{"report_id":"207a749f-88d3-4b41-a1c5-b41a5682b97b","version":6,"status":"done","tags":["huntington","financial","phishing"],"date":"2023-11-30T05:56:08Z","url":{"schema":"http","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"title":"Mobile Banking Login | Huntington Bank"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:57:56Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.huntington.com","ip":{"addr":"95.101.10.192","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1994-03-28","domain_rank":56151,"first_seen":"2014-08-03 09:06:58","last_seen":"2023-11-26 15:56:01","alert_count":0,"request_count":1,"received_data":5193,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30 02:15:09","last_seen":"2023-11-29 05:10:22","alert_count":0,"request_count":1,"received_data":23914,"sent_data":499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ensighten.huntingtonbank.com","ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2000-03-08","domain_rank":91425,"first_seen":"2019-02-13 12:49:10","last_seen":"2023-11-14 21:11:52","alert_count":0,"request_count":3,"received_data":39535,"sent_data":2045,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-11-29 07:23:07","alert_count":0,"request_count":6,"received_data":520198,"sent_data":2764,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.clinch.co","ip":{"addr":"54.230.111.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-12-05","domain_rank":7154,"first_seen":"2016-06-28 16:52:48","last_seen":"2023-11-30 00:55:25","alert_count":0,"request_count":1,"received_data":61865,"sent_data":439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":375,"first_seen":"2012-05-21 00:45:00","last_seen":"2023-11-29 11:42:51","alert_count":0,"request_count":1,"received_data":19116,"sent_data":411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"huntingt-authv3.de","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2023-11-19 19:31:45","last_seen":"2023-11-19 19:36:45","alert_count":27,"request_count":37,"received_data":2114928,"sent_data":26995,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.e2m01.amazontrust.com","ip":{"addr":"54.230.218.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-05-11","domain_rank":0,"first_seen":"2022-11-16 06:34:23","last_seen":"2023-11-29 11:45:31","alert_count":0,"request_count":1,"received_data":751,"sent_data":350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mef957.dynatrace-managed.com","ip":{"addr":"100.24.162.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2016-05-19","domain_rank":107553,"first_seen":"2019-04-14 23:07:15","last_seen":"2023-11-09 18:22:33","alert_count":0,"request_count":2,"received_data":334,"sent_data":1804,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trk.clinch.co","ip":{"addr":"54.85.247.171","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-12-05","domain_rank":5423,"first_seen":"2014-12-18 19:54:09","last_seen":"2023-11-21 23:16:36","alert_count":0,"request_count":1,"received_data":299,"sent_data":833,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/inqChatLaunch10006663.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c9d96d3f228156fd7e9df9c531871d1","sha1":"a118554b1208e30af4a0fef948c9566b8e7f4a94","sha256":"648d971972fc0140127ab99989b3b55a28e8e3c2fcbf281390bbb7edf5000f26","sha512":"771aa9806a70324a468a447da5e347443a6c8096aff87ce7237bbeb38ab337eba57fa454d69c585aff457bff81b55c12bd5a602e1ef455ea9e95ecc6b08be981","ssdeep":"384:EkIva2pBM+hMDM9cIC3auno07QCb3o+vtrx/xibVIQRMCpmP9rcuvZf2g5NYyDuc:sy2p6+agfQ7fo+vtrmKQeNP9cYBJE+SW","tlshash":"efa2947b2741913d85f2159d752fbb0a7477a216ec818084856aacd0b628b4b8c2fffd","size":22354,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.134351Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0096b3a75c132c10f6a90df56192e4d7","sha1":"07cfa420d654e1531d97a9dccd23f4bede5edde7","sha256":"7e519b79026424c478dc1b72f347eb1327c9d01dc2458973bafe2690ca7d016d","sha512":"e6a302829a2b112324b04d3a0eaa094d34e38cef1cfdc1d83dabcfd540c9b6d866e661d3e55f021202164709babdf9e88685ca38dfdd52ea8eb66773fc9519ce","ssdeep":"","tlshash":"1980008a83b00c8a03a08000c8caac38022080030b0e80a388c028a3ba88083080c020","size":26,"data":"","first_seen":"2023-03-07T01:02:36Z","last_seen":"2026-05-03T08:23:36.948049Z","times_seen":100933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-786635084\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e2eb7725e3562a4686d719c261cd097","sha1":"7198474215d40148e072150f9328393c63863438","sha256":"e1285fbbb5c1ba502d33acba5384b883cbefdf8715157ec5e60d22d156f8cef9","sha512":"77060d9e6ed9c45d570e4b4f2e7925f13216ca1a892e5e41a3abd007395cf3cedf09da2d7e00e30281118a3f5763368ce4b472399b9fd3a1acce3cc65ce72637","ssdeep":"3072:LJ9CyGe1SFWYAUyyWekug7k5MRJAkuptZFAVGx3s6g1ttvVSK:tZSHAUyLRd+FAVGxchftvN","tlshash":"7114f7d8b393b06683a3b474503f110bb27b6d96f84ccc98e189c5d52e78a99417bf6c","size":198144,"data":"","first_seen":"2023-11-30T06:56:09Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ensighten.huntingtonbank.com/huntington/com/serverComponent.php?r=7.240978959308269\u0026namespace=Bootstrapper\u0026staticJsPath=ensighten.huntingtonbank.com/huntington/com/code/\u0026publishedOn=Thu%20Oct%2022%2001:05:05%20GMT%202020\u0026ClientID=1035\u0026PageID=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"ensighten.huntingtonbank.com","domain":"huntingtonbank.com","tld":"com"},"ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04d3fd8c611ecfb231315cada22100d3","sha1":"66c673469866e6c7b45ef165633c4c585d03f65f","sha256":"afc1f23c8513a8388c3565a146f2c9b0df997b13cfea11287b4d481ceb39ecc5","sha512":"1ce84557ae0efe712a284905534c996f4796c9821ae0fe9604415fec06e3df12733da41b5443c372c823bb5712d677ef73423aeef2a854be38c7bb85da432b63","ssdeep":"","tlshash":"21e0204587b5228ad488961eb0ee575945d0143948c4154cc6dff10c0d45453bafb531","size":319,"data":"","first_seen":"2024-08-20T17:23:07.311884Z","last_seen":"2024-08-20T17:23:07.311884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/jquery-3.5.1.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-03T08:33:43.702962Z","times_seen":231587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cf91652fc7787b535b26f390f9ed9af","sha1":"d39e49793059ab3b8a97b61bac69ad2a451c8ff2","sha256":"f876a7b1e6234843f5d8487af055addd42fe6018d4f4e2f29ab08c0f08a85d94","sha512":"1a1a87797e2e0a21486a88f87573cab0910b46f7be3f68d9c04cdca6f9645f1de8af87b12ebe9bcebd52a9bd54fc3232063ea1cfa8c1f10d4f3a129ecde7de94","ssdeep":"","tlshash":"da8000ca80b80c0a03e08000c8caa83802a080830b0e80a388c028a2ba880830808000","size":26,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-05-03T08:23:36.950439Z","times_seen":100496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e37f24be76111b93a0ff728b96cddb","sha1":"e1740ea479e156d424cb918060d779528ecc8fae","sha256":"49ef43da1c84ec34b398aaab43e8debad168559596297c7586e9c9e8239c79bf","sha512":"f6794302c65cd64c0d6fca102f0233c49b2cdcee3caaaa18f42d3a6e3a7c3f59fc72461a36069c6af967a2e8dabbca580096e87abdc36b1e1324a041e3aefe66","ssdeep":"","tlshash":"8180008a80b00c0a03a08000c8caa8380220802b0b0e80e388c028a0be880830808000","size":26,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-05-03T08:23:36.938895Z","times_seen":100116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/site-survey.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"374ca92abaa98bc7b2f19fe64114a18b","sha1":"4c0a1441026a9337d322d7ae5536df1427e5c140","sha256":"7d24af619103660b68ae10e64670d3393f5a9e679ef9d69e72a7479071aeb806","sha512":"8041028eaefe608b0b49ebb30cc0729a3d89c5cd45b03d054dfc1c09134e3699f3d2b5c4178fd25850063abf04143adcf301a9a0a7609ffbae26b7fd1df655fe","ssdeep":"192:68ZyoHR3tmaX6GTu2e5qgCTFWAOWN2UCIpHRiSzHniinJaTB:9H7maX6GTuRkFWA3N2ZIpHRiSzHn1nJA","tlshash":"06f185dcb2d6b431838a2871953f2629f1f729612805c474b43dd8ecadb8d19527afb8","size":7541,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2026-05-02T02:00:27.5358Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"339aaaa033bd435bc3d3442976b21150","sha1":"309497f761b4649d113688cb611242810ed2a8bc","sha256":"47536a23eb95f0f1d8f00b6ef54ac4553cc05d06ddce49260dab7dc9f083296d","sha512":"65675d696c7315d55825bfd99ee02ed0d7f7a240f82d6f691e2df1d2fe4ebc6eeb4a409af3b0d0b74c7bff7700b6b141ae469071353dd9d391a5406f8c838c2f","ssdeep":"","tlshash":"b98000aa80b00c0a03a08000ccc2e838022080030b0e80a388c02ca0ba88083c808000","size":26,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-05-03T08:23:36.946887Z","times_seen":100180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"30092b66bd92ab05d4da2dbf5e412263","sha1":"5e7611ebcec6a5b90317d3cc2d30f47c80dfb87a","sha256":"19e22d179543fb3fc0d5dcc8502f6fbec83d3422090578ce035173b297fa6620","sha512":"417df862aa3ae57b7189f6b694758052a80b9236eb8b7fa1b11744effacd2ce776732d366ded841593ff071702afc6aaccd8b3c07fcc48d175e40e9c770310dd","ssdeep":"","tlshash":"16f0e216b284b8f106df646a203fbb05f760664804f5219086ea888a3e6b647c11bb6a","size":482,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2025-10-09T08:37:05.370746Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/95b0da5c7fc415e06807cc694ee0021c.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d33104f26092658d2becbbfa66e9d1fb","sha1":"9c33f190903b2664af1f20b3a16ce2dca13d8a49","sha256":"4249e4f7acbb2de46e66922b8ae70689820a9a6eb9a6f98a77d13190b7c2559e","sha512":"1f5e7594efcc9bfd401964f0af0f1ce465c71b49e9d8d81cf8fcab34fafe3317ab1e89b9e11453aeb04aa60b4b81a9712d5aa990a09f142cc0ddf0bc9f0675c8","ssdeep":"1536:Tkdk3iAKLSIjI4EzLXMNrgDF4Jf/chlEzHQZS+5r5sKzXzM3jhyTDJKC0fAm0pdn:SmzLXMt3P39gDJ3","tlshash":"cce33c8c7371706d68e631bd7b9f030421b998bab541d4a9e1c8ddc86ebc94b2133b79","size":154122,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.130497Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-10701487","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"473ef22bc050826064ccee5004417e01","sha1":"10c8300f702d17e6d9416487f1afd358d5da392b","sha256":"85c7470a3bf747fac13a63e9f32a44cabfe92874de5f62ed15e48ada0da92269","sha512":"906f2c203ec6dcfe51db60a82b5b0b18eaee74bc94b524a66f0c214332aab43488b2c78862f7eb55e7e7561791436054874913bf16ec7925b8b92252c5d2751c","ssdeep":"3072:LJ9CyGe1SFWYAUyyRe1ug7k5MRUAhXZFAVGx3s6Fn0EtvVSa:tZSHAUyLRBpFAVGxcynRtvJ","tlshash":"8504d6d8b393b16683a3b4b4503f110bb17b6d92f84ccc94e189c5d52e786a9817bf6c","size":183830,"data":"","first_seen":"2023-11-30T06:56:09Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","size":18187,"data":"","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/outdated.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc854aab7af244173e4dc2ca2a8f471a","sha1":"1f0444814fabf2d764af527d1718e376ca0c89c1","sha256":"11a2b7d65804df37c5d5801da23212eddb8530ffb15a5b67d77a8ccdcb5b8199","sha512":"d1c0943070fcab650e39a87e3da92fd205c086b8543222578b25624b4a80f219b0b2d9750394814c931bf2dbd6dd536489f398259484ae79293a39bc07791d23","ssdeep":"","tlshash":"f62174ad30e0f9c113d36496003fa00df17a49721d7ae0a0d384c8b8bc34c8d4036f65","size":1147,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.138064Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/06bebd2b36rn240c2a1532a26141a767","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"335f2776eaf4ca7eca9953d2240c3316","sha1":"5f5702f072d8e721dd3557ccd2a0944b3cc58fa5","sha256":"ca9ee108c9cd3072864c1fcfe42f8fa40f829a33267388e0adbf41fa8b2da9a5","sha512":"67c454909444775b3b5bd87b31a37a6539f37578ac7994f5f195953d9eec6faf17b40296e17c08ae71d7b330323d460720f21e088e094d9decc9c144e3c4cf58","ssdeep":"1536:DYIKl361iU00wqrXrGzm3MJ7yJYK/yxXbAU4QcsHUAwos7Tve:+0AwoGK","tlshash":"046368a97297f94b274e0d43ed0d6aaab3724426e185b20bc7fbfd4e17b416ec318444","size":72012,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-03-25T12:56:21.293172Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/js","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"67e765e44e7d18ed41711d7e4935bc50","sha1":"0289b9754b56ba057550a7e7d62e0b3587e43f2d","sha256":"e5973becebda7e91d869447913826e69cd123d87e1a6f2ddf8897d72a63a3c6c","sha512":"3245d8aad40530192a2c8bb1bc1532cd104ce4027b9dde22a282329060fa19d56378bff92223b61777ea1205fc5117ff87cdd9a06d3813507fc798f7403fe9e7","ssdeep":"1536:JWXgXmurKn8aC0Y4WzQ5nAEvwT8Hp+gI8EP+HJ1Y6m5SxvsiGYkD9nIuj1P9GtNq:JWXgXmurM8z0fFnA4u8JY6m5SxGYkDqG","tlshash":"6c9309d9b786b066c3a3b5b4453f000ba17aada2f84cccd4e186d4d02e7869d417bf6d","size":96892,"data":"","first_seen":"2023-03-07T12:11:40Z","last_seen":"2024-09-20T21:38:15.131291Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/7a8ba97f","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"af77eedae6083a5bd6f07cec713ab58d","sha1":"2804fbe107e6af68bf7e2d39cfb176987e1fc9ad","sha256":"06af35b557f7713851c46e61fd940a1dcf2381d6372582a63abc43dfdee46c33","sha512":"28e861ffbc52ba5b83c1bd729c23c40d05b9bdb2ca6e2669cf539fce9a345b44d6cd109adbc5096c9562813ebff34b7eeb4d67bbcff69765ae5826d60a0baa22","ssdeep":"768:W2gegXf9iQEpbGavW7LK5FPof4fDHFxtAAWLJB0MEp8BRDdW0:W2gegXViQEAavW7UFPof4bHL4LJw8nv","tlshash":"bee259e872d7ed0b678f4983fd505efd20728577a4857247c3aeb98d16f828bc248884","size":32863,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.133346Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-724266616\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e8fc40837bc8f2c143122b816887040","sha1":"0764df2988816220e4d98d50f6d255de596aead4","sha256":"203369aeb9fe60de765d86ab03eacb467f036baf7d630e00046b8ff79e0eba81","sha512":"f66aa73f3ddfd6fbbf28e8776f8c85584039fc259a59d39e84558f1749ab0c18bfc2aa1f984bd9cbeeeff4a27283b890b736f7420f5a17c9fbf8b4bb7b6b8020","ssdeep":"3072:o39CyGe1SFWYAUyyqe9ug7k5MRJAkuptZFAVGx3s6g7FtKSK:oZSHAUyWRd+FAVGxchBtS","tlshash":"cd24f7d9b393b46682a3b474503f010bb17b6d96f84ccc98e189c5d52eb8a99417bf3c","size":209822,"data":"","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/121543311796381","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3bf3fa0a912c14bfe1c0b7282fbfa8a","sha1":"96b0a4a037c23ce2e7bc90c146610c473549665a","sha256":"1358a42f383b6e651d8412fbd5ab4c3e89b8c427d325815783e78d00d95e4138","sha512":"01a77df49f7dcb3ac493edc26b69acfc659b765c5b0f174637b96d8467eac85fede952c9f0052aaa9964306d1e3959a0326f5a10e2ce5835b3831f9543b951e8","ssdeep":"384:sCJBTMMf2IUiGUU+wm7OVTBBgSbqRFy0vVgBiCDBm8sFkI:soxMMeIUiGUUrzTHgWqRezBm8sFkI","tlshash":"c392b68a71d1709292b6b8adba7f440771f689a27484c520d54decc42fb81ea4133ffb","size":21019,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.127112Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"9671cdd78be44428a6396c3962992821","sha1":"956a083d2f430a50e7193ca9cfc72b8ba11407c1","sha256":"c786cc12c5317c364317a10c584eb7bff7e321c5e38d0d121d35801f2f3b89f3","sha512":"43dfdf8592e09570c3fe6c94400d00e7a4af47cb538661b6a8d9ed9483afbcfda8dc8f7e9e6f89e2479d06e225bed9abb962ded4b10580af39865036dbe33fe1","ssdeep":"","tlshash":"578004f7034454050104c105c34153c5711c41f1034011343004034350551d11151005","size":33,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2025-10-09T08:37:05.372583Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/toolkit.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"325f5dd8b44503ea1799409a40addb9e","sha1":"3887ffbc86f01677d34cce7ac8839305e175e97a","sha256":"dbe44f4b698a44798e63a0177f6283a2dff01335f142be72dccfedd66e91554e","sha512":"3c0064282b0fe67159fa595ef27f9d25da3d2a01dd418a2c6839a3f82340ae694dbecdb2eefaa0235ac578eb1265396f1c3843d3852689af8698aa9606f3cf79","ssdeep":"6144:BhwmDOh4h+tKEbvglibvUhUplSqkS8rszXyAzfIA5yft17aoKgs9rPozPUt0Mz2m:rDrh+tKzQawPoze","tlshash":"e9a44a897381b17242e771b5402f6106b3736819a849c098b579cce7adbdd8d22bbf7c","size":461456,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.136319Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-849063932\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dcaad38a93644bfbcc14a49ca8cb6e","sha1":"0d6f03535598fe8c0dbad29f41ee74691ddcf273","sha256":"25ec587bb1644ccfef23818e6e9a7975d27368c532ed27767ba04da211efdeaa","sha512":"76a1f9e889f3e2e5004ef4ee1e7016c4061f54fc50d1489e7e6b0fa2353ec982e7e8584de7bab424116d54f3d1391fc1f6cf22378018e463febcba17641fa374","ssdeep":"3072:839CyGe1SFWYAUyyCetug7k5MRJAkuptZFAVGx3s6g7FtKSK:sZSHAUymRd+FAVGxchBtS","tlshash":"aa24f7d9b393b06682a3b474503f010bb17b6d96f84ccc98e189c5d52eb8a99417bf7c","size":209822,"data":"","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-391028924\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d21f11c87a039f8e2954621d3b5d6bb0","sha1":"838cdbeeb40f1eec91abd4914a6f68005e982b94","sha256":"ba46867d3666985052336439bd3f6d3b64954c71407ae13f97fbf5a51b48f1b4","sha512":"05691e349d590e0c45650410c0cccad9df114de073f7ec8e91e6f72fc3fb50a1e325500066b4153bb108d551124d1a03b186b4dea185934fb8c129a27c78d942","ssdeep":"3072:Op9CyGe1SFWYAUyyKexug7k5MRJAkuptZFAVGx3s6g79tKSK:aZSHAUySRd+FAVGxchJtS","tlshash":"6514f8d8b393b46683a3b474503f010bb27b6d96f84ccc98e189c5d52e78a99417bf6c","size":203176,"data":"","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/fbevents.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"61df3554472fe8057b5ae4537648d00d","sha1":"125767dc32df57aa86a64801d9457923e378b397","sha256":"e37570ef85a3553930ba20dfab7280bfcead8a2238b536b5c03c629c35b3d4ca","sha512":"1dd7b30d0f0f183162af66424049097e138cd1a1de3f1dc6ab4c8a481253393d01af19b35f490b30e0a14e7f5ce69b89ccbf8e9ee1fecc95e0794520d01bfbf7","ssdeep":"1536:wM+OWt6w6aiSTxemsWXPwShThe7qv0a9s5U1jaMu5eJII+SNSMniXSZYSlIUiGU9:wOFSFnSZqYDGI","tlshash":"8793a68571e1b0938bb6786c967f5007b1b799e670c8c470d59cedd83e684aa4033fba","size":90273,"data":"","first_seen":"2023-03-07T12:09:33Z","last_seen":"2024-09-20T21:38:15.129583Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/ytc.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"49db10c8315384e8dad2e92a6841ed81","sha1":"f576976a579cd50da6b717db5d48e1ea7137f744","sha256":"63896532a7015ab5b7288359c02124980a5075e9267f0ba3fbfc7c3f5038b478","sha512":"ea7efeb69f987ff7257601c4536080d505d84bcb282d5f1eb09566e98ab4129fce8eefb9787cc2d661a097cca66defbb383df2629e950fd6a0c0521489972bb3","ssdeep":"384:s40C/Yfuq+MY6jLrEOLg3Fmea4T2IhNWF:VAbRrYAAmpIrg","tlshash":"ec62d858f6e0f0a542e3a171113fa9067775253d1c6a9460a206dbc4397cecb9236fbe","size":14972,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.128934Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac7f43c44fed4cf6e09d96b5a4357066","sha1":"8e27fa7a539f5061bddf860541196d42c3655295","sha256":"1a942a06f7da3702b3aba558359f26651da850132325b59469c65476655d3443","sha512":"09c6ce2180883d102f47af45c82def8b5d631e84883d5c417abd4a8b655d8edd4add69409ddfe12bfd8be631cca620e4550a58a317947368b873afc3fd74f1cf","ssdeep":"","tlshash":"41c04c317d4e197b477056414435757724c1451255f150645bc13371b5e33561d5ef04","size":149,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2025-10-09T08:37:05.374392Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/Bootstrap.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8746e0eaa34beca77c5679a495ed1d3a","sha1":"f8bc25c85508043935f3e63ff5cd1196c35762d6","sha256":"83acf00ba4050132d8547daca62a4fca4670029aaa75b01c5e99179cbc6d4991","sha512":"41f6bdb4e6b5ff59735d6fe88d9d9b8e1a4cc014969e309d7cb56bf73171fb5b3985316909154d0307c3166b9653f30da246c29f89bc6baa4074db55ce7365c2","ssdeep":"1536:TgTBTyJU40YuIqGk+o1egm8sRIuiClrcsX5QrF0hVHwzBEJNcJwWCEXHiiY1n1ya:FFkegm8KHGsHWuJNfiMNJ+Tly8DqZT","tlshash":"7724f5cc7292b06687d760b9807f200ef37ba945388e8020e159e5d97d7898f9277f6d","size":225981,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.131953Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ensighten.huntingtonbank.com/huntington/com/code/888d2dbb9a1987f2098524b7be7dad2d.js?conditionId0=422774","fqdn":"ensighten.huntingtonbank.com","domain":"huntingtonbank.com","tld":"com"},"ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c781e543d024387d6f64176d28bcfaa","sha1":"dc60511fe3f1f01068a61cfcd268c67ad8ffe20e","sha256":"b3b979dd0dfece67ba753b46fab30ce9d1fca3a29788d6b1ff7339d6be918649","sha512":"d0ad6d516221e6555e40571bb00d84a6183f3e185cc762fde6ce43203875f44a3da003ff6ef148175f92c2ba2a192eb78476aecbc622c3c6e9ad64da04bedf54","ssdeep":"1536:MAsIk3irkLj/wtzLXMNrgDF4Jf/chlEzHQZSe5r5sKzXzMSjvylJToeMod69jG/L:AgtzLXMt3vS7wJTXJ","tlshash":"f8e35b8cb3717069a8e621bc7b9f030470b568ae7641d469e188edc86e7c64b5233f7d","size":148164,"data":"","first_seen":"2023-08-17T22:54:53Z","last_seen":"2024-08-21T08:30:19.77435Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clinch.co/a_js/client_pixels/clq/script.min.js","fqdn":"cdn.clinch.co","domain":"clinch.co","tld":"co"},"ip":{"addr":"54.230.111.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf8e39b5254a962fc0052a7f041f1b3","sha1":"930edeb19f1b312146615335d7d0615aeba3e300","sha256":"68b1a4b17909d00e943d68b7a9cbd71fe613b0fc32da7985470865495b282477","sha512":"d94ed0e4c4b600bf75e02c06dea0f1470157fdb8ade935302b4ef0d63c094f8c89074ac3dc4a63637b23fee997f4cff05f0ebf1e069c85eac25b6dac83cdea25","ssdeep":"192:5xB/1dsY2l8aR1HiarB++96o60x/1Jm2NLTCWQdBOuyF/qcevjhq:zB/2RBiars+M011JTQdBOuypD","tlshash":"6c12f9587280683f4ef711b9343f6701b1364989754c9900d4a6da783879f8bb2b6fae","size":9228,"data":"","first_seen":"2023-10-31T18:48:35Z","last_seen":"2024-08-20T21:37:18.895289Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-849073348\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ff119068eb0b3c6bbfef6ef4f54281a","sha1":"6787d5e7aa141ed020d55bd3bfa103f23abffbe3","sha256":"815d4be8ccf5e839ecd5c6dbdb36d98be7960f4c52bda8f4f781fe3f984f91cf","sha512":"699c234b2d83fd9b54b6d17c9778bdca502185c49c590f9a1107fb5c09e08fcfdd24f3f0bfaeafda51786a577b9333127171131a6770f65175069e796360e5b1","ssdeep":"3072:RR2AOMLO1ya9SALihrC08N9moVQPJoAyfh1NHDTEszM:CyO1yqN6ug2Ayfh1Bcn","tlshash":"2fe31ad8b3d6b12a93a37578503f010bf27a6d92f888dcd4e186d9c12e786990177f6c","size":153081,"data":"","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/ruxitagentjs_ICA27SVfjoqrux_10197200831173448.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"227400e4070ac91189e80b05077abe20","sha1":"714374d4c852c2058b1df7f4a6ff9f7acc164867","sha256":"d42a94bdd0158c8df1d1ea4ae03da23f0007e9b6d5b38c05eb4797ffe90e1cf8","sha512":"463d16d1ad35e0a275c303b3bd826727a05e7ccf02ee501f2d00ddb83d9c110533dbcaba525ed2ae05205e65a8dc1a81505f80e6c5f0f47afa5cd3fe60f6ab84","ssdeep":"3072:Ackt+QzRZZTiCRCQqCK+In4OQyCb9kaNnfDunDV+f:Vkt+obZTvfINQVyODGD4f","tlshash":"5a044acdb7627065879320b460ef150ff27a6958ac4894d0e146e5e83cb8e9e427bf3d","size":182288,"data":"","first_seen":"2023-03-07T12:23:04Z","last_seen":"2024-09-20T21:38:15.1372Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/bat.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f07693f6368c988acd20de4362479103","sha1":"d04355e119fac2c9104c4fe98015e22f3f181d93","sha256":"4dd6c09ddcb0e53a6290cc1df35224856073ba5f89d4134bd7c69e4fd9c6f515","sha512":"1a0bd6850f3e7744216fa133493fa0d686ebb815b23ed2f2f511cea982fc79794d882edce8dcb22670e455b94ba7ef2fe6efc7e95710dd3243cbf54e65449a66","ssdeep":"384:otUVCwh9wC22xo1nB4KZjhbwM05Jkr9qNHfs9nB/wDSliNqCET8zT7QAEqny7YOI:pCwhBRHDOZwDhzT7QSnKYO56","tlshash":"66c2f982739158168ae986cc70691a03933b531e74fd20acb78cedf65588e4f517bf3a","size":28050,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-03-29T10:28:23.267972Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/oo_engine.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3023bde795e4926691e3691ace0d9356","sha1":"053c86b53ec7bca624cffc3f6321697d35a1c5d5","sha256":"1bf7836282cf0a1f1cae452a2b7d03f4857827aa682e36562831fe3bc34f30a5","sha512":"43164f1195c6260244545d0fb971054ba0667f3b20f65da60bc34e262d10eed4546b08b3d1f0da10fa0b95a14f9c587fe862770f9910f1ba4452d414e8f705dd","ssdeep":"768:FZ+jYRpWJOKYjlGfOWeu3GgeJBoObxSNr+2xiFPoGvp5o7MksMvi4:eURQl2TBnbxkr+2xiFPos+r","tlshash":"ba23f7647961323a04e6686d63bf7319717371e215c40900e0b1ddf8abb8d0b9977fac","size":45689,"data":"","first_seen":"2023-03-07T12:11:24Z","last_seen":"2026-05-02T02:00:27.528338Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"813f7afe12806d2df1c685b53ab49c0e","sha1":"8ebc2ee97e18dd336b670b53dbccdfb8788a5825","sha256":"ab008176ac77145e392d8392787e81c90c2592a54b1590d8779c74f956c0e46a","sha512":"2cfd9473c2bc8c0c516c30d1b03838ae0e89dc97ce4c7e105c9ae7a33e507660d7b3ece76116ca79570d95bde32d0cbf86798b49983e3e9ffe29d3c2c505cc0a","ssdeep":"","tlshash":"c980008a80b00c0a03a0a00ccac2ac380220800b0b2e80a38ac028a0ba880838808000","size":26,"data":"","first_seen":"2023-03-07T01:02:36Z","last_seen":"2026-05-03T08:23:36.949296Z","times_seen":100729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"b2c2041f8d99c45e0f21474fe4f8b7bc","sha1":"0b876666393469c726a2e3edbb29544c03a92154","sha256":"17f5bfdbae6b35ae8bc3b27c069526d694021fe1e37a8027678e770fbb05e061","sha512":"401fafee1b739893eea01d7a74ddc334d123ec98208c7ccbfbc8cdbcaa51f0dc3c94cb1efc856e65a13640428c189f44a82e3f9036c3d69924d62074e800f412","ssdeep":"","tlshash":"016000c0cc30000c0c000030003030300000c0000c300330c03000c030300f00c03000","size":17,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-05-03T07:22:48.205929Z","times_seen":14083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"cdn.jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-30T05:55:55.009862738Z","timestamp":1701323755009,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"235ed-iVElpFIqOxDuetoG7mUDWHy/lcU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 30 Nov 2023 05:55:50 GMT\r\nage: 20118443\r\nx-served-by: cache-fra-eddf8230117-FRA, cache-bma1631-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23140\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":23140,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-05-03T08:42:24.488645Z","times_seen":55051,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/img/oo_icon_retina_black.gif","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.367Z","timestamp":1701323758367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/img/oo_icon_retina_black.gif HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 552\r\nlast-modified: Mon, 02 Nov 2020 23:59:26 GMT\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0piGyMSlgCRXsiUQmW6uWqNDY8YX1%2BPBM1%2FKg7DaTXacL1U%2ByhZwq6qopJBsJQbb2Xmyx6mWqY3WE9e8ISLfiqg8%2FZch2N5m70ZSkA%2BmGv7z6hf5nKWBe%2FXna%2BQjcKEEj7KtVi8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82e0d815a997569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":552,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 18\\012- data","md5":"0f74fe3f4f85d3c7f096f2416efa893a","sha1":"bffedd9c6e9b04c0e6f7f77bd689013de5e8d01e","sha256":"15f5836e52324d46e89eed325a5de5158f0d9bb29d59e1ffc381d961a1f6980d","sha512":"5c6a13b949a0edd8cba5e74408d5be72fac8db63b53a4f9be564889593827cd9bbee99da638baa1b0668265ee589f350675982ef95763cea3ad32b0ae4251ac3","ssdeep":"","tlshash":"e6f00501b5c93c42ec1b08cc930f01501435ff1108b98eac56d5767cd078d311d1914c","first_seen":"2023-05-22T00:25:35Z","last_seen":"2025-10-09T08:37:05.341701Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-30T05:55:57.092Z","timestamp":1701323757092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: chk=test; expires=Thu, 30-Nov-2023 06:05:53 GMT; Max-Age=600; path=/\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ibDsqF2HhtCg5foNaSg1r14uCuiDMqtx0Of7YUpWt6p8kaElsK4%2FP3FjwLibfbSinALSkB90MJjSmTlryi6zTR043mcsWzxZfBSCyyV%2FTPBCcnrbnXUS8DcmEvXwBtVDfHtCzj0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d80e2d8e569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3686)","md5":"a5d37435ed7dfe018f25f91bf94f8e6d","sha1":"8e7b44891ec066d77c96d2763fa7a5ddd5f95f75","sha256":"263c1c214a87243791fd4d0e7167aadc79ef3a3063ee30ab37f44fd63d1f9afc","sha512":"6b69463abe9cf832f592c7b9beb114749c6743be2fbb91ead304ec813754eaffdc44ddbbfb9a0f9185faa922b29348654bae9069dfceb6804c5272750aa6d4b5","ssdeep":"1536:Fy7GKjBtHzBUYoUvDA0yzebO/iTwlHb6ghtSa9tmbMj14YoN8RoV7fqtyqtkNc7G:serSbeoN8qj","tlshash":"f7e3947041e4367bd043539079353738b9d9804be24c4152bafd6ea89fe2ce2bfab558","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T11:28:34Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1124,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/7a8ba97f","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.346Z","timestamp":1701323758346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/7a8ba97f HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-length: 32863\r\nlast-modified: Mon, 02 Nov 2020 19:48:48 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fA9SXY5QgHX92gMq0p5TtoDse%2FnxpjknevI2D8e0vyl47NPWmq%2B%2F4M8phve2MbRnjJbhg2YeBk945GmV1wJVsu8dp2BdwSuMarjBzmKfpGTud997O8QcEmSqsVKVoDSy0bzWeNs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a992569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32863,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (19024)","md5":"af77eedae6083a5bd6f07cec713ab58d","sha1":"2804fbe107e6af68bf7e2d39cfb176987e1fc9ad","sha256":"06af35b557f7713851c46e61fd940a1dcf2381d6372582a63abc43dfdee46c33","sha512":"28e861ffbc52ba5b83c1bd729c23c40d05b9bdb2ca6e2669cf539fce9a345b44d6cd109adbc5096c9562813ebff34b7eeb4d67bbcff69765ae5826d60a0baa22","ssdeep":"768:W2gegXf9iQEpbGavW7LK5FPof4fDHFxtAAWLJB0MEp8BRDdW0:W2gegXViQEAavW7UFPof4bHL4LJw8nv","tlshash":"bee259e872d7ed0b678f4983fd505efd20728577a4857247c3aeb98d16f828bc248884","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.133346Z","times_seen":21,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/js","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.301Z","timestamp":1701323758301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/js HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-length: 96892\r\nlast-modified: Tue, 03 Nov 2020 20:36:48 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=82vkMoyCV2MDvaX%2B6dbhkzta4BFISwh5vpYzkhlQVzjn7rWhFPbJVHeSiwRjynOtpAaI2RXNQD%2B1cEZrE7ggmLvL1oMpt1ZC6Xn7mcEk48vXEmQIhKblVAqsOq2Tac9yePKhDFs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158979569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96892,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (2639)","md5":"67e765e44e7d18ed41711d7e4935bc50","sha1":"0289b9754b56ba057550a7e7d62e0b3587e43f2d","sha256":"e5973becebda7e91d869447913826e69cd123d87e1a6f2ddf8897d72a63a3c6c","sha512":"3245d8aad40530192a2c8bb1bc1532cd104ce4027b9dde22a282329060fa19d56378bff92223b61777ea1205fc5117ff87cdd9a06d3813507fc798f7403fe9e7","ssdeep":"1536:JWXgXmurKn8aC0Y4WzQ5nAEvwT8Hp+gI8EP+HJ1Y6m5SxvsiGYkD9nIuj1P9GtNq:JWXgXmurM8z0fFnA4u8JY6m5SxGYkDqG","tlshash":"6c9309d9b786b066c3a3b5b4453f000ba17aada2f84cccd4e186d4d02e7869d417bf6d","first_seen":"2023-03-07T12:11:40Z","last_seen":"2024-09-20T21:38:15.131291Z","times_seen":23,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/06bebd2b36rn240c2a1532a26141a767","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.488Z","timestamp":1701323758488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/06bebd2b36rn240c2a1532a26141a767 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-length: 72012\r\nlast-modified: Mon, 02 Nov 2020 19:48:48 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=HcRspiNefdikdjz1nFu4D07TCFmkVFc458S6%2FxzgVdLoPA8aWz%2FxZOPqGeVLtBqW6fke1MVm4vXq3wJaG6Z8utQWn3OgbGQ5OCfiq%2FVv6QMkE4JQFu38MyF5bQHrLlTuGTR7wMU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d816ba20569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72012,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"335f2776eaf4ca7eca9953d2240c3316","sha1":"5f5702f072d8e721dd3557ccd2a0944b3cc58fa5","sha256":"ca9ee108c9cd3072864c1fcfe42f8fa40f829a33267388e0adbf41fa8b2da9a5","sha512":"67c454909444775b3b5bd87b31a37a6539f37578ac7994f5f195953d9eec6faf17b40296e17c08ae71d7b330323d460720f21e088e094d9decc9c144e3c4cf58","ssdeep":"1536:DYIKl361iU00wqrXrGzm3MJ7yJYK/yxXbAU4QcsHUAwos7Tve:+0AwoGK","tlshash":"046368a97297f94b274e0d43ed0d6aaab3724426e185b20bc7fbfd4e17b416ec318444","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-03-25T12:56:21.293172Z","times_seen":110,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/img/favicon-16x16.png","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.500Z","timestamp":1701323760500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/img/favicon-16x16.png HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test; dtCookie=-15$D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA; rxVisitor=17013237586304S6N3NRE50D857LP30MSQSKM0H0U8H6R; dtPC=-15$323758596_696h1vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0; rxvt=1701325559393|1701323758633; dtSa=-; dtLatC=6; loginCookie=personalLogin\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 629\r\nlast-modified: Mon, 02 Nov 2020 20:02:32 GMT\r\nage: 5617\r\nddg-cache-status: HIT,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=C69rPT2ZF%2FoY4Rhz%2BEwpoyTOoWdYY3Y5GW9%2BfybIoQBSfZ8LceWzkwiPGMut3EkO8yU%2FgknPQYwQjXqtasmV2Bzn3Mq3pAA0OOPVxVuWSRlWAk7UfcuWpOec9l5nnTYek5EUmVg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82e0d823887a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\\012- data","md5":"b3edcae46fea41cde6b830ecfe7f89e4","sha1":"f031fd0f0050d9601254e35eecb6d573585418f9","sha256":"5c838bb93e9d85d3badb18e708a16a8287505922eada63ed4fb7495eaefb0a17","sha512":"8975c1d9190494c183848b4ac5e4bc1d7e29c493274a1b5d51aaa7be11dc1db9d93ce8532437cc80b520422dadd99ad4b2efbd41524d4181adc22090ac818106","ssdeep":"","tlshash":"dff062c36583f05c8ae30a2e1a30b2414367673141b8690efd06681d7950b2b56cdfe5","first_seen":"2023-05-12T00:55:39Z","last_seen":"2025-10-09T08:37:05.322551Z","times_seen":55,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ensighten.huntingtonbank.com/error/e.gif?msg=Dependency%20with%20id%20679729is%20missing\u0026lnn=7\u0026fn=https%3A%2F%2Fhuntingt-authv3.de%2Fassets%2Fjs%2FBootstrap.js.download\u0026cid=1035\u0026client=huntington\u0026publishPath=com\u0026rid=-1\u0026did=-1\u0026errorName=DependencyNotAvailableException","fqdn":"ensighten.huntingtonbank.com","domain":"huntingtonbank.com","tld":"com"},"ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.655Z","timestamp":1701323760655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ensighten.huntingtonbank.com","organization":"Huntington Bancshares Incorporated"},"issuer":{"commonName":"Entrust Certification Authority - L1K","organization":"Entrust, Inc."},"validity":{"start":"Tue, 02 May 2023 14:04:33 GMT","end":"Wed, 01 May 2024 14:04:33 GMT"},"fingerprint":{"sha1":"D2:CB:B7:7A:8B:06:3B:10:5F:DA:B2:C8:11:C5:99:DE:24:4A:99:45","sha256":"D0:AA:A5:C8:FF:02:25:11:8A:A6:34:85:EF:8A:F8:E3:88:1E:A8:CA:F6:2C:6E:17:9A:D4:2E:E7:16:D4:9D:6A"}}},"request":{"raw":"GET /error/e.gif?msg=Dependency%20with%20id%20679729is%20missing\u0026lnn=7\u0026fn=https%3A%2F%2Fhuntingt-authv3.de%2Fassets%2Fjs%2FBootstrap.js.download\u0026cid=1035\u0026client=huntington\u0026publishPath=com\u0026rid=-1\u0026did=-1\u0026errorName=DependencyNotAvailableException HTTP/1.1\r\nHost: ensighten.huntingtonbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nserver: CloudFront\r\ncache-control: no-cache, no-store\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4f114016fe4d6c05531b0486ec2868be.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-C1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 3w1WBjgU1LLxb4lvOsg1aN4CMmIXWbT4NdBQ_Z30IIvSJufULGOu4A==\r\nage: 870\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T08:30:45.984204Z","times_seen":14570157,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-10701487","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.658Z","timestamp":1701323760658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=DC-10701487 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 67216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67216,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3026)","md5":"473ef22bc050826064ccee5004417e01","sha1":"10c8300f702d17e6d9416487f1afd358d5da392b","sha256":"85c7470a3bf747fac13a63e9f32a44cabfe92874de5f62ed15e48ada0da92269","sha512":"906f2c203ec6dcfe51db60a82b5b0b18eaee74bc94b524a66f0c214332aab43488b2c78862f7eb55e7e7561791436054874913bf16ec7925b8b92252c5d2751c","ssdeep":"3072:LJ9CyGe1SFWYAUyyRe1ug7k5MRUAhXZFAVGx3s6Fn0EtvVSa:tZSHAUyLRBpFAVGxcynRtvJ","tlshash":"8504d6d8b393b16683a3b4b4503f110bb17b6d92f84ccc94e189c5d52e786a9817bf6c","first_seen":"2023-11-30T06:56:09Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":100,"dns":0,"connect":8,"send":0,"wait":31,"receive":19,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/HuntingtonApexWeb-MediumCaps.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.317Z","timestamp":1701323758317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/HuntingtonApexWeb-MediumCaps.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:56:14 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=LF6VzW%2B5ORtEg8bnLTKc5O7xQDGB4FOTYHQp8%2FT%2Fd4JL4UGYVaNnjsX7SB3au17Jmj7%2BHAlgwScrUnP0EFa42yJDMew%2F%2BbmmkXQcJxE1B%2F5d4StqkLprDZ0J2%2F0gwozpcgKTw50%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159980569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19988,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18636, version 1.131\\012- data","md5":"655ad496604d87af63f9df9a16d25d72","sha1":"214467e9eca95a6116e91af28ef8e7343cfc0550","sha256":"472db8137a1b381759d9d083888b380f94432d7def72e82c60afbf5a6a21e451","sha512":"2893e296800bff5b3ea80807daa0b4aadab2c7e94f5f55cffb854ecca0f54c019928d33cca9025e85fa893e080971afb564b573360acec477ab197733376d943","ssdeep":"","tlshash":"","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.e2m01.amazontrust.com/","fqdn":"ocsp.e2m01.amazontrust.com","domain":"amazontrust.com","tld":"com"},"ip":{"addr":"54.230.218.11","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-30T05:56:00.954163949Z","timestamp":1701323760954,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.e2m01.amazontrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nContent-Length: 280\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=7200\r\nDate: Thu, 30 Nov 2023 05:55:56 GMT\r\nLast-Modified: Thu, 30 Nov 2023 04:16:53 GMT\r\nServer: ECAcc (amb/6A94)\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: 87KSyP9ImqYIAyCC3fJ_ZPygzjMYz4iWxkStBzgOZ10XhAcPx7aQtg==\r\nAge: 5943\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":280,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"b9b5099df9fda258c9a1ec3e05d0542c","sha1":"e41fa13d2319cd120ebf99918be4dad5857a73ac","sha256":"3673a7e4cf6a4d79337ee10efabce9a50a672c260a19d2d9541ba0a1127e29d2","sha512":"4de56d07fc47c99cfe95a9b0b127d5381818c837ca2ca687a740b56c5763ec8d4df2e8adc1332e36acf5f5c3609b790636789cb832e421ed2d57df4fa6e0ed92","ssdeep":"","tlshash":"e2d02b148d11fea8ec1899504cb8ea14b0030044918fd1b1643e93f33d539ed118c514","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T11:28:34Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clinch.co/a_js/client_pixels/clq/script.min.js","fqdn":"cdn.clinch.co","domain":"clinch.co","tld":"co"},"ip":{"addr":"54.230.111.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.651Z","timestamp":1701323760651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clinch.co","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M01","organization":"Amazon"},"validity":{"start":"Mon, 27 Mar 2023 00:00:00 GMT","end":"Wed, 24 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"72:AA:B0:02:98:13:E2:E1:FB:E7:EA:C9:45:78:0B:6B:58:BA:66:D4","sha256":"66:05:EB:A9:FE:8F:B9:DC:FB:E9:AA:6B:BB:93:FA:7C:00:1B:15:46:C5:14:74:C1:8D:0D:B8:A6:36:BA:D7:0A"}}},"request":{"raw":"GET /a_js/client_pixels/clq/script.min.js HTTP/1.1\r\nHost: cdn.clinch.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:57:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Thu, 30 Nov 2023 02:52:47 GMT\r\netag: W/\"caf8e39b5254a962fc0052a7f041f1b3\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: LxdDROWhDolx9daQ2qBRmRoeqqHjXY38rWGy06C2vRDA9UelmGJfvw==\r\nage: 11131\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61354,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"5734073b0aa968494f527528bf01eda5","sha1":"ba4df4382421671ac24d382c184a8e12c0c010aa","sha256":"54037ec7d669736636599fd19f33af55f3a624f9961559b65dfc365dd8bb3c56","sha512":"91a43f900cce7d32c8a943f86a1052173ceccd9a8c871eef207ff086ac18529db669a5d7c83db6201ebeb6c7e49b8d59e727a58384876dc5b8650ebf6249d3d6","ssdeep":"1536:jn+feavzCn9XAE3bdoX8ygu/TD1aQlHh3h+DDWu5Bp2ui7jk3sg:jMBrQ9QE3J48pu/VaeB3hK5muGYsg","tlshash":"ae530220fe4bd050684daf95f41d5fffab54d5a3b028782f4e909b51cb0c4a82de94ba","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":320,"dns":126,"connect":2,"send":0,"wait":1,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-786635084\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.055Z","timestamp":1701323761055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-786635084\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 72104\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72104,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3026)","md5":"7e2eb7725e3562a4686d719c261cd097","sha1":"7198474215d40148e072150f9328393c63863438","sha256":"e1285fbbb5c1ba502d33acba5384b883cbefdf8715157ec5e60d22d156f8cef9","sha512":"77060d9e6ed9c45d570e4b4f2e7925f13216ca1a892e5e41a3abd007395cf3cedf09da2d7e00e30281118a3f5763368ce4b472399b9fd3a1acce3cc65ce72637","ssdeep":"3072:LJ9CyGe1SFWYAUyyWekug7k5MRJAkuptZFAVGx3s6g1ttvVSK:tZSHAUyLRd+FAVGxchftvN","tlshash":"7114f7d8b393b06683a3b474503f110bb27b6d96f84ccc98e189c5d52e78a99417bf6c","first_seen":"2023-11-30T06:56:09Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-391028924\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.057Z","timestamp":1701323761057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-391028924\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 73712\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73712,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3026)","md5":"d21f11c87a039f8e2954621d3b5d6bb0","sha1":"838cdbeeb40f1eec91abd4914a6f68005e982b94","sha256":"ba46867d3666985052336439bd3f6d3b64954c71407ae13f97fbf5a51b48f1b4","sha512":"05691e349d590e0c45650410c0cccad9df114de073f7ec8e91e6f72fc3fb50a1e325500066b4153bb108d551124d1a03b186b4dea185934fb8c129a27c78d942","ssdeep":"3072:Op9CyGe1SFWYAUyyKexug7k5MRJAkuptZFAVGx3s6g79tKSK:aZSHAUySRd+FAVGxchJtS","tlshash":"6514f8d8b393b46683a3b474503f010bb27b6d96f84ccc98e189c5d52e78a99417bf6c","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-849063932\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.056Z","timestamp":1701323761056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-849063932\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75149\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75149,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"82dcaad38a93644bfbcc14a49ca8cb6e","sha1":"0d6f03535598fe8c0dbad29f41ee74691ddcf273","sha256":"25ec587bb1644ccfef23818e6e9a7975d27368c532ed27767ba04da211efdeaa","sha512":"76a1f9e889f3e2e5004ef4ee1e7016c4061f54fc50d1489e7e6b0fa2353ec982e7e8584de7bab424116d54f3d1391fc1f6cf22378018e463febcba17641fa374","ssdeep":"3072:839CyGe1SFWYAUyyCetug7k5MRJAkuptZFAVGx3s6g7FtKSK:sZSHAUymRd+FAVGxchBtS","tlshash":"aa24f7d9b393b06682a3b474503f010bb17b6d96f84ccc98e189c5d52eb8a99417bf7c","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-724266616\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.059Z","timestamp":1701323761059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-724266616\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75152\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75152,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"8e8fc40837bc8f2c143122b816887040","sha1":"0764df2988816220e4d98d50f6d255de596aead4","sha256":"203369aeb9fe60de765d86ab03eacb467f036baf7d630e00046b8ff79e0eba81","sha512":"f66aa73f3ddfd6fbbf28e8776f8c85584039fc259a59d39e84558f1749ab0c18bfc2aa1f984bd9cbeeeff4a27283b890b736f7420f5a17c9fbf8b4bb7b6b8020","ssdeep":"3072:o39CyGe1SFWYAUyyqe9ug7k5MRJAkuptZFAVGx3s6g7FtKSK:oZSHAUyWRd+FAVGxchBtS","tlshash":"cd24f7d9b393b46682a3b474503f010bb17b6d96f84ccc98e189c5d52eb8a99417bf3c","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mef957.dynatrace-managed.com/bf/55ab56e3-f58b-45f8-a01d-56e2db48866f?dtCookie=-15%24D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA;dtLatC=6;referer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373;visitID=KPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0;app=0bd76d7cc9264013;end=1","fqdn":"mef957.dynatrace-managed.com","domain":"dynatrace-managed.com","tld":"com"},"ip":{"addr":"100.24.162.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:03.631Z","timestamp":1701323763631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mef957.dynatrace-managed.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Sep 2023 19:10:22 GMT","end":"Wed, 27 Dec 2023 19:10:21 GMT"},"fingerprint":{"sha1":"1A:FF:4E:53:3A:46:D3:B7:FD:11:5F:A4:50:A2:27:5E:D1:47:03:E0","sha256":"A1:88:23:78:81:35:68:BE:F9:51:F9:39:4D:56:B6:3A:AF:E4:C6:CD:1E:EF:F4:F3:E8:7E:D8:B5:E1:9A:EC:C9"}}},"request":{"raw":"POST /bf/55ab56e3-f58b-45f8-a01d-56e2db48866f?dtCookie=-15%24D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA;dtLatC=6;referer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373;visitID=KPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0;app=0bd76d7cc9264013;end=1 HTTP/1.1\r\nHost: mef957.dynatrace-managed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2985\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 30 Nov 2023 05:55:59 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nCache-Control: no-cache\r\nContent-Length: 28\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b3b616cdccc63672fb7dfb1c9cf17b94","sha1":"209c6645bf2bfc5aa3114d56846f37b51f018728","sha256":"1280314b5bc8ff4f42b0ae1b45c42bceeddce7f4a09a13e24aa7f316dd4ae028","sha512":"1d13810c6be5c18c0aa68f68653f0a23d4237f889e61727ffd24cc225ccf480d4e3d42240a8fab5762d5f54ad07b74bb0cbbf9a235d2e767c2d677c96833043e","ssdeep":"","tlshash":"fb80000283008003cf0002faacc0a20330f00030aa8c003a0080aec302caae08800000","first_seen":"2023-04-09T18:40:23Z","last_seen":"2026-04-15T18:24:31.420153Z","times_seen":78,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":365,"dns":29,"connect":102,"send":0,"wait":101,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ensighten.huntingtonbank.com/huntington/com/code/888d2dbb9a1987f2098524b7be7dad2d.js?conditionId0=422774","fqdn":"ensighten.huntingtonbank.com","domain":"huntingtonbank.com","tld":"com"},"ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.559Z","timestamp":1701323760559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ensighten.huntingtonbank.com","organization":"Huntington Bancshares Incorporated"},"issuer":{"commonName":"Entrust Certification Authority - L1K","organization":"Entrust, Inc."},"validity":{"start":"Tue, 02 May 2023 14:04:33 GMT","end":"Wed, 01 May 2024 14:04:33 GMT"},"fingerprint":{"sha1":"D2:CB:B7:7A:8B:06:3B:10:5F:DA:B2:C8:11:C5:99:DE:24:4A:99:45","sha256":"D0:AA:A5:C8:FF:02:25:11:8A:A6:34:85:EF:8A:F8:E3:88:1E:A8:CA:F6:2C:6E:17:9A:D4:2E:E7:16:D4:9D:6A"}}},"request":{"raw":"GET /huntington/com/code/888d2dbb9a1987f2098524b7be7dad2d.js?conditionId0=422774 HTTP/1.1\r\nHost: ensighten.huntingtonbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 16 Aug 2023 17:10:59 GMT\r\netag: W/\"8c781e543d024387d6f64176d28bcfaa\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=315360000\r\nx-amz-version-id: WmYvPGA5mAlyuaiWnpeNS8ff9Sf4HpnX\r\nserver: CloudFront\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 106758604a7f1ae0fa6678cd3d828d62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-C1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 3c38wc6i1Pw3TLCD_19dBUIOKeFsMFrBip2lkDWX1fM9Eh3bnfzWGg==\r\nage: 2438037\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37688,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix\\012- data","md5":"7044385c84a9e59b90982f91f67adb8e","sha1":"cc589022f36bf62e846120b7bb61aee0f07f5f00","sha256":"dc2f4693bb1995c7741db87785e150d3b0a5f8310d33b8cfdf9affdb8bb9ca3a","sha512":"352929382851ba804c4d8cac12fa597e2ca2eb8a03ab0b110eb30df2ed64b85b8495c8a82fad22786e074c6204705dee78cd2196aa6a8321ff746f9ceac91bb6","ssdeep":"768:XNx0Zplfds8yXVNHKjVdRp70Nid6jgendVUL+fuSZGzEtUe:LmdsT0jZN0NidKgedVULREb","tlshash":"9a03f10a2649254e586a0d71ddcb5ea4ba89fe7ca086c107dccb245d1fd0f74af68bc2","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mef957.dynatrace-managed.com/bf/55ab56e3-f58b-45f8-a01d-56e2db48866f?dtCookie=-15%24D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA;dtLatC=6;referer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373;visitID=KPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0;app=0bd76d7cc9264013;end=1","fqdn":"mef957.dynatrace-managed.com","domain":"dynatrace-managed.com","tld":"com"},"ip":{"addr":"100.24.162.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:03.631Z","timestamp":1701323763631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mef957.dynatrace-managed.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Sep 2023 19:10:22 GMT","end":"Wed, 27 Dec 2023 19:10:21 GMT"},"fingerprint":{"sha1":"1A:FF:4E:53:3A:46:D3:B7:FD:11:5F:A4:50:A2:27:5E:D1:47:03:E0","sha256":"A1:88:23:78:81:35:68:BE:F9:51:F9:39:4D:56:B6:3A:AF:E4:C6:CD:1E:EF:F4:F3:E8:7E:D8:B5:E1:9A:EC:C9"}}},"request":{"raw":"POST /bf/55ab56e3-f58b-45f8-a01d-56e2db48866f?dtCookie=-15%24D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA;dtLatC=6;referer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373;visitID=KPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0;app=0bd76d7cc9264013;end=1 HTTP/1.1\r\nHost: mef957.dynatrace-managed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 8725\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 30 Nov 2023 05:56:01 GMT\r\nContent-Type: text/plain;charset=utf-8\r\nCache-Control: no-cache\r\nContent-Length: 28\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b3b616cdccc63672fb7dfb1c9cf17b94","sha1":"209c6645bf2bfc5aa3114d56846f37b51f018728","sha256":"1280314b5bc8ff4f42b0ae1b45c42bceeddce7f4a09a13e24aa7f316dd4ae028","sha512":"1d13810c6be5c18c0aa68f68653f0a23d4237f889e61727ffd24cc225ccf480d4e3d42240a8fab5762d5f54ad07b74bb0cbbf9a235d2e767c2d677c96833043e","ssdeep":"","tlshash":"fb80000283008003cf0002faacc0a20330f00030aa8c003a0080aec302caae08800000","first_seen":"2023-04-09T18:40:23Z","last_seen":"2026-04-15T18:24:31.420153Z","times_seen":78,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":365,"dns":29,"connect":102,"send":0,"wait":101,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/css/site-survey.min.css","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.324Z","timestamp":1701323758324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/css/site-survey.min.css HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Nov 2020 23:21:36 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=L8hAtSrO466bf8J%2BKuwm4tYqcRgibJAYezsLGLKNanLNotsN1lf9IDyY3P1OloiUkIjDoVB%2BGNfCfCk8lvyx9WGtIDOx%2FHR9638FiL6omtKRVqtKteVxcBx8%2BrC6O9Hp2YMXIQg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159988569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4390), with no line terminators","md5":"cbc9c35f82525f69a000bfd4a44774a6","sha1":"e86ce42cc72bf577ece9153ec4630f117165e973","sha256":"0643ef1189b846f8e023e65ef3c277fffebd86b1584aa59e13cd8877bb7f63ef","sha512":"ca758980f66bd5d857a88c66e4a64ebb1e2b78f0b219e65a7a232018aa40e456a3975928242665638819607d49fec6fc434c5097ba69bc42d87bd54468513f95","ssdeep":"96:/31LaKyxJhWgSnHMAq24xx4ZWD42XH5qOV7iXrX/T04Z7XWnyVW+:/31QL0OV7iXrX57X+5+","tlshash":"279179f5c928130874768a2f9bf2704e11e170cbbf7155866aef877cdad032415aa7d8","first_seen":"2023-04-17T07:04:01Z","last_seen":"2025-03-25T20:57:31.45316Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.251","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.044Z","timestamp":1701323761044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Oath Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Nov 2023 00:00:00 GMT","end":"Wed, 27 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6","sha256":"0A:DC:8A:FB:63:56:2D:8D:E2:CE:B6:4F:F0:A6:8B:C9:F8:BB:A1:BE:16:48:D2:6A:5F:C7:40:28:7F:DB:02:3B"}}},"request":{"raw":"GET /wi/ytc.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: QZexXZ4Wcq4MinKCrb9ZYf+zBHeMj1fciDYeVZrtGaqSzxTC/qp4K8YcCCw2rC2oU6XxZ/MV/L08uv8seQ4vIA==\r\nx-amz-request-id: AESXSEW27ZXE57XJ\r\ndate: Thu, 30 Nov 2023 05:55:55 GMT\r\nlast-modified: Mon, 26 Jun 2023 09:26:35 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 31 Jul 2024 00:00:00 GMT\", rule-id=\"oath-standard-lifecycle\"\r\netag: \"5c6ed25dce803fd84288922b8928409e-df\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public,max-age=3600\r\nx-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: Origin, Accept-Encoding\r\nage: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18187,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18187), with no line terminators","md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":139,"dns":28,"connect":34,"send":0,"wait":40,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/121543311796381","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.285Z","timestamp":1701323758285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/121543311796381 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-length: 21019\r\nlast-modified: Mon, 02 Nov 2020 19:48:44 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=LSHsgbA9lGC3zUu2EespD3WywbwMRIknGz5LxYUbscZIYRbd4q0dXPOcNUMLfsq4QBgc4GbIhpJs7VdY5SLGNR4YXW7thErKat735v8v0q1OSgeG7Jjlt5unHxgyKIUjNFQqENs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158974569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21019,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (6957)","md5":"e3bf3fa0a912c14bfe1c0b7282fbfa8a","sha1":"96b0a4a037c23ce2e7bc90c146610c473549665a","sha256":"1358a42f383b6e651d8412fbd5ab4c3e89b8c427d325815783e78d00d95e4138","sha512":"01a77df49f7dcb3ac493edc26b69acfc659b765c5b0f174637b96d8467eac85fede952c9f0052aaa9964306d1e3959a0326f5a10e2ce5835b3831f9543b951e8","ssdeep":"384:sCJBTMMf2IUiGUU+wm7OVTBBgSbqRFy0vVgBiCDBm8sFkI:soxMMeIUiGUUrzTHgWqRezBm8sFkI","tlshash":"c392b68a71d1709292b6b8adba7f440771f689a27484c520d54decc42fb81ea4133ffb","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.127112Z","times_seen":23,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.293Z","timestamp":1701323758293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/ HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vEvL9sWORihwI%2BNBBB5J7BM1UBgTAEhIxbZQVR6o8RlPL2PGMRLNOTqg3yRIG2yNyOBiOJCQ8gEwuZvq6H21EWn4n24DjJrV70AHXVTYgNNwkrHd7sSqBXK3O1f05b%2F2TpMSoBQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158976569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":318,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (329), with no line terminators","md5":"a76e0e5ab2f70dec98377f906933120d","sha1":"e8c746560f35a864b6eb16568c58c12127bb564d","sha256":"72a08d90f531230bbdb3e582280b10246ab1f74c2afc3848a7645628c1365ed0","sha512":"c34f8adf2baa1332c181490e56a4e457047aa0344eb1e375514d5f9676e57ff385ec75be7429ad1b9cda2d5d9229fd21427d76fb7dde6b1233791c1ab71c367d","ssdeep":"","tlshash":"65e07d5fb13d202e92a393c02bd61590d41351247b8225f9774daa6b705647d8a37edc","first_seen":"2023-04-06T19:19:20Z","last_seen":"2025-04-06T22:10:56.849736Z","times_seen":128,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.huntington.com/Presentation/Styles/site-survey.min.css?v=9wo2OrXUNeUe10c3vTcwXGC1EiWtIEx5MI-aYe1RKSk1","fqdn":"www.huntington.com","domain":"huntington.com","tld":"com"},"ip":{"addr":"95.101.10.192","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.262Z","timestamp":1701323760262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntington.com","organization":"Huntington Bancshares Incorporated"},"issuer":{"commonName":"Entrust Certification Authority - L1J","organization":"Entrust, Inc."},"validity":{"start":"Thu, 31 Aug 2023 20:22:39 GMT","end":"Fri, 19 Apr 2024 20:22:38 GMT"},"fingerprint":{"sha1":"C4:98:89:4E:25:FE:D2:64:CB:3C:B3:35:B6:D8:32:C4:0A:87:A1:7B","sha256":"0A:24:E9:D5:3F:21:CB:95:83:DD:11:C9:DA:DA:C5:57:EF:A0:1F:22:6A:19:FD:4A:0F:06:B8:BA:F2:B8:49:93"}}},"request":{"raw":"GET /Presentation/Styles/site-survey.min.css?v=9wo2OrXUNeUe10c3vTcwXGC1EiWtIEx5MI-aYe1RKSk1 HTTP/1.1\r\nHost: www.huntington.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\npragma: no-cache\r\nlast-modified: Tue, 14 Nov 2023 17:35:48 GMT\r\naccept-ranges: bytes\r\netag: \"072f12117da1:0\"\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nserver-timing: dtSInfo;desc=\"0\", dtRpid;desc=\"2121510682\"\r\ncontent-encoding: gzip\r\ncontent-length: 1129\r\ncache-control: private, max-age=0\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4390), with no line terminators","md5":"cbc9c35f82525f69a000bfd4a44774a6","sha1":"e86ce42cc72bf577ece9153ec4630f117165e973","sha256":"0643ef1189b846f8e023e65ef3c277fffebd86b1584aa59e13cd8877bb7f63ef","sha512":"ca758980f66bd5d857a88c66e4a64ebb1e2b78f0b219e65a7a232018aa40e456a3975928242665638819607d49fec6fc434c5097ba69bc42d87bd54468513f95","ssdeep":"96:/31LaKyxJhWgSnHMAq24xx4ZWD42XH5qOV7iXrX/T04Z7XWnyVW+:/31QL0OV7iXrX57X+5+","tlshash":"279179f5c928130874768a2f9bf2704e11e170cbbf7155866aef877cdad032415aa7d8","first_seen":"2023-04-17T07:04:01Z","last_seen":"2025-03-25T20:57:31.45316Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":631,"dns":142,"connect":1,"send":0,"wait":15,"receive":1,"ssl":488},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/resources/06bebd2b36rn240c2a1532a26141a767","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.795Z","timestamp":1701323758795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"POST /resources/06bebd2b36rn240c2a1532a26141a767 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-dtpc: -15$323758596_696h2vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1329\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test; dtCookie=-15$D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA; rxVisitor=17013237586304S6N3NRE50D857LP30MSQSKM0H0U8H6R; dtPC=-15$323758596_696h2vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0; rxvt=1701325558790|1701323758633; dtSa=-; dtLatC=6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=DgIrPbr%2Fdd0shdG12u5IJ8wldHIZ0pj2GOA5EWQavc8F9j%2BEFveI2Mstro7nwsGzxPdL5iz7CjNgIEl0DkdTQSLi1q3uRS2Dm9u0URxXKgfb%2B7b43CCsSnFcAf%2FHXzyup3RLRsE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d818db42569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/HuntingtonApexWeb-Bold.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.314Z","timestamp":1701323758314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/HuntingtonApexWeb-Bold.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:55:42 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FYxVf%2BkXqiIx%2FrspPEE1ph7zNsER%2FWi6NoadMNhVU3iD7B6fActccgiUBLTIz75dXU%2BpFE1rBOyM00IvZ73OX94LmsL3Bh%2FG3ooefleaH3abD7U0lcuZXKWCybMNWHemFBPFNJw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815897e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19712, version 1.66\\012- data","md5":"ee5e65624970575e475f375b29b0b22b","sha1":"6e622749b6f7092e825eb7ed90b74c3d70fa43b9","sha256":"deb1a78860a2c7ab88ddaa4a522a47ad93e26f1cc1bdd1425d108f770ce93215","sha512":"f34ee35b34ab6d98423a5874659e8247534e67741cd6fd14019295d6d45ad6f071a791ad6cc63bd3c6db85e1595dee0b6dc1455f2c4993d55462bd139f38fb82","ssdeep":"384:tRJ0aVJIEauAUpxWKQ2SUO4XziOzKTSmvA6rlFbtn4I01qZ:JHpVA8PziOKS2xvd","tlshash":"5d92d06a8b0cde938c1e41eac5334fcecf85b85f789e40e4d049a4c69f3a5974a4a17d","first_seen":"2023-04-08T20:18:35Z","last_seen":"2026-05-02T02:00:27.51811Z","times_seen":240,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/95b0da5c7fc415e06807cc694ee0021c.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.303Z","timestamp":1701323758303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/95b0da5c7fc415e06807cc694ee0021c.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vmw6fdoynde4tnh0s0HHZ33Y9cYYlSxpsU6WkZ18g9F%2BojkLosa7n7zit5gU3l0FhaPoALLKrFACLkj%2BB0qRBs9qTgkjld92m8wjH4joDTMNbkUt0WyMKghYxf5LNx%2F4dOlUbl0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815897a569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154122,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (543)","md5":"d33104f26092658d2becbbfa66e9d1fb","sha1":"9c33f190903b2664af1f20b3a16ce2dca13d8a49","sha256":"4249e4f7acbb2de46e66922b8ae70689820a9a6eb9a6f98a77d13190b7c2559e","sha512":"1f5e7594efcc9bfd401964f0af0f1ce465c71b49e9d8d81cf8fcab34fafe3317ab1e89b9e11453aeb04aa60b4b81a9712d5aa990a09f142cc0ddf0bc9f0675c8","ssdeep":"1536:Tkdk3iAKLSIjI4EzLXMNrgDF4Jf/chlEzHQZS+5r5sKzXzM3jhyTDJKC0fAm0pdn:SmzLXMt3P39gDJ3","tlshash":"cce33c8c7371706d68e631bd7b9f030421b998bab541d4a9e1c8ddc86ebc94b2133b79","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.130497Z","times_seen":76,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/img/lockup.svg","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.364Z","timestamp":1701323758364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/img/lockup.svg HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Nov 2020 21:54:14 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Sd4EhBnRptPEqeDWjaZ2Faw0eYuplBOQxLEiPstthluA3OzBiZNvGwJGr7IRtFJirW12rkBy3Af99qpoglSsDH%2Be6tEHf3I7qTR%2BK1zV84mnEtjXjZ1GB5AtNr%2F%2BsEw8Oc%2F3n5c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a996569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with very long lines (3953), with no line terminators","md5":"aa279ba41067c63492090aa6e66bdfb7","sha1":"c63be4b8134fe8d53afddb0912f35d9e70d7fff5","sha256":"431d0b31337b9f683c651fa1a73ee0f2c6be86a4f81a542f3e0b7963a499270b","sha512":"538f4ae4b169efb339fd22f92aa4f38551c99ac270e0d9ad7201538f6f47d1c4d0de4afddaa6f40050314053b6e556f7590efd80f6cf4834d88b628450f73240","ssdeep":"","tlshash":"62818bb62316aa64685cc3c11d38f098e36bf05279b872bd4f9712fe7d2b5fb1126050","first_seen":"2023-05-28T03:25:35Z","last_seen":"2025-03-25T20:57:31.440465Z","times_seen":27,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/toolkit.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.330Z","timestamp":1701323758330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/toolkit.min.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:55 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=zm3YuMXDOow0aq1%2BWqpNLp8pA1FWO9f2VkLSXmGkBTHwB7n82vVrIY0LmYyldnbkA6%2F%2BMa2b7Liq%2Bo1SA0%2F9FQLMPnTM%2BC6u1ghyFUitiBCrTBp7BS2wM9nrXYGbjJD5xIh4Ou8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a98b569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":461456,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T08:30:45.984204Z","times_seen":14570157,"resource_available":true,"data":null}},"time_used":1796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1720,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-849073348\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:01.053Z","timestamp":1701323761053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-849073348\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\nexpires: Thu, 30 Nov 2023 05:55:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Nov 2023 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 57903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153081,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2213)","md5":"2ff119068eb0b3c6bbfef6ef4f54281a","sha1":"6787d5e7aa141ed020d55bd3bfa103f23abffbe3","sha256":"815d4be8ccf5e839ecd5c6dbdb36d98be7960f4c52bda8f4f781fe3f984f91cf","sha512":"699c234b2d83fd9b54b6d17c9778bdca502185c49c590f9a1107fb5c09e08fcfdd24f3f0bfaeafda51786a577b9333127171131a6770f65175069e796360e5b1","ssdeep":"3072:RR2AOMLO1ya9SALihrC08N9moVQPJoAyfh1NHDTEszM:CyO1yqN6ug2Ayfh1Bcn","tlshash":"2fe31ad8b3d6b12a93a37578503f010bf27a6d92f888dcd4e186d9c12e786990177f6c","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.527Z","timestamp":1701323758527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/ HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Z%2BDDHdnRImGVdMHzVAuSXQ5aVoqX1P2odJBnaj2Lz%2BnMSxQHCHsxX4uzaQbaDE1fx2f4ZO%2BwsFJe5k1j6nFn0kANzz8aukbM0l5A5zXcGT56gcrGip0KPTkspZVFOiBAc3NXrXw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8172a4f569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":318,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (329), with no line terminators","md5":"a76e0e5ab2f70dec98377f906933120d","sha1":"e8c746560f35a864b6eb16568c58c12127bb564d","sha256":"72a08d90f531230bbdb3e582280b10246ab1f74c2afc3848a7645628c1365ed0","sha512":"c34f8adf2baa1332c181490e56a4e457047aa0344eb1e375514d5f9676e57ff385ec75be7429ad1b9cda2d5d9229fd21427d76fb7dde6b1233791c1ab71c367d","ssdeep":"","tlshash":"65e07d5fb13d202e92a393c02bd61590d41351247b8225f9774daa6b705647d8a37edc","first_seen":"2023-04-06T19:19:20Z","last_seen":"2025-04-06T22:10:56.849736Z","times_seen":128,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/jquery-3.5.1.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.327Z","timestamp":1701323758327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/jquery-3.5.1.min.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vrY9tJQxRyA5RNeqwVIKygPOUURDScK%2BS0t9CzryPKLGjarnwfoey8mr5qCeHIY5HbARhs85SzA9WQB6%2BmB8W7wW6fKokllLphx2l3CSbNYojGFlC8Mh35JamOoj7Om3RvTsiSM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159989569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-03T08:33:43.702962Z","times_seen":231587,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ensighten.huntingtonbank.com/huntington/com/serverComponent.php?r=7.240978959308269\u0026namespace=Bootstrapper\u0026staticJsPath=ensighten.huntingtonbank.com/huntington/com/code/\u0026publishedOn=Thu%20Oct%2022%2001:05:05%20GMT%202020\u0026ClientID=1035\u0026PageID=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","fqdn":"ensighten.huntingtonbank.com","domain":"huntingtonbank.com","tld":"com"},"ip":{"addr":"3.124.173.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.302Z","timestamp":1701323760302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ensighten.huntingtonbank.com","organization":"Huntington Bancshares Incorporated"},"issuer":{"commonName":"Entrust Certification Authority - L1K","organization":"Entrust, Inc."},"validity":{"start":"Tue, 02 May 2023 14:04:33 GMT","end":"Wed, 01 May 2024 14:04:33 GMT"},"fingerprint":{"sha1":"D2:CB:B7:7A:8B:06:3B:10:5F:DA:B2:C8:11:C5:99:DE:24:4A:99:45","sha256":"D0:AA:A5:C8:FF:02:25:11:8A:A6:34:85:EF:8A:F8:E3:88:1E:A8:CA:F6:2C:6E:17:9A:D4:2E:E7:16:D4:9D:6A"}}},"request":{"raw":"GET /huntington/com/serverComponent.php?r=7.240978959308269\u0026namespace=Bootstrapper\u0026staticJsPath=ensighten.huntingtonbank.com/huntington/com/code/\u0026publishedOn=Thu%20Oct%2022%2001:05:05%20GMT%202020\u0026ClientID=1035\u0026PageID=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373 HTTP/1.1\r\nHost: ensighten.huntingtonbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nserver: CloudFront\r\nexpires: Thu, 30 Nov 2023 05:55:55 GMT\r\ncache-control: no-cache, no-store\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 715791ebe4663055c84208b8a58b2b80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-C1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -y2m7YSXEJBKfsB9_23MJO07gA-qtsWiKdzIcoDEeEoBA66a8VHfTQ==\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":319,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (320), with no line terminators","md5":"4c60d1359141aa93db850d8257b39983","sha1":"7df6a49790ed766e11ec0aa36616ba53e51c951b","sha256":"c7dddd9378d031d2a883277bf071ba65297753e95130248531d1c74ffbe16124","sha512":"97b678007223c0b2eff489bc8eb96df99c0b250386a0064105aade7a622a5c9eaaa8e62c8d9cf5856e3be4e9fd693109ad7f8358b72558fa2268e073e29c3819","ssdeep":"","tlshash":"55e0204587b5228ad488961eb0ee575945d0143988c4154cc7dff10c0d45453bafb531","first_seen":"2023-11-30T06:56:10Z","last_seen":"2023-11-30T06:56:10Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":184,"dns":121,"connect":27,"send":0,"wait":40,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/fbevents.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.287Z","timestamp":1701323758287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/fbevents.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:44 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=30hWzZeBfhWApmxPnVCLwapouONBPkD8rOWAmsySrwbyBehwxRBtyQ1ddt1bin%2B%2Bbs1M0USLPdIahOCAQdLwlaXXlYRKB75nkmRMwdj1TCKIOXTijfBRdI3ppvKzsL8CBFXSHtU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158975569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90273,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (64379)","md5":"61df3554472fe8057b5ae4537648d00d","sha1":"125767dc32df57aa86a64801d9457923e378b397","sha256":"e37570ef85a3553930ba20dfab7280bfcead8a2238b536b5c03c629c35b3d4ca","sha512":"1dd7b30d0f0f183162af66424049097e138cd1a1de3f1dc6ab4c8a481253393d01af19b35f490b30e0a14e7f5ce69b89ccbf8e9ee1fecc95e0794520d01bfbf7","ssdeep":"1536:wM+OWt6w6aiSTxemsWXPwShThe7qv0a9s5U1jaMu5eJII+SNSMniXSZYSlIUiGU9:wOFSFnSZqYDGI","tlshash":"8793a68571e1b0938bb6786c967f5007b1b799e670c8c470d59cedd83e684aa4033fba","first_seen":"2023-03-07T12:09:33Z","last_seen":"2024-09-20T21:38:15.129583Z","times_seen":25,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/HuntingtonApexWeb-Medium.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.311Z","timestamp":1701323758311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/HuntingtonApexWeb-Medium.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 20:07:44 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fYrkR3sBruk7MqAqa3SEcNFVrdSlKeod3357jPhYG3lswzguty0KMOPZdkICeYsQ2v8bUHiVA1yMMQTuF3Qeuf5X%2BHH6dcXN9cY9eKXavPtDCKwkHRLrOHMi7rXKQa1SLzKCUqg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815897c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19976, version 1.131\\012- data","md5":"3a077fd2bd5357dd3e08636baa59af5b","sha1":"266784e6eb28365e3779a398e462193572b0278a","sha256":"04de03ec90e95f24e347dc8ff91e6354eb0a73288e1431003e9e10de59e12d1d","sha512":"dee412a4ee32d408a3315ebe2082a7a565abc720abfe657e10b7cda223a0fbd3858f63341ce114e62588a95c4b3159538ab310da8adcfab9a94c7b286ae325ff","ssdeep":"384:GYd/Rwk8ulkfS0F/L77eBlc7U7UX2SjG19bYicEYle2n+Ycpr/e6bphOjbP8he:v/iu+Ll73cUXA9OheDXR/dphOHT","tlshash":"0092e19197a18ecb5e687e75050d29328645b99be0d9cbd173b3b1400613e1e730aafb","first_seen":"2023-04-08T20:18:35Z","last_seen":"2026-05-02T02:00:27.513073Z","times_seen":198,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/muli-v11-latin-600.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.321Z","timestamp":1701323758321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/muli-v11-latin-600.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:56:56 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FzOrpSAcLzdpYIIGBXTW3tj1%2Fjys1U%2FFq7bSOyGcDn9xW2UzfPW0a73pI6ikk8jWkIN5Vb65X5J6duvU1AQZjmZt8v3ynjWS2TbyRhNVyauin2zWICQ8fhBDlschLbGjleQPoTc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159984569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17080,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17080, version 1.0\\012- data","md5":"b6e5b86d74352699fff02e4bdc5185e5","sha1":"f01de24cfaf2f20e715e4d49023fcb19b1a62d1d","sha256":"d09bb7e3de3760ca1d9375090796e4f1cf180f43c6457a874ed22c3b0a0b07ea","sha512":"d2b184c6cee05bceec66f449758edde2cfd3f0aec588efbbceb5ea4382b5078a7733afe9644f946e174c001f8c4c86a4dfeb982b97fa22c1ba7f037f0f872ae9","ssdeep":"384:LxmOgpvQ+R8Gm1c5ykN/tRnMfndgzyiYCjQh7jcCjWX:5gzMTkdMf032BQ5","tlshash":"0c72c1d3f2968c9dd30f625952a6cf37ac351739c029ea5e1c3a9900c6e06d5b601eea","first_seen":"2023-04-13T20:08:00Z","last_seen":"2026-05-02T02:00:27.525762Z","times_seen":306,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/HuntingtonApexWeb-Book.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.316Z","timestamp":1701323758316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/HuntingtonApexWeb-Book.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:56:02 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bJOZFLmeSNvQPfFcsH%2BDnIKUhlVk4gCZbGFFoSOiaUrvrlSvMtFVf1%2BpAEeadEXi2wQnDXmftrIJ6IQuEFGEAtsqq0UiqKnLfVsu3Cy5V5ryCr8bgzGUXbwQkB%2Fwn%2FqcN%2F2BofQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815997f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20592,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20592, version 1.66\\012- data","md5":"a075767d12a8cc86d52367ef3aacec11","sha1":"9aef8898e7a319ee5cbe08c5b0cec63512561d7d","sha256":"e744a36d486c70943378751b1d1623c2c8f25ee10abd89365ff20162d98dd555","sha512":"18985ed66a54735dbdfdb7529d1da80662ac89fc8525c508c66f1105509a7e86275d80058cb947f1ef86fafdc64d0991a333bfb1b2e312c38758ba75695b3ffd","ssdeep":"384:zAnkKWHvCQ2vRCV3df9wtwOjwU1U1ugqHStBVeSxMADQ7+jan:BpCQ24dCqSJ1UogftBVNMAk7fn","tlshash":"0992d047125a2cbcd9df93f614462ca8be19a36932f180dc1b3bc7c34a8419daad1756","first_seen":"2023-04-08T20:18:35Z","last_seen":"2025-12-31T15:22:47.805028Z","times_seen":131,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/ruxitagentjs_ICA27SVfjoqrux_10197200831173448.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.306Z","timestamp":1701323758306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/ruxitagentjs_ICA27SVfjoqrux_10197200831173448.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=XVqFfZuIgqtoI%2Fr04LXQBGtHCBGIxrGqBIyqotujnbzcusrni%2F7m5ZW9dfgkoLOOoUR%2FH3LdBpzG%2FJM7oejl0P3sPmcNzqHEUvlx6fBkRjX%2FxUdnjM6p58va5RmxBXihe3yjQEs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815897b569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":182288,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1626)","md5":"227400e4070ac91189e80b05077abe20","sha1":"714374d4c852c2058b1df7f4a6ff9f7acc164867","sha256":"d42a94bdd0158c8df1d1ea4ae03da23f0007e9b6d5b38c05eb4797ffe90e1cf8","sha512":"463d16d1ad35e0a275c303b3bd826727a05e7ccf02ee501f2d00ddb83d9c110533dbcaba525ed2ae05205e65a8dc1a81505f80e6c5f0f47afa5cd3fe60f6ab84","ssdeep":"3072:Ackt+QzRZZTiCRCQqCK+In4OQyCb9kaNnfDunDV+f:Vkt+obZTvfINQVyODGD4f","tlshash":"5a044acdb7627065879320b460ef150ff27a6958ac4894d0e146e5e83cb8e9e427bf3d","first_seen":"2023-03-07T12:23:04Z","last_seen":"2024-09-20T21:38:15.1372Z","times_seen":23,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/muli-v11-latin-300.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.320Z","timestamp":1701323758320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/muli-v11-latin-300.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:56:44 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ppl33uia%2FdjZdBkbhYa0nJ1qzCTMvTXNXhOWsuQVJKDhatmAIPT2PzGmHjpFQK6w9FM6TCsul7e58maRpxAMgAkirxG29K4g8Go9lSQ%2FXoZAh7NVlZoE4h2gVMOjtLvVvIVDLUQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159982569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16872, version 1.0\\012- data","md5":"3d9d9afae68fc95977ec200c119c42a1","sha1":"2b44b2f5ec04f2f06fd28c9041fb8fa582ab8fcc","sha256":"f43ea36b900ae7aa4ec07956e9b1223ab00dac1f766d97580b1e2bfe721cdc24","sha512":"ba9f160d1d1bd6780e981d9f7eb2b136666c1b9c03646d1925febb186e12ed7b27ef11a4b15fa9777de0dd1ec4ccd7e409d31060020045e110c0e84cb3d52a74","ssdeep":"384:7ewW7JyoyFj3aehQl+hL5AuvBF9SKhKp7qH50plBWsXtvv:yzE5FzhQ4J5AuxTKfB1XtX","tlshash":"4472d06e4a8c3da108af51b217d8ed234436c8ed0dbe7585dd54af6e780e4de43126e3","first_seen":"2023-04-13T20:08:00Z","last_seen":"2026-05-02T02:00:27.520734Z","times_seen":339,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/inqChatLaunch10006663.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.349Z","timestamp":1701323758349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/inqChatLaunch10006663.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Nov 2020 20:36:50 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Q10%2Fkrnp3Afl718T19l6Mod0E07BfRenAR6R9%2Fy5VCNCjSNKgjtl%2B3pYOcp8A21oVwbFfUP0c97OlssEGbcwU9KPNwe%2BStVuWcvmU6ACKhR9CdXzCfcKeNxLVSjD%2B6VInlZAigU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a994569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22354,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (999)","md5":"1c9d96d3f228156fd7e9df9c531871d1","sha1":"a118554b1208e30af4a0fef948c9566b8e7f4a94","sha256":"648d971972fc0140127ab99989b3b55a28e8e3c2fcbf281390bbb7edf5000f26","sha512":"771aa9806a70324a468a447da5e347443a6c8096aff87ce7237bbeb38ab337eba57fa454d69c585aff457bff81b55c12bd5a602e1ef455ea9e95ecc6b08be981","ssdeep":"384:EkIva2pBM+hMDM9cIC3auno07QCb3o+vtrx/xibVIQRMCpmP9rcuvZf2g5NYyDuc:sy2p6+agfQ7fo+vtrmKQeNP9cYBJE+SW","tlshash":"efa2947b2741913d85f2159d752fbb0a7477a216ec818084856aacd0b628b4b8c2fffd","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.134351Z","times_seen":23,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/resources/06bebd2b36rn240c2a1532a26141a767","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:59.347Z","timestamp":1701323759347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"POST /resources/06bebd2b36rn240c2a1532a26141a767 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-dtpc: -15$323758596_696h10vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1533\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test; dtCookie=-15$D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA; rxVisitor=17013237586304S6N3NRE50D857LP30MSQSKM0H0U8H6R; dtPC=-15$323758596_696h10vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0; rxvt=1701325559341|1701323758633; dtSa=-; dtLatC=6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=siOAgLkeHNiDjvzPsHvOmTzIbtrKuYQWU9vVvvG%2BIR5MTUuPkY3kvF%2FYDhDEk8y1qTtaXoykaST4VKB8PeLf%2BgZhMw%2FQ9e4twb0UfLeAOOv2DjYqAMt1%2FwF70DR%2FZVq4o46aMVA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d81c4d31569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/bat.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.297Z","timestamp":1701323758297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/bat.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Nov 2020 20:36:48 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Lp75syryxFqLXo8D0jb8IFqL4PgiZjob5BHT1RY9YcmCaDgibyBFBtU3wLF1SEYYS2WbTJwJML1wgx79WahQlwScWQRg1aeWLaGgQwWJLFkgREYbVcrEuyIDZDJIOsZI0e5tcAg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158977569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28050,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (28050), with no line terminators","md5":"f07693f6368c988acd20de4362479103","sha1":"d04355e119fac2c9104c4fe98015e22f3f181d93","sha256":"4dd6c09ddcb0e53a6290cc1df35224856073ba5f89d4134bd7c69e4fd9c6f515","sha512":"1a0bd6850f3e7744216fa133493fa0d686ebb815b23ed2f2f511cea982fc79794d882edce8dcb22670e455b94ba7ef2fe6efc7e95710dd3243cbf54e65449a66","ssdeep":"384:otUVCwh9wC22xo1nB4KZjhbwM05Jkr9qNHfs9nB/wDSliNqCET8zT7QAEqny7YOI:pCwhBRHDOZwDhzT7QSnKYO56","tlshash":"66c2f982739158168ae986cc70691a03933b531e74fd20acb78cedf65588e4f517bf3a","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-03-29T10:28:23.267972Z","times_seen":92,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/oo_engine.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.359Z","timestamp":1701323758359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/oo_engine.min.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Nov 2020 20:36:50 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=J3T1PjDvZZJDuZjl9MsyNfa4xatwgaqx1qrw4DNFfiy5zzAInYAL3lC8XkHIPPUuvBGIWyjeicBRxsesR%2FypVHu5qiSNvwTT1QXP%2BZMBnwkr3Joz8LClpBx%2BUWnUMqLeW2G68kQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a995569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45689,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (45689), with no line terminators","md5":"3023bde795e4926691e3691ace0d9356","sha1":"053c86b53ec7bca624cffc3f6321697d35a1c5d5","sha256":"1bf7836282cf0a1f1cae452a2b7d03f4857827aa682e36562831fe3bc34f30a5","sha512":"43164f1195c6260244545d0fb971054ba0667f3b20f65da60bc34e262d10eed4546b08b3d1f0da10fa0b95a14f9c587fe862770f9910f1ba4452d414e8f705dd","ssdeep":"768:FZ+jYRpWJOKYjlGfOWeu3GgeJBoObxSNr+2xiFPoGvp5o7MksMvi4:eURQl2TBnbxkr+2xiFPos+r","tlshash":"ba23f7647961323a04e6686d63bf7319717371e215c40900e0b1ddf8abb8d0b9977fac","first_seen":"2023-03-07T12:11:24Z","last_seen":"2026-05-02T02:00:27.528338Z","times_seen":127,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/img/logo-honeycomb.svg","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.484Z","timestamp":1701323758484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/img/logo-honeycomb.svg HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Nov 2020 19:48:48 GMT\r\nvary: Accept-Encoding\r\nage: 5619\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=zBDr5ZGMkg3Sb4S8yAM2E2oQsx9eLbGiUVTKGNp6%2FvueGrHd9xs4D4xbXLs6s5CM3hKGER6aP9ILVE2ZsZ8vnaW3z036t1UGb2b5tyWWJJQX9Tsy7KfVyNSaPknnblM2PkGTVQA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d816ba1a569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (871), with no line terminators","md5":"c8a5c6487983174db97c399d3470b2f3","sha1":"1a98c9ea1b9c4b51a691aeab80384d6b866f4218","sha256":"ce88657ce447107ca8c3daf22f31da1befa5d5da0965ab5f3233e53f539d3c4d","sha512":"ea07194a2d06c66f6a349da13e242472f19c7d643e9ad9bcbdafa58582e48a532e856f801beb0c6fd979a8b51cbc3bd6da7e40bb9e22937c4e12437f411de371","ssdeep":"","tlshash":"a4116b3d034ed278a06683f8281c05f17c59f895e368b3a0e5b32471fa22cd516d68f7","first_seen":"2023-05-28T03:25:35Z","last_seen":"2025-03-25T20:57:31.443615Z","times_seen":29,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/akam/11/pixel_7a8ba97f","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:00.976Z","timestamp":1701323760976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"POST /akam/11/pixel_7a8ba97f HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nx-dtpc: -15$323758596_696h13vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0\r\nContent-Length: 3100\r\nOrigin: https://huntingt-authv3.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test; dtCookie=-15$D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA; rxVisitor=17013237586304S6N3NRE50D857LP30MSQSKM0H0U8H6R; dtPC=-15$323758596_696h13vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0; rxvt=1701325560944|1701323758633; dtSa=-; dtLatC=6; loginCookie=personalLogin\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 30 Nov 2023 05:55:56 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2c%2FHzbzhhHwzffSUIUwxfkF%2FKib4GsnKH0xo3qtwGjrejjafFcc2PGSDw5Aj3DVlNqKfX7jJxeN2R3AEmiQyfhqIkxMDzrlKShRYJCNix9jG7ctenuqslzJL6lpzKq%2Fu%2BpFWWOc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8267a11569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"trk.clinch.co/trk?cid=ojfb3O\u0026dsid=wifbQOP\u0026type=pageView\u0026product=ecommerce\u0026referrer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026version=23.44.4\u0026a=1701323764035","fqdn":"trk.clinch.co","domain":"clinch.co","tld":"co"},"ip":{"addr":"54.85.247.171","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:56:04.048Z","timestamp":1701323764048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.clinch.co","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M01","organization":"Amazon"},"validity":{"start":"Mon, 27 Mar 2023 00:00:00 GMT","end":"Wed, 24 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"72:AA:B0:02:98:13:E2:E1:FB:E7:EA:C9:45:78:0B:6B:58:BA:66:D4","sha256":"66:05:EB:A9:FE:8F:B9:DC:FB:E9:AA:6B:BB:93:FA:7C:00:1B:15:46:C5:14:74:C1:8D:0D:B8:A6:36:BA:D7:0A"}}},"request":{"raw":"GET /trk?cid=ojfb3O\u0026dsid=wifbQOP\u0026type=pageView\u0026product=ecommerce\u0026referrer=https%3A%2F%2Fhuntingt-authv3.de%2Flogin.php%3Fcmd%3Dlogin_submit%26id%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373%26session%3Daaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026version=23.44.4\u0026a=1701323764035 HTTP/1.1\r\nHost: trk.clinch.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Nov 2023 05:56:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: clinch\r\ncache-control: no-store\r\nx-robots-tag: none\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-03T08:33:09.318323Z","times_seen":374635,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":361,"dns":51,"connect":100,"send":0,"wait":101,"receive":1,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/img/EHL_Black_HouseOnly.svg","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.482Z","timestamp":1701323758482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/img/EHL_Black_HouseOnly.svg HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Nov 2020 21:54:14 GMT\r\nvary: Accept-Encoding\r\nage: 5619\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vt2POGG3noaFdnnxJAwXVASY%2BZ3M2HL4a%2BV162x51zvW8rG2pzHgjFb52E3nPLmOW123z7iAVu7%2FrPgnS9O8I5OhYvBIKnB4sTk2UntVuja46mnivKgO8apo2cpypvkU0wB36VA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d816ba18569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":707,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (835), with no line terminators","md5":"8d3451204a24c3d3aec9fb7dac7e9039","sha1":"ca59d5507f78d051707c00cf0f88f64aebbb7f4a","sha256":"93fbd6d101d9b192175c027a09c6cdea189336a9eacaeca7e3498cdd6f2a76dc","sha512":"28e99d57f391edf678046a33c269a69a00db40f759433155dcf5583bb115a721b67997ff1a218e6d3f47ba0c46488d3365faf2b5610ea9b61ad4d27dd2ef1084","ssdeep":"","tlshash":"4f0149bc4a75b0290b15833f88f144929233788d23b60bed9deb7663f044ca1c875ee0","first_seen":"2023-05-28T03:25:35Z","last_seen":"2025-03-25T20:57:31.454669Z","times_seen":31,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/outdated.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.486Z","timestamp":1701323758486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/outdated.min.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:48 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=4OKABG%2BuarLD95UPrVLp%2FQasK5b6TRJoMCr5SCKD4NTBeAX2%2B%2Fq1ufjB3Aw3A3NAliCI0p52a3xu63wdj43pZngai5tPVVB4%2FBWacJ0Zha3o3zRLUGqxFRevIMjB9%2F1eS83DxbU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d816ba1b569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1147,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1174), with no line terminators","md5":"a31510c42e378ef1cde8ba35d2f1d36e","sha1":"7ef6aa4848a5e4dffe873cefa275b52ef0273e53","sha256":"0416b2def2453ab91cc933226430524f6d6a739b4f3579101dfef62af1d20d37","sha512":"8d39f66cea83d7d7534dd8ac69f122ae8cf51518c6dc219875ea997fc37f00d866faa07661fa4c64907aa83d508dd777648d442f6e95624b6c1bed016abbd6b2","ssdeep":"","tlshash":"372174ad30e0f9c113d36496003fa00df17a49721d7ae0a0d384c8b8bc34c8d4036f65","first_seen":"2023-11-30T00:55:42Z","last_seen":"2023-12-01T12:20:32Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/Bootstrap.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.332Z","timestamp":1701323758332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/Bootstrap.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ODjPVRCpdSgrK5l3GIzAu%2FHWRInv23CFlTPLmKYYlLETkeLfuHCgzaNMPRl4xvKyjV2Az0ODs68xcxUtXxosNPry5YRg6ge%2F%2FEpAUFlKhNnMo9j1OJosegTa1NXBDpMuKWLa6GU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d815a98c569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":225981,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (603)","md5":"8746e0eaa34beca77c5679a495ed1d3a","sha1":"f8bc25c85508043935f3e63ff5cd1196c35762d6","sha256":"83acf00ba4050132d8547daca62a4fca4670029aaa75b01c5e99179cbc6d4991","sha512":"41f6bdb4e6b5ff59735d6fe88d9d9b8e1a4cc014969e309d7cb56bf73171fb5b3985316909154d0307c3166b9653f30da246c29f89bc6baa4074db55ce7365c2","ssdeep":"1536:TgTBTyJU40YuIqGk+o1egm8sRIuiClrcsX5QrF0hVHwzBEJNcJwWCEXHiiY1n1ya:FFkegm8KHGsHWuJNfiMNJ+Tly8DqZT","tlshash":"7724f5cc7292b06687d760b9807f200ef37ba945388e8020e159e5d97d7898f9277f6d","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.131953Z","times_seen":76,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/site-survey.min.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.487Z","timestamp":1701323758487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/site-survey.min.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Nov 2020 20:36:50 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pfzaWI0HFSfpufyh36BtFrs4IqjiNsvZRrAwaymt%2BEDchjHQy%2FNYQHjRslDQVF6JnCFdU1BdHr3VV1Zp5k6atUo%2BHUFQ5Z%2F3iWLMaoDf0nvQ4bZi%2B4eV7gwdcgUUcz6F0mQ67fo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d816ba1f569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7541,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7719), with no line terminators","md5":"e342c7c92e27cb6c2920b901944e0373","sha1":"8447f22e109ad8476325a5e0acbe62e0c15df66b","sha256":"3ad3ee1f6100531b5627d891ed76a190d90236315b4d6672a3ec799b5479eaaa","sha512":"9984e413b722491a867c3e8999a7ce461ddbd849952e5b11166845e34ca33a1e633fe609c270c4b1d6ec727367368602abe9845c7b9fd6e6ca8d3ad1c149ebbc","ssdeep":"192:a8ZyoHR3tmaX6GTu2e5qgCTFWAOWN2UCIpHRiSzHniinJaTx:dH7maX6GTuRkFWA3N2ZIpHRiSzHn1nJW","tlshash":"ddf185dcb2d6b431838a2871953f2629f1f729612805c474b43dd8ecadb8d19527afb8","first_seen":"2023-07-21T06:55:06Z","last_seen":"2023-12-01T12:20:33Z","times_seen":8,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/nuanceChat.html","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.805Z","timestamp":1701323758805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/nuanceChat.html HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test; dtCookie=-15$D90LG8IDVN2T3TM8OLOQPVU1DV0EC8TA; rxVisitor=17013237586304S6N3NRE50D857LP30MSQSKM0H0U8H6R; dtPC=-15$323758596_696h2vKPRCCFAGAKCJBFBHKNKGLHJAFCWUCAIF-0; rxvt=1701325558790|1701323758633; dtSa=-; dtLatC=6\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 30 Nov 2023 05:55:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=deHBI9QUvwJxFNsnLwpuQ3aQ3zMdTVTIAiykgHygOuIDnyTymo%2FKqn3DT6C%2Fityrhfo9ybkh8q9y%2Blxmfu%2Fgx4Tbcmuub2LfU8O8kWUWRTuRhNVEsts7EZFsbsp6tfsjQ%2BTzWTg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d818eb45569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators","md5":"97ef40509b73c101d6815511c3adf98d","sha1":"a4242322497ea630ea72e26ba297a95a2bbe5ccd","sha256":"322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be","sha512":"2cf517ebc55985e029c6749722f234a1ea1fc937d31bc08bfb3f0520ca91b070cf5d88d51ba94859f1850cef91e7dc2a409059c1891ea14f682534bd2d9a2510","ssdeep":"","tlshash":"dce07d5f5027734f406145d03bc110a1c54613553a6651f63989a56e301943ccd77fdc","first_seen":"2023-04-05T04:21:27Z","last_seen":"2025-04-06T22:10:56.85115Z","times_seen":32951,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/js/ytc.js.download","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.299Z","timestamp":1701323758299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/js/ytc.js.download HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 03 Nov 2020 20:36:48 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=MSpU37gR0tUOhRqOTaDbqLZ%2FIM2%2BB0RBJolIh3C5ffDs3rbmLPVa8OijT8AcQuNeR97wzOTBfvdMWtyQxFPRRM%2F9gzTThMn17%2FoDp3g90bVlR1A5aT%2BuaDAbr7r2SM7kjA7%2F3Gk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8158978569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14972,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (14972), with no line terminators","md5":"49db10c8315384e8dad2e92a6841ed81","sha1":"f576976a579cd50da6b717db5d48e1ea7137f744","sha256":"63896532a7015ab5b7288359c02124980a5075e9267f0ba3fbfc7c3f5038b478","sha512":"ea7efeb69f987ff7257601c4536080d505d84bcb282d5f1eb09566e98ab4129fce8eefb9787cc2d661a097cca66defbb383df2629e950fd6a0c0521489972bb3","ssdeep":"384:s40C/Yfuq+MY6jLrEOLg3Fmea4T2IhNWF:VAbRrYAAmpIrg","tlshash":"ec62d858f6e0f0a542e3a171113fa9067775253d1c6a9460a206dbc4397cecb9236fbe","first_seen":"2023-03-07T12:11:24Z","last_seen":"2024-09-20T21:38:15.128934Z","times_seen":95,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/fonts/muli-v11-latin-700.woff2","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.319Z","timestamp":1701323758319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/fonts/muli-v11-latin-700.woff2 HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Nov 2020 19:56:30 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=g%2FyiVtuewbD9udLbNM76eaqLd0wpB0VH%2FVcTv%2Fw8L3JRRsZ3fMW4ZlwSLZM7FZ%2ByyhjKH6ZZSNtmRZg1qJenEG8MOpWilVhHlDcwDJKRplIJT3OZ5VTE71hoZg%2BV0CsIxXCLKMk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159981569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17128, version 1.0\\012- data","md5":"8f65fa68cfb5d8cc4f4fa728a470332b","sha1":"62b57f937d710caae3ee52435ba0c408e8653c43","sha256":"34f3c7445d22c1509aeecc5d020b6d24c9e2f63b3c0514cebbc3813798965273","sha512":"b9b2e52df756ef0365fb441fe193e66516c5fcb6d08c77c05bbcf9b3ccff6bfd1ccfc69e71a200ab96c934ee8260241ceadefd3e0dc8fc418019c7dda1bc885f","ssdeep":"384:ru1RGyfgHfvZtI8TM8AVFUXmarsL4E2Cx0k:rmRGzH3UeAVuXvAL4E2Y0k","tlshash":"d172d18a3c692017cda660f700f95f3a522fda8e9bc7e51436de70a8b5d61640b84edc","first_seen":"2023-04-13T20:08:00Z","last_seen":"2026-05-02T08:52:15.108986Z","times_seen":406,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Huntington","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Huntington phishing","tags":["huntington","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"huntingt-authv3.de/assets/css/toolkit.min.css","fqdn":"huntingt-authv3.de","domain":"huntingt-authv3.de","tld":"de"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373","date":"2023-11-30T05:55:58.323Z","timestamp":1701323758323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huntingt-authv3.de","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Nov 2023 17:31:10 GMT","end":"Sat, 17 Feb 2024 17:31:09 GMT"},"fingerprint":{"sha1":"3B:83:5D:B6:63:9B:6F:85:3A:A6:0F:BB:E2:AE:6E:4F:A0:F4:8C:7B","sha256":"4F:C9:5A:1A:F3:5E:EF:74:D5:7D:53:AF:2E:85:A0:59:D4:17:06:3F:DD:56:7D:68:83:15:32:64:D3:38:A7:D5"}}},"request":{"raw":"GET /assets/css/toolkit.min.css HTTP/1.1\r\nHost: huntingt-authv3.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huntingt-authv3.de/login.php?cmd=login_submit\u0026id=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\u0026session=aaa8ad7749be814bcb93c437f9362373aaa8ad7749be814bcb93c437f9362373\r\nCookie: __ddg1_=el4LiFmVeklNDpP80Lpj; chk=test\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Nov 2023 05:55:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Nov 2020 19:48:46 GMT\r\nvary: Accept-Encoding\r\nage: 5618\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QfQUGDplfVadyWX7b2AD2uLe3W%2BC1jIDElfmyCfPdHgtZmQfk7x6Q6obAk%2FSW2%2FP76fQTjQhOG%2BuirRVkmMSwrKvhRLvN4h9hUqWXGVWq%2Bl7rOA8RyRtyD2G9%2BWt3rkIpLCa4mQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 82e0d8159987569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":354237,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T08:30:45.984204Z","times_seen":14570157,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}