcP3jUARHHHBFF4Ag0dx9sFTAhG5rX%2B4inztcU\"}]}\r\ncf-ray: a3a111329d564c11-OSL\r\ncontent-length: 490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1343,"size_decoded":1553,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-17T18:35:13.278609Z","times_seen":68834,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/stylebuilder/static/form-common.css?v=9c15332","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.847Z","timestamp":1789238706847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /stylebuilder/static/form-common.css?v=9c15332 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 942\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nglobal-router: true\r\njf-entrypoint: 1\r\njf-trace-id: ec84eff24eb09481\r\nlast-modified: Tue, 01 Sep 2026 15:12:41 GMT\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM\"\r\nstrict-transport-security: max-age=31536000;\r\nvary: Accept-Encoding\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08d2c-b0ce-7be6-850a-5aaadc730256\r\nx-raw-uri: /stylebuilder/static/*slug\r\nage: 121\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a3a1113f59b232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3168,"size_decoded":1620,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3168), with no line terminators","md5":"4821af91ea69d4b12822a1b7fd116ee1","sha1":"cf453003e8727081fcf75a1a0e683fb1534e5240","sha256":"d4e193083a57ffd9e7ce23b7347a2dd1f63f8d36961301e48f74b52889599c1c","sha512":"26c57e5baeb3a90643f55d2525c422a88c144e20996daadfc34059289a67333d7c9517a46f41cfb332d9c2c93fbab542f49499465dec098c86d159d3af8d3417","ssdeep":"","tlshash":"b151e072b1366829f41fe76431e997dd213ac412e9a387ac6ca11159878f1e5c73238e","first_seen":"2024-03-25T15:10:49Z","last_seen":"2026-09-17T16:17:58.653628Z","times_seen":2939,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":13,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.865Z","timestamp":1789238706865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:53:55 GMT","end":"Wed, 11 Nov 2026 05:53:53 GMT"},"fingerprint":{"sha1":"0E:7E:B7:7E:99:98:A9:83:98:76:EA:79:C6:CE:AB:E5:5C:90:F9:9D","sha256":"A0:0F:7C:1E:D9:73:CD:A1:94:49:89:7F:A0:8E:EE:ED:E5:22:AD:92:D3:29:62:A6:36:80:AA:21:4A:94:18:4B"}}},"request":{"raw":"GET /1/api.js HTTP/1.1\r\nHost: hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a3a1113dfde8783d-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=300\r\netag: W/\"a275b5993001321e621885e679012c0a\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: __cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:06 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-12T19:15:06Z","raw_expires":"Sat, 12 Sep 2026 19:15:06 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:06 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355549,"size_decoded":102730,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"e3430044318f2c4008f856e39717b1db","sha1":"3165d2243ddaba79838ba0d4ba3708eafd79595f","sha256":"0e0ac3858c11824cc19725149dc85d70c84a21e8dbf3536284f9a911693e71da","sha512":"f0be531550a22aefef55c33f7b2628faf4bf377cf5ac10df5f5c90e91cb27ea30227d86762e3e9b726aedda8b113c77eb816a7bb2b571dcf1cd242109a5e8524","ssdeep":"6144:bwjY8/viA2Buwqpaloel4rdhLqIaU5yxQ:yQuN","tlshash":"5c743ebb6791a22e53e757d0d8e9230b23b6dd272414241ef331a8efbc5d643503da26","first_seen":"2026-09-11T21:55:41.874842Z","last_seen":"2026-09-15T08:15:07.231222Z","times_seen":177,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.27.8","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.046Z","timestamp":1789238705046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.27.8 HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:45:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 16:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AwmycSby%2FUm0CiT6EuWosOvpsCfKYcZYAvmGkMZsMdYnG9pdf8hwKHUF0E9AoZWmv1FFV9mFZlxkMKEjseZVTQOjGe3sZIp1AMFdulLfKXGKjwHKmlHr2ByOHXa5sJk\"}]}\r\ncf-ray: a3a111328d544c11-OSL\r\ncontent-length: 1158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3349,"size_decoded":2214,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fa07f10043b891dacdb82f26fd2b42bc","sha1":"9c1dc49e9747758e033c0e9a7d016401bd78602c","sha256":"462747422c6af30aa81a0373fa1cfd736455cef52bdbb816f67be9531d84eace","sha512":"828f723649ae5a7b996de43fefc9b904d1a1d54f83671cc6998fdc7e0bb75c7761c8e0bb4a4497f2e4658606c193953c7019d7859e6ebab3db34c794ec575618","ssdeep":"","tlshash":"1361316932a6282d4d5330ef1eaf4014b619c0b707ebe86c78be85c98f849480625bfd","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-09-17T18:00:01.044594Z","times_seen":45062,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/umd/53f877d31b4/for-aria-notify-polyfill.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.860Z","timestamp":1789238706860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/umd/53f877d31b4/for-aria-notify-polyfill.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 48\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:48 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:49 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7a2f-75c8-9c14-b44317ac0198\r\ncf-cache-status: REVALIDATED\r\netag: W/\"51825f3b42fa274aa9c57ac4740e9161\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113ded3632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3854,"size_decoded":2293,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3853), with no line terminators","md5":"51825f3b42fa274aa9c57ac4740e9161","sha1":"f19b94bf7ea07ac755e922f500aa42761fee0b2d","sha256":"803ed748d3ee62e44d293ce409e316f7e9a20a251ba5fed558e8839e0d6c2b05","sha512":"6f5f1c984f87f3d56e0d035c3e3a16fe53bee37202b3bcee63585769be5722c2ca80023dc8c8d6a1ad4a563a4ac5b7739dcae1ac1c40cf228394aeae7ab5cf8b","ssdeep":"","tlshash":"4581d704f326b17606f720a7722f0247f531545a5d46081476eceaf778f2e9a61b5f30","first_seen":"2026-05-12T14:53:19.648376Z","last_seen":"2026-09-17T16:17:58.638221Z","times_seen":1071,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/vendor/smoothscroll.min.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.861Z","timestamp":1789238706861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/js/vendor/smoothscroll.min.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 48\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:49 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:45 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7ae3-7c99-af88-b36b60229001\r\ncf-cache-status: REVALIDATED\r\netag: W/\"fbaa5350ea1e35997f589fc49947accc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113ded3832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5056,"size_decoded":2827,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3968)","md5":"fbaa5350ea1e35997f589fc49947accc","sha1":"fc9253ec0b5dea916b9255fb0445e99c733164c8","sha256":"49176b244de4b07d2a8a79cd8663a2fced053acc22b1807929521665d09f3e3a","sha512":"c84dba63ef055137ce0fd9212e33bdd76f7a747dd01bb24fb319c67f63cb9c2930820066bce802499828f897ca967d1311d9403f03cd02d55f2b6bc3b321f66b","ssdeep":"96:TuJQHAqIgxbv0tAp3LWBE7MKmslSrKigRUdA8eCu:+QH/SaMMUdZeCu","tlshash":"23a10d49a41171c31def4290c1becb4b7065a327735348d4182aefb8522cfff618baa9","first_seen":"2023-03-07T12:09:31Z","last_seen":"2026-09-17T16:17:58.683532Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.jotform.com/form/240216804650146/?ref=https%253A%252F%252Fhsbcpress.com%252F\u0026res=1280x1024\u0026eventID=1789238707398_240216804650146_6JmKbiR\u0026loc=undefined","fqdn":"events.jotform.com","domain":"jotform.com","tld":"com"},"ip":{"addr":"34.102.158.113","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.420Z","timestamp":1789238707420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotform.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Aug 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:23:C2:90:E8:CF:00:DD:85:DB:0C:3F:A1:20:C7:F4:CD:3A:D9:27","sha256":"C8:F3:07:4D:A4:0E:7C:0E:02:FA:65:85:C2:1C:B9:03:79:DC:4B:E2:8A:EE:9E:4B:1B:57:E8:06:60:C9:A5:72"}}},"request":{"raw":"GET /form/240216804650146/?ref=https%253A%252F%252Fhsbcpress.com%252F\u0026res=1280x1024\u0026eventID=1789238707398_240216804650146_6JmKbiR\u0026loc=undefined HTTP/1.1\r\nHost: events.jotform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-headers: origin, content-type, accept\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\nexpires: Thu, 1 Jan 1970 00:00:00 GMT\r\nlast-modified: Sat, 12 Sep 2026 14:45:07 GMT\r\npragma: no-cache\r\nx-httpx-dc: ew4\r\nx-httpx-id: 01a096f0-04fb-761b-b900-30f9689b41eb\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":440,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":8,"connect":14,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.534Z","timestamp":1789238705534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: font/x-woff\r\nlast-modified: Wed, 02 Sep 2026 16:51:20 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tq%2BCO2hxp2GJ5pgog9YVUAN%2FatXoNFnt7aWoyR%2FCXbxORjnoxcHLJZIsNo5%2FUFy6%2B2wytIKPuSvqx4YVuFsRrtpfZbjQpHJ355gpqX9hQ5xODRSOwiCMHU5BrvjfvOD\"}]}\r\ncf-ray: a3a111359de84c11-OSL\r\ncontent-length: 92084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":92084,"size_decoded":93107,"mime_type":"font/x-woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-09-17T17:07:00.841391Z","times_seen":47377,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/bg-top-element-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.560Z","timestamp":1789238705560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/bg-top-element-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jan 2024 00:45:22 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ohNgjzeDm501GJzaykxYORafJ2%2Fj8NcWKqXv%2FXd4AYvvFVwPNWVyZo8R%2Bc%2FLrD5nnYGId7ML2QKFdnNRfc%2FA87BBxirViAHtE3WgULiqD%2BwYkTWFWpxbZC5%2B6VK%2Bk0G\"}]}\r\ncf-ray: a3a11135cdf44c11-OSL\r\ncontent-length: 2561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":3584,"mime_type":"image/png","magic":"PNG image data, 278 x 281, 8-bit/color RGBA, non-interlaced","md5":"b69d6712a3a5a64f63a9e8acc6e2f1c1","sha1":"edfe652b355e0840a26975f33bb741510fd09c24","sha256":"abe0ed2c6b18fadaaca46c716ba9574ddc772610f1d51420b0cb82e8a34cabc4","sha512":"6414076ff0681a6580f8e2364f277286cd09ce7cc47dc394887dc18f70b2e143e75af49c660b7c72068767f474543bc7d1c96fc159dd264dbbf0e39ff54ee0cf","ssdeep":"","tlshash":"df513c1893db2976b1d8c5bdbc8721106614f7d9e8dd7a3d483584a1313cc11963f0e6","first_seen":"2026-09-12T18:24:23.234993Z","last_seen":"2026-09-12T18:45:56.978116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/secure-message-bus.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.853Z","timestamp":1789238706853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/secure-message-bus.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 51\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:47 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:45 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7ae5-7a0f-945a-6a95f4bdb108\r\ncf-cache-status: REVALIDATED\r\netag: W/\"ec6fd0164c7d5f12dc98fd717e12b540\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113f59bd32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12644,"size_decoded":4200,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (358)","md5":"ec6fd0164c7d5f12dc98fd717e12b540","sha1":"da28b2fe3fca98b6f57403e9208fdcb4afef6831","sha256":"14f65246bd6da3f493f5ed1fcc151c182b1ff0c5ca15237bf45459dabe0d7717","sha512":"4abcf511b68571ba2062a228ed13da10c62b8f8c98d9824bb031d64f6206d9430eb7e26fb1c4271de5d888da76c553227229d8fb48b4e6d6cc55332e0e14a023","ssdeep":"384:S74ZVnyUm9PDUdfxiqxs1aqJt3liZLfeeO:UaVn9mdoQHJt1gL5O","tlshash":"c44275de65e72c1a0b13b1ad9b9fa49172356853240ce680fc1c4fa05f6562d82f37ee","first_seen":"2026-09-08T12:16:10.059614Z","last_seen":"2026-09-17T14:12:23.064636Z","times_seen":48,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":236,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/js/punycode-1.4.1.min.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.857Z","timestamp":1789238706857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/js/punycode-1.4.1.min.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 103\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:48 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:44 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd4-463b-7935-a82f-93fc7d0db3dd\r\ncf-cache-status: REVALIDATED\r\netag: W/\"f57ed28889ac6c64cd5f338c757f3a5a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113ded3432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2754,"size_decoded":2236,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2753)","md5":"f57ed28889ac6c64cd5f338c757f3a5a","sha1":"89a78113a6d87756c5c17b3cc5d901f21222d7aa","sha256":"e18bd528ff34a5e1e62a82cde24e3271f4f2296db9fccb6f11c94a4ddf4b193e","sha512":"9ce02dd1c4b55f14f90067ecb445d849b648921c68df4128d69171b9711cbf00f9223e40702cdce2e5f9cf2ba9cce60014a4c115f9c95a3816b2c17c0e48c350","ssdeep":"","tlshash":"085176ca3497a8174bd61de81adf504fe9bc582308cc0805935892e939f98f486ebe6d","first_seen":"2023-09-24T21:57:20Z","last_seen":"2026-09-17T16:17:58.644104Z","times_seen":2841,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/fonts/inter/fonts/Inter-Bold.woff2","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.413Z","timestamp":1789238707413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /fonts/inter/fonts/Inter-Bold.woff2 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://form.jotform.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jotfor.ms/fonts/?family=Inter\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: font/woff2\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 48997\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nexpires: Thu, 10 Sep 2026 13:36:56 GMT\r\nlast-modified: Wed, 03 Jun 2026 09:50:17 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 019eb4a5-3ff4-71f1-8716-baf3187be6fa\r\netag: W/\"68011c0b032270d83de4f546ce48bf57\"\r\nserver: cloudflare\r\ncf-ray: a3a11141584432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111736,"size_decoded":112451,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 111736, version 3.1245","md5":"68011c0b032270d83de4f546ce48bf57","sha1":"d1e442dbf714552c132e26d55da0234d61b305ff","sha256":"b5d5e626a01da63aa252c7c469046a0f31ef2c2c9c09a176213eb0e6290d83f7","sha512":"004409337907d0aa9628f88d5b6f5f3a98db7bdcce5ee71fa20a31b441cb083c4b0ed55920e33bf4acd631d0d4d90e1530234c8e285762fdf2c496d0116b85cf","ssdeep":"3072:n+O7OYFtfemI0+XgSgl/Pi5VyiRTxGQYdi:n+O7fF1Ak/mhATi","tlshash":"49b3024fcf2af8cbe18a6193b47b79517e9c5e7807c4caa3577b312814bac9cd484891","first_seen":"2023-05-07T16:52:52Z","last_seen":"2026-09-17T06:47:00.449733Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.533Z","timestamp":1789238705533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hsbcpress.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288823\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-17T18:41:55.73915Z","times_seen":342556,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":20,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/bg-divider-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.568Z","timestamp":1789238705568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/bg-divider-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1788367986\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jan 2024 00:53:41 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1297\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cbgmzf3Tj%2FxQdzl3i6miFe%2F5ezqKJESsEio3ZymatTwWmz7Vpb3hwOy2Atczb0kOUVK30v496NHoRZBMJm1XfYJXcKNMhjPLdq4aK9Pc1si3avuI7d%2BngL%2F%2FDaA8Rmhg\"}]}\r\ncf-ray: a3a11135cdf94c11-OSL\r\ncontent-length: 8535\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8535,"size_decoded":9552,"mime_type":"image/png","magic":"PNG image data, 2560 x 100, 8-bit/color RGB, non-interlaced","md5":"8460a0f586ea94611efac8b57dd21881","sha1":"0aba4ecf1b135225caa10b69262241d0d20f2d2e","sha256":"f8e2d9b8e7bd5079e57a4bd8852076500087834b20d8384d22e450ef71cdcec7","sha512":"17979ccb56f70bff9e37c7b6077ff6527844f276f67f43077aa6acd32bb25a27420ab0bc8399fdd21d42b1dd537b819f8b6c4a74d80684d0dd855a3df43c8e73","ssdeep":"192:we2IlIIBiZAm3LzhE79UG8ho35eFpKWqmDLuwV0:wevl9eAm3LNEZUG8uYL10","tlshash":"88029ea8c23688e0d114e87dc95ff29a1b41be9143d6e140cec6f43f5a9e0436f9adc1","first_seen":"2026-09-12T18:24:23.280486Z","last_seen":"2026-09-12T18:45:56.98005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"75f04dff3930.w.hcaptcha.com/logo.png","fqdn":"75f04dff3930.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.421Z","timestamp":1789238707421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 75f04dff3930.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form.jotform.com/\r\nOrigin: https://form.jotform.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:45:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=CI9C8Igh5yV7Nx7umAeKTE.4NqBZ4u.G9.ImGIt12OQ-1789238707.4569857-1.0.1.1-TMXNVdMNIrQcDJTFjqmgCCKDxjObMBsOxHrCPXDFpRatzaVOnfCmHylzmsjN7olc81MC0tWpADx61wtmHVQj_u3Qfnvpb7RpqVuB0hS7YdWf5bu4yMuCM7h0XiFjLMyH; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:07 GMT\r\nServer: cloudflare\r\nCF-RAY: a3a111419d952efa-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"CI9C8Igh5yV7Nx7umAeKTE.4NqBZ4u.G9.ImGIt12OQ-1789238707.4569857-1.0.1.1-TMXNVdMNIrQcDJTFjqmgCCKDxjObMBsOxHrCPXDFpRatzaVOnfCmHylzmsjN7olc81MC0tWpADx61wtmHVQj_u3Qfnvpb7RpqVuB0hS7YdWf5bu4yMuCM7h0XiFjLMyH","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-12T19:15:07Z","raw_expires":"Sat, 12 Sep 2026 19:15:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=CI9C8Igh5yV7Nx7umAeKTE.4NqBZ4u.G9.ImGIt12OQ-1789238707.4569857-1.0.1.1-TMXNVdMNIrQcDJTFjqmgCCKDxjObMBsOxHrCPXDFpRatzaVOnfCmHylzmsjN7olc81MC0tWpADx61wtmHVQj_u3Qfnvpb7RpqVuB0hS7YdWf5bu4yMuCM7h0XiFjLMyH; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sat, 12 Sep 2026 19:15:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"6e2df4937eb46f7919ee39e1b0994521","sha1":"a448ee35776f3f6eb86a5b500470a3d084907658","sha256":"cfdd22e125f8f49f3296b835de9b7c57eaf9cc4528d707e8376459b12514a1eb","sha512":"3e00612dd651750bc465112771136680180bb7425547b5322d22da8f3371a8adeb13175631edf895653dd181a09d7a752c60ec15df7b0aa058cff600dbfd43d4","ssdeep":"","tlshash":"125180076b55854ac91e0fb1a07c8f0ae3b389593f8c534b6218f02adfb57da270a5c1","first_seen":"2026-09-12T18:45:56.980525Z","last_seen":"2026-09-12T18:45:56.980525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":11,"connect":1,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=checkbox\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.439Z","timestamp":1789238707439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nCookie: __cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/html\r\ncf-ray: a3a11141890a5697-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":626806,"size_decoded":191041,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"16f72bf1a54af8449b59a22b1887fc2a","sha1":"5ec97a600bdacccb9cd86911365214bef4f1b580","sha256":"9c5bf7082423c4ce64cdf841d43ca84957f7a1ab24e17ed5cb7164dd0b9cf699","sha512":"aeb52a5c9e458a6830782786cb1a67fb1c75de31426f8f47a95c16990515835f893b8c3434f0f6ce041ea5b596146f937c674311968a68af2774c81e6f0f4f3a","ssdeep":"6144:5wGsCcCsa8ylcZv0PsGfEtdLzB6iFMa5EiZoN8eSyA7uEZ:h9Ca8yq6ifEcLZ","tlshash":"06d4e6ab6390712e42db53d194ee220b23b7d92a2516545cf731d8efbc6c64b103eb39","first_seen":"2026-09-11T21:55:41.877249Z","last_seen":"2026-09-15T08:15:07.216906Z","times_seen":172,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":32,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/hsbcpress-logo-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.041Z","timestamp":1789238705041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/hsbcpress-logo-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Jan 2024 23:17:20 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WvTrBQ%2FoLG1g48BFxXm8HQkrN3jLSDNQPN6uczaF%2Fon52lcYJHo6aOOI8U1pZXSLMkfi%2Fch7EvOWr0ZNCrbmSHKNFx0KeMtOGsd30QUd6gJgW5C5neTF%2F0IZThsEe5af\"}]}\r\ncf-ray: a3a111328d504c11-OSL\r\ncontent-length: 36056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36056,"size_decoded":37072,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"9859cf92c42baafd4c27a98be8c3ec6a","sha1":"a0f258052d19b1c6c89dc06b4efb1a31297e6ed5","sha256":"61db3fc8eecfbffdb91fe5bae913e90b6c2b628932c63ffd1b3c7f477f3687ce","sha512":"2e9baa814872d41c6aee649f97ea2bd3eb0da72aa3896b83ca0b879f4f95d6aa37962e9e3f16a529fc31e669d1a6e99232e3040a292ac9cfb43fc88616d1b0f5","ssdeep":"768:8m39749wWp7ykQvqcwo0uGj1POgUsHADM7l+ZLWnV/ZBRIcw:7mpmVycwj1nOeV/LW/","tlshash":"fdf2f2ac6a5c15294be5211362befac406d4be912793d6f6006705928fd1c7fcfb7a40","first_seen":"2026-09-12T18:24:23.254702Z","last_seen":"2026-09-12T18:45:56.98171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.525Z","timestamp":1789238705525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hsbcpress.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 288823\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-17T18:41:55.73915Z","times_seen":342556,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":4,"connect":35,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/156ef9683ba4f3cd3d10596965260ef6c0cbffe55032c7e9e7b8b03e7acd6355/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html#frame=challenge\u0026id=0pmjomje25v8\u0026host=form.jotform.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=772f4a50-7161-425e-8cd5-4d7e361ab765\u0026theme=light\u0026origin=https%3A%2F%2Fform.jotform.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-12T18:45:07.902Z","timestamp":1789238707902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /c/156ef9683ba4f3cd3d10596965260ef6c0cbffe55032c7e9e7b8b03e7acd6355/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/481ef825909d36ec3d5777ef46cc1c8557f3555e/static/hcaptcha.html\r\nCookie: __cf_bm=uMIePytYDaQq3TjzCPotXcqxlejRlLgpauu_4BIsf8U-1789238706.881054-1.0.1.1-PHk_qHCU0LxTwe8WSw694Su0rhrC2SfiMBl.SvPMJxvy6vXD8VTLbP1JGZOWA0z1_7_jdubR.x84bTwBmjr1AAgKVr0OhVzIpN8fA_9nNNyWkOc0MlvvnO33dg3SIX1x\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\netag: W/\"62f5588c20fdd4e8ac0f411b51ab6784\"\r\nvary: Accept-Encoding, Origin\r\ncf-cache-status: HIT\r\ncf-ray: a3a111446da05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1029525,"size_decoded":449249,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"62f5588c20fdd4e8ac0f411b51ab6784","sha1":"f429f42ff28698654bebdda57f008f609cf0d456","sha256":"8834eb280c5784a0174c41de364adc4afe1fb5042db23ff12754d3f66d38ebd5","sha512":"c8569ca2f74fe00ce0b97787a23061ca2f0918524b8141066e5ad05951533ccb4224c9eda04837f6ce9396e0ef6d1df19835fe20f7a3d930bac9e75493c58cbe","ssdeep":"24576:LtjtfdZclQhLCxLZC/nSkJd48OfKMV83zQ1lFDNkQhMJ:VXr","tlshash":"8f253a7e6317aebedbb601fd049a73676c4844eb81858d91cf4dc5a7a4a01bf094a0fc","first_seen":"2026-09-12T18:24:23.275859Z","last_seen":"2026-09-15T08:46:09.558022Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/divider-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.554Z","timestamp":1789238705554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/divider-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 22 Jan 2024 23:22:07 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDFkCZ6Xjx%2Fv8pmYdmw5pCTodogCelpZ9U8CIOKYjO4wJGOY7rOnB0t9Um%2Fv3wV9qYNXN2h8u%2BIF9jBOHl1K78NUdDkvcRWNsvjybPx3EW8vAz97sN73EvOXLGrGeCPx\"}]}\r\ncf-ray: a3a11135bdee4c11-OSL\r\ncontent-length: 2396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2396,"size_decoded":3409,"mime_type":"image/png","magic":"PNG image data, 310 x 39, 8-bit/color RGBA, non-interlaced","md5":"5b43a74568d3f692df603709fc105640","sha1":"f6e3e872fb0e88f3659d8f96eeba3be51e649e1d","sha256":"f62241cbe5aa383eeae6d73d7733ec305f9b04b9a7e379da509b732f174cf99f","sha512":"5f454e4c40ebb01c3d7cb074a6e14e31b24cef8969e22d6e7c55aef23cbc894e70deb85df552650ffd573f4d573c92ce23fc564dec33b555193984b8fdfd544a","ssdeep":"","tlshash":"5c416bc93352253c66d0ce567d8ac7506294ce38920ff16402bdb84531608eb09d6bbe","first_seen":"2026-09-12T18:24:23.253316Z","last_seen":"2026-09-12T18:45:56.982765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/css/styles/payment/payment_feature.css?4.1.1357","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.852Z","timestamp":1789238706852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/css/styles/payment/payment_feature.css?4.1.1357 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 50\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:46 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:43 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7adf-7983-b20d-acc3f853e91c\r\ncf-cache-status: REVALIDATED\r\netag: W/\"9d7c6b5d0422f73e71e7623cf7f74d5b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113f59c032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23385,"size_decoded":4934,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9d7c6b5d0422f73e71e7623cf7f74d5b","sha1":"1c7d2fd768939ec9d127d62c4e415a4442d105da","sha256":"72cc1f4ce403202f98dcdfd279ecfdb0966f137c9c1927f8459b1145c3de7fc4","sha512":"56ffa74f27040d03022165e9cdf8ac10900461ab3cb47e7a63a1b1b42cb1a6bf980673a33944f0c34ff6f95de08753e5fc585e30c6f79de91ba7693082ac4286","ssdeep":"192:9l8wsEnpt3dzxstfBDn1EcmdbhnnEy35rnVEtsDCWhP3nHeBAuZmaN4uczQdWXc2:X/oJtQeWwD5kDVNB7+2B1ocXKg","tlshash":"55b241e4edb2089c61579a3859e8b3dabb297003c108dc783d64f9e06f4d79291b3b5d","first_seen":"2026-08-22T22:39:18.741386Z","last_seen":"2026-09-17T16:17:58.654261Z","times_seen":147,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":59,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/fonts/inter/fonts/Inter-Medium.woff2","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.411Z","timestamp":1789238707411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /fonts/inter/fonts/Inter-Medium.woff2 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://form.jotform.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jotfor.ms/fonts/?family=Inter\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: font/woff2\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 1017419\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nexpires: Mon, 31 Aug 2026 05:29:54 GMT\r\nlast-modified: Wed, 03 Jun 2026 09:50:17 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 019fbaa3-ee15-72be-961b-2967f498367e\r\netag: W/\"823f35a845a9dfbf9800c8a37b635269\"\r\nserver: cloudflare\r\ncf-ray: a3a11141584032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111192,"size_decoded":111909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 111192, version 3.1245","md5":"823f35a845a9dfbf9800c8a37b635269","sha1":"c3064c7e34213e30493c6a972f3d66f4d145885b","sha256":"aaa02aa09b0bc5bc5c57095aaa6e15bea07480136e9aab705f69886daa213325","sha512":"9177511e5f379346ee2b0501106d385fe8830fac2d8c5ea89023b3422e4302ac9eebb9fd0423154b34214d9483e0b45f5e369c0b509edf3960d6437090c694c2","ssdeep":"3072:mM3oKpUppxhp9ldJLJNd3yT1zPHJWdTly5dI:mWshp9lrN7ePJQe2","tlshash":"49b3125de36bfa72504d5db279f2658fcc618782c6992cc82d60022271d8ef89fdb181","first_seen":"2023-05-07T16:52:52Z","last_seen":"2026-09-17T06:47:00.43527Z","times_seen":2414,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/cropped-site-identity-192x192.jpg","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:06.042Z","timestamp":1789238706042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/cropped-site-identity-192x192.jpg HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jan 2024 05:13:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1297\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2B75Wc%2F1614bWMY9EU3uLZYeKyAkQC68mF9qdHAMLVTVXriZQOysKI200y1rSL%2FH%2B8f9zNENVqdYmm6siorizgU57IjtQ3T8U%2B5MsQ%2FZpmtxtZaCgf97vXNqjShkVhp9\"}]}\r\ncf-ray: a3a11138ce854c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8110,"size_decoded":9133,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"162a7fcd755e5f137fc8bb0859f269de","sha1":"ed24408880f16249a0fc65da33a4f0c356763381","sha256":"7823de7663781c93042e8b001231c2ae22618f8ecd0bd7b749ff7b59c36e1350","sha512":"ba91c5d11894b13ec3c56c8cad6d12692c41631674532980359873f64659dd38ea37aca9098f784cbbf85cd78d9366b140c59e3ff92aad2c140a99fa31baa53e","ssdeep":"192:/OgI0ZCUz+taAHbNxsjbq+6c21y68xjWLfY3y3:p5ZSHXybq668ZWsC3","tlshash":"c7f19e78dbd694124b081eef0fe7720a121628c3880b4f96efb0c1bd69e99db950dcc0","first_seen":"2026-09-12T18:24:23.24368Z","last_seen":"2026-09-12T18:45:56.984328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2024/01/cropped-site-identity-32x32.jpg","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:06.043Z","timestamp":1789238706043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/cropped-site-identity-32x32.jpg HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:28 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jan 2024 05:13:09 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1297\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmlNZ1%2FiTRMutCQWddng3aEmoNmtBXy3Tru7r8s%2BHolq2SPfowguw5HE3PYbNpHZkeE5FqrIy984la800Y2nSIeAvyLQiY%2FAH8cWp8TNt0NHbG4O%2FIlN9oAD0JZnMKaI\"}]}\r\ncf-ray: a3a11138ce864c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":2051,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"850a7215599338676cc69093abf1285b","sha1":"6a5df7bd5f3654e5776335a04eddf4f63a20e1c6","sha256":"f384357c93d3175bc84f7788a6d431ac4edf1a740fffdfc580d2040c18fd9fe5","sha512":"6dccdc91c5182f3c6827a256889faa35b1de768e0c8430346f215eaaad0688282db590a98887b16ad8011a18f2fc475791f02c32048cc8a31a3a51e13228617f","ssdeep":"","tlshash":"6011c83584625242d67e03759d621f64c36fd2eb021207680609cad8efb29e006b800e","first_seen":"2026-09-12T18:24:23.230946Z","last_seen":"2026-09-12T18:45:56.985131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/static/jotform.forms.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.856Z","timestamp":1789238706856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/static/jotform.forms.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 50\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:46 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:45 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7a31-7f34-8c9e-779360a0ef55\r\ncf-cache-status: REVALIDATED\r\netag: W/\"16e6ee130f7beeb1d3dd2a5c46eac3c2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113ded3032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":743739,"size_decoded":183023,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"16e6ee130f7beeb1d3dd2a5c46eac3c2","sha1":"f202f3f6efbed641af78da34bfe17da37a3e58c9","sha256":"60a8c704e31b333da853b9fa9ec2e7f7f71097464547d4440ff5bb20906db3a6","sha512":"d5a9f267c6bfebb854071526fad1c4f9157496b85e8283c9ce276d4051315f0d5ddaf22a8ce6b5e5f2045aee62b290dded122511e4fe750bf5542ba40fb7ca55","ssdeep":"12288:SZu2+CUqMBBBiR5Z5AnR0GJ0+x4OqX+0XOX/Hj0n:SA2aqMBBBF0GJ0pX+0XOX/D0n","tlshash":"3bf41aa5756021b60aff13bb60ff938977312374d8010494a57c98a526bce87237bfad","first_seen":"2026-09-11T10:00:55.882214Z","last_seen":"2026-09-17T14:12:23.140725Z","times_seen":36,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.532Z","timestamp":1789238705532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hsbcpress.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 10:11:07 GMT\r\nexpires: Mon, 06 Sep 2027 10:11:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549238\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":8652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-09-17T17:51:34.804933Z","times_seen":83635,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2025/10/high-school-apologetics-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.561Z","timestamp":1789238705561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/high-school-apologetics-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 17 Oct 2025 16:13:05 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBQvPyhhxlCAzqkfiPGC8Ta4sx9gyll%2FbKOQFmN3JTEl6CvRBNs6Kh7svm53WogPHxKnQ33Y0W8gN8CUuj6rU90RIoIKhDtX1wZnRY0OTzclHLpXuZGHAw8RVf2oiBNk\"}]}\r\ncf-ray: a3a11135cdf54c11-OSL\r\ncontent-length: 723524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":723524,"size_decoded":724535,"mime_type":"image/png","magic":"PNG image data, 923 x 1263, 8-bit colormap, non-interlaced","md5":"181ea34ceb585adc9eba6fc9b04d0b40","sha1":"849aab33c7ffd5132ecd66bea95b69a68554e60a","sha256":"71d88b03b62f027748ca8e78ef93ee949a9a275af6151d892bfd6500e9830078","sha512":"e63a3066ed5797710406148339b7c47242904f0074899e60714e0f7d521075ce60bdf51708e66b8c8d5e9231b08a2b2553a3f50e1f551327a0ba787725370f1f","ssdeep":"12288:N2XVsD1YY/o2bs57VpbqpYu2MIyO6fdkn10ArbRf0vTWgfNL+NibS:NaVo1K2by766u2+pVXktf0vrfNL+Nx","tlshash":"93f4239b89cedf3411f5ae1f5a4868bc79072af397b31ad7370a0e91817518600e77b8","first_seen":"2026-09-12T18:24:23.238265Z","last_seen":"2026-09-12T18:45:56.98687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbcpress.com/wp-content/uploads/2025/10/apologetics-heading-green-1.png","fqdn":"hsbcpress.com","domain":"hsbcpress.com","tld":"com"},"ip":{"addr":"104.21.35.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hsbcpress.com/","date":"2026-09-12T18:45:05.562Z","timestamp":1789238705562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsbcpress.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 21:19:23 GMT","end":"Sun, 01 Nov 2026 22:17:49 GMT"},"fingerprint":{"sha1":"3B:31:9B:72:AA:E2:A7:91:B9:E3:9D:6C:98:72:71:0C:0B:1E:B0:6F","sha256":"78:15:63:6A:71:C6:5E:68:6C:09:1B:AD:B0:79:66:DC:DC:18:24:B5:40:1F:3C:6B:06:3A:7B:2A:0D:1E:66:56"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/apologetics-heading-green-1.png HTTP/1.1\r\nHost: hsbcpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hsbcpress.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2419200\r\nexpires: Sat, 10 Oct 2026 18:23:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 22 Oct 2025 15:13:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sat, 12 Sep 2026 18:45:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=7776000, enforce\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDFlMaPkhXD55nd2AwXrfDPQQ3KCp50mQLBq6IJv1t8KNX4qXpbJFQyX4S4I8zQJLQ4L8nPOhRyhEXdLSYySZMuopjIrHu581wMPWhW9iR0v%2BRDc9dCPcMzHrn9CT5V7\"}]}\r\ncf-ray: a3a11135cdf64c11-OSL\r\ncontent-length: 7507\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7507,"size_decoded":8516,"mime_type":"image/png","magic":"PNG image data, 468 x 159, 8-bit colormap, non-interlaced","md5":"576af7b56c2f2351f8d4d5f28b87ec1e","sha1":"918bb3191483ff6461539c197158bd8499ffb1d8","sha256":"54495823baa01c7ea7cc15d33a775f78f74196e4769c88d1cd1d7f6e73e1320f","sha512":"38b978d4586b2340afb27a805b758308b7a5e8907209951966b617e689ead97fa4442570bd576a0e22f804606ef785c21847a8eef88bce4cbac2270bac752eb9","ssdeep":"192:3g0ORdZlooqcvw5d1ZS0nKWRJ8JTgFEaY:3g04z+cUpnKWQJTH3","tlshash":"70f1bf4b5c559d395f11706b8fa3508bfbef06d68fd8b2b04cc8421e2da264ce39d16a","first_seen":"2026-09-12T18:24:23.251945Z","last_seen":"2026-09-12T18:45:56.987537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"hsbcpress.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"hsbcpress.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/themes/CSS/5e6b428acc8c4e222d1beb91.css?v=4.1.1357\u0026themeRevisionID=6310a6ad592c72439615db25","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.849Z","timestamp":1789238706849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /themes/CSS/5e6b428acc8c4e222d1beb91.css?v=4.1.1357\u0026themeRevisionID=6310a6ad592c72439615db25 HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: max-age=28800\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nglobal-router: true\r\njf-entrypoint: 1\r\njf-trace-id: d74da2cca8f9a7db\r\nlast-modified: Sat, 12 Sep 2026 18:23:29 GMT\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM\"\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000;\r\nvary: Accept-Encoding\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a096dc-359a-758e-b041-43265c4963a8\r\nx-raw-uri: /themes/CSS/#themeId\r\nage: 1297\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a3a1113f59c732fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":559863,"size_decoded":68746,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d4d7255e9fc97b72d7d4b2785a067abc","sha1":"5a17be281f19f1b3e702e9fad08b01eaaf0c0aa1","sha256":"3fe4df43a281ef0eae7c95f0647b4a59733c91f2779bfcec7a5e1b0a776b3587","sha512":"b4733775606235cb1ec4ad256427b2e899ce460fd28b41f32e5469ca4e2b8b7fb50afeedec3cc9fd8714d170dc5c2d31372ceae65b07320a039ef372983dff33","ssdeep":"12288:6AL9Vz2Mx+5+dp87k5q8ATIyi4WFWgweMt8mwck6IFq8AOuwcdr2WRmRWQAowMng:6W87k5q8ATIyi4WFWgweMt8mwck6IFq5","tlshash":"bac4cce259b023eda3238fa861c3e7d83655b6d5d142327964217ee852ccdb5242f3cb","first_seen":"2026-09-01T19:27:14.190283Z","last_seen":"2026-09-17T16:17:58.637568Z","times_seen":112,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":16,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/s/static/53f877d31b4/static/prototype.forms.js","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:06.855Z","timestamp":1789238706855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /s/static/53f877d31b4/static/prototype.forms.js HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.jotform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 51\r\ncache-control: max-age=2592000\r\nexpires: Fri, 11 Sep 2026 10:35:46 GMT\r\nlast-modified: Fri, 11 Sep 2026 09:34:45 GMT\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 01a08fd3-7adf-793f-9529-78cf5186d0f8\r\ncf-cache-status: REVALIDATED\r\netag: W/\"29b51f5d8d66922f4954734e37abccba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a1113f59ce32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122749,"size_decoded":34738,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"29b51f5d8d66922f4954734e37abccba","sha1":"064001f49c7ed074b9ec764c875018008d675db4","sha256":"d85cfad6c6e6c6282d20874651707f324dab618f2db8744fe20ecf0010718d99","sha512":"327ba854f52310e56fa9edc1b704b2c312d88a35db17eb2cffbdb02ad4aaa348588e6f2c7c8845fd48f58b012c1df456dbb07aadeeb78b3489198268d243ef01","ssdeep":"1536:uNRlidpmbvPOQFFZ9L8fm8kroQh5g0KkTy8O8MPpW+LOgpN/prY/z4vP2JKDhtPE:0LPOQhbDy8ipvrSz5XwYMtMB","tlshash":"ecc3c5e87182b57a428f527f106f128df23e556484089080e5b9dce4bcb8e96b17bf7d","first_seen":"2026-09-08T12:16:10.096195Z","last_seen":"2026-09-17T14:12:23.107901Z","times_seen":48,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":186,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jotfor.ms/fonts/?family=Inter\u0026display=swap","fqdn":"cdn.jotfor.ms","domain":"jotfor.ms","tld":"ms"},"ip":{"addr":"172.66.175.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.jotform.com/240216804650146?isIframeEmbed=1","date":"2026-09-12T18:45:07.121Z","timestamp":1789238707121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jotfor.ms","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:08:46 GMT","end":"Mon, 07 Dec 2026 03:08:43 GMT"},"fingerprint":{"sha1":"5D:C7:CC:D5:77:B3:0C:43:D0:25:34:1F:92:F4:47:48:48:DA:3C:CC","sha256":"D3:B4:3C:3C:13:CD:73:A4:A3:68:70:15:87:A2:86:A8:D9:18:E5:59:96:0A:59:9F:FE:38:33:1E:36:AB:83:D4"}}},"request":{"raw":"GET /fonts/?family=Inter\u0026display=swap HTTP/1.1\r\nHost: cdn.jotfor.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jotfor.ms/themes/CSS/5e6b428acc8c4e222d1beb91.css?v=4.1.1357\u0026themeRevisionID=6310a6ad592c72439615db25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 18:45:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 286\r\naccess-control-allow-headers: Origin, Content-Type, X-Auth-Token, X-Prototype-Version, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, X-JSON\r\nage: 1018171\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\netag: \"b1c9f2907832d28e4146e9bd0ea94fe5\"\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nlast-modified: Fri, 31 Jul 2026 11:39:16 UTC\r\nvary: Accept-Encoding\r\nx-httpx-cache: 1\r\nx-httpx-dc: ew4e\r\nx-httpx-id: 019fba99-c917-7c82-82d8-c4f002ae0585\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a3a1113f8a3d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2402,"size_decoded":1081,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b1c9f2907832d28e4146e9bd0ea94fe5","sha1":"163cc7729917a90e1674a1f252c80b147a5ed051","sha256":"c8dca6eaef71bee988e6332cc042bae4ececbd4f284e8ddbfe1a1fd2c9ebb709","sha512":"6a69062e50a8837ef034e2dc6ab5c8527230a2cd64578f4b83ae09e8f0f7c2e4a5b46b2be6ccf092a7e659e9e7183b8384f06de1b532933f3ecf7f599a63673e","ssdeep":"","tlshash":"ae41df5a412b7f4084210d86bbe7eeb92e3f306a35918032c93d0dd55cff4a6c269b1b","first_seen":"2024-11-21T09:55:06.414638Z","last_seen":"2026-09-17T14:12:23.055068Z","times_seen":3472,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}