{"report_id":"3e3a11ea-9552-46d3-9872-9b4fd3a18677","version":6,"status":"done","tags":[],"date":"2026-02-18T12:50:22Z","url":{"schema":"http","addr":"hsbc6.cashanalytics.com","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"52.50.55.123","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"title":"Cash Flow Forecasting","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hsbc6.cashanalytics.com","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"52.50.55.123","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T12:50:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hsbc6.cashanalytics.com","ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2013-01-11","domain_rank":0,"first_seen":"2026-02-15T11:16:48.600581Z","last_seen":"2026-02-15T11:16:48.600581Z","alert_count":485,"request_count":97,"received_data":23270752,"sent_data":56983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}]},{"fqdn":"notifier-configs.airbrake.io","ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-09-06","domain_rank":66184,"first_seen":"2022-12-04T17:22:43Z","last_seen":"2026-02-11T16:23:42.626653Z","alert_count":0,"request_count":12,"received_data":5784,"sent_data":8946,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7e101ae192fc0dab2682134317f516f","sha1":"70c4af65fbd963e7a3e46d5e0d9f2e01085d426a","sha256":"212e61ab66496674b2d866efd93615fc75a99673cde5c5cad307098d916288ee","sha512":"8bab594086d2cf5117bfb1514d84971f665f8d97a42269d76532431c173f0bf8056076e8f86267edfd2f4c42001daca944696fd7fb0a001b71d7e969e9414282","ssdeep":"12288:Nu4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAi:+sZuRoxb","tlshash":"ea152a1b68953ef78b9e63c5f9963d5b60f90215e3800555cddc8e2c02c9bdcf22ba68","size":954022,"data":"","first_seen":"2026-02-15T11:16:56.500988Z","last_seen":"2026-02-18T12:50:39.666711Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3a1ad12d4ead74d571f26b7e49d1342","sha1":"d7482eda8bb20b2de17e61f17c7fc6587ed1e039","sha256":"be395f29885e23e831e96486e4392bac5fa77a211142c762371af0e34a17ae09","sha512":"da77088e2ddaea13b199deb3c92988fa7776d4a8c62ead96d286b85c7f08cc0bde2ff6eba14bf8b4063f580ea9b4c129679fb8695a047364c2a47f80cf164847","ssdeep":"","tlshash":"07f05c6ac1a8c985b3c403ad1a8cbf55ed3d35323566595995548e0015ff127b34031b","size":461,"data":"","first_seen":"2026-02-15T11:16:56.501917Z","last_seen":"2026-02-18T12:50:39.667647Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"da08da3b2009889dc63d21b045af5cdc","sha1":"3ab45b182fb2a4a4c5713e359eadd50738ba578a","sha256":"8a947cc74651a07e4fc3b50e2cd3837565da4b0b57ea3a67f8474f27474e110e","sha512":"80b815b92c8c3d91275c8ab15245e38361aa4ab5d568f6fbbbbca04eb29690322105fa98aea9fb559e01faa294cbde915f0add461ca477f1eb97b8bc4bb23432","ssdeep":"","tlshash":"5cb012bd94deb58e0e31d1b820f9400930fbb16d0908af6817a1847c136ede72c06986","size":108,"data":"","first_seen":"2026-02-15T11:16:56.50391Z","last_seen":"2026-02-18T12:50:39.668485Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","size":44126,"data":"","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","size":31914,"data":"","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","size":144786,"data":"","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ad6dbc63b97b92df11d234fe8e5200","sha1":"8438f57b04bc2db149681dcd24cba79f6d59c001","sha256":"b629f3fe09253daffa9f0812f897872c7480415d10401341b9220866df3976ae","sha512":"e37f6100324bf01d6f5b1fbed68bede752bae26cb17911f92f2e68d65d5efc44efcb3554e5c7389aca6af2eac08cedb8a89151469d6866e66da297ec34dd7863","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSN:L3+UAHzXp5OaG3Kxe7faqDmtLSN","tlshash":"4435fac9f251b03247a731f5506f060bb337695da44980acf6a8d4e66cb984e623bf3d","size":1124797,"data":"","first_seen":"2026-02-15T11:16:56.503021Z","last_seen":"2026-02-18T12:50:39.670311Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:50:01.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"POST /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 142\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"authenticity_token=P48AYJ2540ceP_AH0c3qM-U9hANQI2cl0U5o9ClD_UUM0xM2TSLnK56eKNYt-kTNSulGrgqAawTotDwEYZBcgA\u0026user%5Bemail%5D=\u0026user%5Bpassword%5D="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:50:02 GMT; secure; HttpOnly\r\nx-request-id: 077f7543-6bab-4eda-a2da-9b55d0ae8198\r\nx-runtime: 1.078314\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958096,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"508805ca774d5103f128a67d2fee3b05","sha1":"f49871889f46b0ad5e055ff5b214d12ac720f583","sha256":"3f02a1234c6b24a39a18c582420921795270e0d0ac4626c3033827d1902fe31b","sha512":"68cf226110d36b8285cd050f680578c6f7281f659958574855797ca12d0b287c9370a73d7038d7bc3e7f072eee2ec58a6f3703f8373a221947a2fe1d848c73d1","ssdeep":"12288:Wu4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAm:DsZuRox7","tlshash":"d5152a1b68953ef78b9e63c5f9963d5b60f94215e3800455cddc8e2c02c9bdcf22ba68","first_seen":"2026-02-18T12:50:39.640701Z","last_seen":"2026-02-18T12:50:39.640701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:49:48.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:49:48 GMT; secure; HttpOnly\r\nx-request-id: d9fc425b-f471-44c9-bf67-d3d27b77bf04\r\nx-runtime: 0.293145\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"9d032ae9fb56611b1bf8f98053d93399","sha1":"6c73b862a3e5f9a5441d3a28f92796ef3ee55dcf","sha256":"3af743fc0f815259f4d02ef003915e199675426f4e1e22a6089d5f6445df474d","sha512":"172621d3849899d2fce2fcbd3d7510cdf8a0350acd5830ca06b7f47a014787ec6e6e1b0c70d07de2b0d4bcf9da63adf4c9f5a13b12783c433f972f2d79a6e502","ssdeep":"12288:Su4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAF:nsZuRoxO","tlshash":"2a152a1b68953ef78b9e63c5f9963d5b60f94215e3800455cddc8e2c02c9bdcf22ba68","first_seen":"2026-02-18T12:50:39.646062Z","last_seen":"2026-02-18T12:50:39.646062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:56.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:56 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:49:54.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"POST /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 142\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"authenticity_token=P-bstFHF9x_DvciTIsfugLHN_meP0nGpzuwdKt-ELNAMuv_igV7zc0McEELe8EB-Hhk8ytVxfYj3Fknal1eNFQ\u0026user%5Bemail%5D=\u0026user%5Bpassword%5D="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:49:55 GMT; secure; HttpOnly\r\nx-request-id: c1f2ea8f-5548-4ad8-93f7-9cd1dcf4fbb5\r\nx-runtime: 0.396990\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]}],"data":{"size":958096,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"3559e700dc8f457506c60634cb8b8737","sha1":"91889bcab3d3f81b7fd19550d86c4a086bc75e19","sha256":"71762ab6dead093e9e754e2c509cefc6485ad9d1ad499cc282e636719cdbd340","sha512":"51fbd7b194e6d4a1ae3286eeeab9669a0608730b3af4835fb3ce46aecd60bd4cf40c04757a5ca500878c853dcaa3ba1ff955ffe310999a03cc40e63cb5c6ef09","ssdeep":"12288:mu4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAx:TsZuRox4","tlshash":"65152a1b68953ef78b9e63c5f9963d5b60f94215e3800455cddc8e2c02c9bdcf22ba68","first_seen":"2026-02-18T12:50:39.653104Z","last_seen":"2026-02-18T12:50:39.653104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":325,"dns":12,"connect":101,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:56.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:50:05.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"POST /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 142\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"authenticity_token=8HchDM0LCvXP9jHMFgcmwDbruuJryTi656qCM8c2M4vDKzJaHZAOmU9X6R3qMIg-mT94TzFqNJveUNbDj-WSTg\u0026user%5Bemail%5D=\u0026user%5Bpassword%5D="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:50:06 GMT; secure; HttpOnly\r\nx-request-id: 89345f99-e257-42bd-95ea-f0bd582b488e\r\nx-runtime: 0.457417\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958096,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"a0854d0007fa0e1b506c84f85bc9aaf3","sha1":"f21d1f3b277d1983f935249cfed9bc85736165de","sha256":"2892dd116eb521ea23d9ef7e7fb4b9c8583147459c1ab90d7664b67a39cf4896","sha512":"001d569c155b634b7308f57c56623360c81587bf1731c5bc0d79ba1414d63d362c3d4553d556e450b036d3e7455f48c125291ea88431b634f61ff3d684aa95d4","ssdeep":"12288:Su4wfbsOmssRzuZHBuHsobcttqiKIclxwKJ+1+54jAQ:nsZuRoxg","tlshash":"6c152a1b68953ef78b9e63c5f9963e5b60f94205e3800555cddc8e2c02c97dcf22ba68","first_seen":"2026-02-18T12:50:39.658427Z","last_seen":"2026-02-18T12:50:39.658427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:49:51.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"POST /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 142\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"authenticity_token=mGAAdCuKBnCS_CtMc0OXMY_h9dRmLRBF8TDDTNXpoTWrPBMi-xECHBJd852PdDnPIDU3eTyOHGTIype8nToA8A\u0026user%5Bemail%5D=\u0026user%5Bpassword%5D="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:49:52 GMT; secure; HttpOnly\r\nx-request-id: bbe5d60c-5b67-40c3-bd7d-e218c89e68e3\r\nx-runtime: 0.362015\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958096,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"3fd4a0090c2b2644236a2f84c50cc219","sha1":"c50933a6946b9706f6b81657b001c575b4a068b1","sha256":"3489b895c022a2b30ffc7dd2cacbaed88e030933ebee197c5abe34a68c5d99b3","sha512":"94271038c66872f5afe55b96815a1214dd098c64dff98b6d6905c360c5aa87d92204117369965e3990614291494c2e950593ad867a88f3a7aa74fd533d4f1a08","ssdeep":"12288:cu4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAQ:psZuRoxR","tlshash":"bf152a1b68953ef78b9e63c5f9963d5b60f94215e3800455cddc8e2c02c9bdcf22ba68","first_seen":"2026-02-18T12:50:39.661437Z","last_seen":"2026-02-18T12:50:39.661437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 471\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-1d7\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (891), with no line terminators","md5":"e23afd3d291d5e5bcb8fa0ca133ddb21","sha1":"550c022b80b919c68ac14e4456e07e996c8ca6d8","sha256":"7993dfc2f3cf611bdd99b5d4273b068e36484ed779c95539dc7ee4fdf2290228","sha512":"1a01c06c7df43f20e94f451d63282142d4d91e6d18e81cca7e7959075c994ebdb0cbd48978099919a44cbaa9ae634a3cc38fc35e3c2c08d5b3c09a4c342dd8fc","ssdeep":"","tlshash":"65117ab3f65434952a12c12db051ffb9ae2e0130c55b2b78bc03a36cda491a617d5db9","first_seen":"2026-02-15T11:16:56.485614Z","last_seen":"2026-02-18T12:50:39.651433Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:49.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Bd-01bbe1bebe4a5cd6d80f7ff2d0334889.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24608\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6020\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24608, version 1.0","md5":"69b44b4aeb3073309211288c3b33fed1","sha1":"0300033acb3c8456968e4852458c45d79ea6ef30","sha256":"d2ae2bc58729d0e6872ac056a862f5c5baa8ca1cb8404d602e87c299128239bd","sha512":"4c90009682f283f50258c65cecba314e06ba8298655984e2123871cea1ce1a6caad10c9aa9b01309904ad6f96c6d45b0f2d606a7b8fd7260895db560ed2529b9","ssdeep":"384:/54kC4Q2uaeXwclxe7sadVrTt038MfSBXK5nP/KuXq12CLOyCucA:/ldhczVadVrp038M+EKh2CLdCvA","tlshash":"93b2f1cbcf7264e4d66956f99bc4434163a32e8463b45d9a4639830abf06bce3491c3d","first_seen":"2026-02-15T11:16:56.480247Z","last_seen":"2026-02-18T12:50:39.650558Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:02.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/hsbc-logo-rgb-b.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /hsbc-logo-rgb-b.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-f14\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"c7aeb98629eb825f80c197572bb53499","sha1":"8473fbc7c8142605b71247ac792f0d79ec9ac8a1","sha256":"c68d26cae6af4b2e7d3ecb3270f0f14425bf3b9d64a471588286a5da635039df","sha512":"681bdb0a48871d9252b644b77c878ddb0847390aa1de64458f52c6ff29168279e0e7cc491837ddf6b4d427c6e157e1628b5215467db6aaffcdf34c9cd2b835ec","ssdeep":"","tlshash":"11812555e3870aa4405a679464acf4637c8630e2b2f1036db59eb8886f373bd2c4df5c","first_seen":"2026-02-15T11:16:56.490412Z","last_seen":"2026-02-18T12:50:39.639831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:49:47.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://hsbc6.cashanalytics.com/users/login\r\nserver: nginx\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:49:48 GMT; secure; HttpOnly\r\nx-request-id: 0302ce3a-4a65-47a4-8031-3cd00c3823bb\r\nx-runtime: 0.011197\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":305,"dns":68,"connect":34,"send":0,"wait":49,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:48.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:56.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:49:56 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/users/login","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:49:58.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"POST /users/login HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 142\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"authenticity_token=cjnijYKLQxO-IAu4YzZbldUGanUqXFVskzc1ZA-TRe5BZfHbUhBHfz6B02mfAfVretKo2HD_WU2qzWGUR0DkKw\u0026user%5Bemail%5D=\u0026user%5Bpassword%5D="}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-ua-compatible: IE=edge\r\nlink: \u003c/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/css/stylesheets/print-c8b3e7dd.chunk.css\u003e; rel=preload; as=style; nopush,\u003c/packs-hsbc/js/runtime-5a43b883523039634097.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js\u003e; rel=preload; as=script; nopush,\u003c/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js\u003e; rel=preload; as=script; nopush\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\nset-cookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d; path=/; expires=Thu, 19 Feb 2026 00:49:58 GMT; secure; HttpOnly\r\nx-request-id: 80aa9be0-d72e-4cf3-a786-abc172b3efdd\r\nx-runtime: 0.400059\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":958096,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61122)","md5":"46188496e03da042d1aab859e38cb84e","sha1":"f1cef3c22f0b1901b8a0426e18689603a719daac","sha256":"d009151f79a45ba686f3eb4faf151218b47900ce2c785544330906ddbb968ac5","sha512":"59f6f4473216207035cb8376a67f2fe36aa6da98e93f23a1a939fcbf30a91cd6766e06cab0ba849cb8002debce81173e8b6c7ea77a20a6c163b42415d92a8bf4","ssdeep":"12288:Du4wfbsOmssRzuZHBuHsobcttqiKIclxwKJX1+54jAK:MsZuRoxn","tlshash":"70152a1b68953ef78b9e63c5f9963d5b60f94215e3800455cddc8e2c02c9bdcf22ba68","first_seen":"2026-02-18T12:50:39.664556Z","last_seen":"2026-02-18T12:50:39.664556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 98750\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-181be\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62890)","md5":"13d57b8c8eaa77936bba513a8205ae30","sha1":"f74e81a60133b4e8c3885083bb14db69d211fdc2","sha256":"667e32ff69ee8bde6fe40509c73b1ce95fffb1abadb2356cc4bdf16990c55e88","sha512":"c1e3ecce316376768d3f4fa9705b8c817f6ab8cd89621a9d594672fb67d36b021bb8dcef425d08bac7a6bf3bc60c010bbb47f7bc6b2aec67aaaf8323803ea3f9","ssdeep":"6144:yHYbhu/YHJ9UFuzMyc2JGqNH4/I/76nmLt:uYbhu/493zM3XqZ/omp","tlshash":"5ea4f8a0a05514dcb3d7ea0f4702b629e537f33bd5814b5fd1c6898f0ed3a2871867aa","first_seen":"2026-02-15T11:16:56.481311Z","last_seen":"2026-02-18T12:50:39.631706Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Rg-bd59c57244c9024c9181f275457c2814.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26196\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-6654\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26196,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26196, version 1.0","md5":"ff57e80a3e03f8f4f3bfc7185aabe8c7","sha1":"28727fdcb5bb8ee6e6a3cdc043e6534bdc223738","sha256":"f2c9f8279b2f7f4864ff4a2685306c9d978a30b82d0c396ed20752f22374c82f","sha512":"f44c1f8fa509d4d186294ed6571d2e2f5ad122f6fcb00f5fa3473bed1dfd66309ae6df155ebdbf89fbaa2e7f51b9c7adf3106b055fa2fcd4947fee2f84db04cf","ssdeep":"384:B1sj54kM5TsEeSBAaMuZAxamWUKPwqJPstz+ohUWeRnCtZnBiAGiHrU3mM4lOnlE:BSETFeEvZFNlkh+oh8F+G3uAls7xX","tlshash":"4dc2f15934999d60f8977c781cc266d2bdd3626205c223e123f18d892e3ca7df63a43d","first_seen":"2023-05-26T01:22:42Z","last_seen":"2026-05-18T06:17:49.461417Z","times_seen":33,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:56.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:56.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/apple-touch-icon.png","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1910\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-776\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"92ec7c9ee8591b8f4be162d0a626ca3f","sha1":"43d369bef4c111b2ccb0e8c6265cd96618f55577","sha256":"d258f7e2ad662d73ec5c4a2c9e0b7d514b353df351bb8880b9b4731682788766","sha512":"4ad8f19b1b4ef7e7a47215330942d3c1b2caac1effa785649b10d0b99b8f8657af366f00e67ab757645d03a096081a7a8e459ac3a523b6b7c2b6f632868e07d5","ssdeep":"","tlshash":"744119d17334f298c8527e30324123404cbee2a12b706deda752f5a81a300d5cbd1f87","first_seen":"2023-05-07T15:43:56Z","last_seen":"2026-07-28T15:50:34.504376Z","times_seen":519,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-regular-400-e4bb547b.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 395444\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-608b4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280","md5":"f3100ca1d6b8939d47fe7e23a831bcd3","sha1":"7e9675560e6f9836855efa46cff0738cb02d51bc","sha256":"b85c4d4bcb7be039d30281d940426203622394a85d4cd2b43048b57a924a7d51","sha512":"b0fcdad92ec9f88f58b5e075a09cf84df99aabbae5a9b307d544ec9d8deb5a705922bcbd081cf6ac8e7277faf615208a67a96c692d950ff5170b07bf9e39f73a","ssdeep":"12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG","tlshash":"998423d8d11ffb282891d6260a7fa781de93d35d907a4c8c1533fbac8d09ca92951fa0","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-08-07T11:45:04.565998Z","times_seen":3963,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"OPTIONS /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cache-control\r\nReferer: https://hsbc6.cashanalytics.com/\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:52.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/logon-57ea9602caee82ff7b41.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11761\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-2df1\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44126,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43975)","md5":"76ab9046784f087f166a5ba138f4a7d3","sha1":"9aeb82e11c89c21f244ce6336a88dc014836a675","sha256":"facf1a77dfc6f1d63de9681e7ea507c37890293601eb0eaf66688239316793b0","sha512":"7e12d5830e68db73d015b61f085f5a75fe53d87359a86c0aac2409613fc179c32039211f909c0dc07588be0ca9dc67c29e0dee081b9288390f25eb1d1585f282","ssdeep":"768:aE54sdilCueMNUgYxqMgQjxDayCsajDartUgYxq9+P/ovWk:P5jDgADfqDNO+30","tlshash":"1813d88cb2d7f0b606e36166803f5607f23a795ab4198441d226dcd1bc789dea237f39","first_seen":"2026-02-15T11:16:56.47764Z","last_seen":"2026-02-18T12:50:39.655243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:55.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:55 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/stylesheets/fonts/UniversNextforHSBCW15-Md-ae640c2a2670bd484249b04a5e3ab433.woff HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24508\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\netag: \"68ac4292-5fbc\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24508,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24508, version 1.0","md5":"be1087ac9281730729e5a3841216564a","sha1":"8f61efaea53ed74373ba1d0af45fad34520525db","sha256":"29838f28282e8065835b2178913007a612aef78ae3be42daedc199fc0d78b082","sha512":"d0f9125c8cb514718f7d0ffbfcc306a259829d0226e7a7084fd2593d92e24056897935b22642f15d815ca3e4fc8bec60b82d472d2615c7b8575bd981f4101c60","ssdeep":"384:y54kt/lO0tQjdo3TtHjEtAL+a59n9YcalTfUWHI2z8TntC6dss7Dxtj/7Uxh+v4B:yn/lltudo3TBgazn9a0nnt9msbjyCy","tlshash":"a7b2f17cfa0eb422e4e0b5f9cc45ebc13a5b8294b0801c3321b6b392565339fd9926a5","first_seen":"2026-02-15T11:16:56.488679Z","last_seen":"2026-02-18T12:50:39.648304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/runtime-5a43b883523039634097.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/runtime-5a43b883523039634097.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14863\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-3a0f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31857)","md5":"ead9711bee929369172089a602b0a7b6","sha1":"8dc52bf63aca0ae2e7f342e7a8f9425cf805c9ef","sha256":"a83890e9352da0459cf61509f09e3b446dc16ac21cc60d946cd15fb596e0a979","sha512":"3b5ee464d662971a76f9a07d310e862e627dbdf49c377924143d6ed70f10daecc0367c7c7242ef4cdbafac517df3163be3534c8a1f4fb3bc2e4239ca502932b3","ssdeep":"768:A7MB9gIInN6KC0LGHcjbdHI6gU9oFEPHkdVucFVa5X16W:Wk2N/RWc/KEPAFVol6W","tlshash":"06e2616ebb6fe8d62527ece77d5130a51208313b2901038c91fdc7690499f88b56fa6f","first_seen":"2026-02-15T11:16:56.47876Z","last_seen":"2026-02-18T12:50:39.663625Z","times_seen":11,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/react-fef0c14e8859f5139a0f.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44949\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-af95\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65446)","md5":"11e576aa1b5bdbced9427ace1fe6439d","sha1":"0560417991d40d6ae33e51782af8389d44d65c79","sha256":"ecd1299b14cde84240556a80c67c465e6657bca113281d1420515bec429e03f7","sha512":"c6e0c0af9def2d346b5b975288dda1653b1cd353458f7896f93afa31328ecc84e3b9e3e6fe8cfbc54ba9e790e240774e0db710dd7a87df48234aa73bf98e03f4","ssdeep":"3072:pwhwjkhOCXdqiMdJqhXet9YVEDy9rUJaAJdK:plCtqjdYhBVYyyK","tlshash":"6be3f7e83995f9616bf301a710af1807733d2a1b280c4560a211fddeb9f845eb17bf99","first_seen":"2026-02-15T11:16:56.483415Z","last_seen":"2026-02-18T12:50:39.638889Z","times_seen":11,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/js/vendors~logon~main~sheets-e8e3c3ac0f9187871f87.chunk.js HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 348984\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-55338\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1124797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65426)","md5":"6c4c82b6abb45bfec6b11855c2dc9887","sha1":"7d15556d0ad19dd9043ec9b55a71e1856b99e738","sha256":"a0bd8760979ff54b359c0824f7d6ea15324b4983fd65022df2247222ec29566b","sha512":"89528af34ef14b9771e700badd7dfbb72e7b2becd976491a3b74a7c481905330fdb7b2d5f2a1c36c8d0fec71d3f7c07f4d7f0202604af526c25b90775dc12ebe","ssdeep":"12288:L3V4UAeZ+E6T76Y5TvN0aG3KxeMK5c8ByHqDm13DLSU:L3+UAHzXp5OaG3Kxe7faqDmtLSU","tlshash":"ca25f9cdf255b12247a731f5506f060bb337696ca449806cf6a8d4e62cb984e623bf3d","first_seen":"2026-02-15T11:16:56.49447Z","last_seen":"2026-02-18T12:50:39.633937Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:58.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/css/stylesheets/logon-hsbc-4d4858fc.chunk.css HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 19112\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6908875e-4aa8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a07447ab69924780ce94fb471ce419f8","sha1":"825a4b1a72cdcfebb3e8b511809beeecb4190f5f","sha256":"836edb4da22dcb21ec16ebc637c17732c3737394bbc0bfaca50014fdfdd0cc54","sha512":"c5af33fa68dd69424029191c458a1cf2f14f8f91700121892030567bd81c279070b0c0934fc368358f3590a695a93608a5fe0375cb1ab01382738d06ff8da334","ssdeep":"768:fp/6PjVnUvMRiwzZzchvdtJkDk/Xcvffxkn42k43SYim1gtd5xENM6HN26XFe:fp/PvNdH/Sffc3SYiRENM6HN26o","tlshash":"2bb386d6f1a02529d4a7c61960d0bebe157f8241e7228eebf51b3f7847896cb0563e0c","first_seen":"2026-02-15T11:16:56.473451Z","last_seen":"2026-02-18T12:50:39.637696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:49:59.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:49:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /packs-hsbc/media/webfonts/fa-solid-900-2f8c3742.woff2 HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc6.cashanalytics.com/packs-hsbc/css/stylesheets/fontawesome-3400f16a.chunk.css\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 327824\r\nserver: nginx\r\nlast-modified: Mon, 03 Nov 2025 10:43:42 GMT\r\netag: \"6908875e-50090\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280","md5":"e0f1f10202002bf91422fd3768c2d744","sha1":"ec47d73d219d2adb2971f85450fd1824d38a2db3","sha256":"bdb9ca4674e16a180ad38ba1b55ea1224a38677e604f5c5e560b85194970b85a","sha512":"5b0830861447d3e25d58cbd3fc65155ecaf6624b6cfc5aa5fb9115330681f3bf141ab2e749226924dfea45df7abaee3a899965c581a9a9b8f0c4fd5a4857612f","ssdeep":"6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz","tlshash":"5664235bfbd2cb35b542ffe4a4bbd479f80a41391ac310ee82666be6ed125d0c1a104d","first_seen":"2023-08-15T13:44:57Z","last_seen":"2026-08-07T11:45:04.598272Z","times_seen":5328,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notifier-configs.airbrake.io/2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript","fqdn":"notifier-configs.airbrake.io","domain":"airbrake.io","tld":"io"},"ip":{"addr":"52.72.229.136","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:03.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"airbrake.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Oct 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"44:DB:0B:63:6D:E1:33:CD:32:6F:26:AF:0D:E2:97:2B:FF:F6:28:79","sha256":"83:6C:4D:11:EB:21:87:4E:F8:B0:25:FD:02:67:D4:D2:EB:EC:02:F1:A3:DD:2A:CB:63:C8:57:67:FA:DE:AC:B4"}}},"request":{"raw":"GET /2020-06-18/config/90262/config.json?\u0026notifier_name=airbrake-js%2Fbrowser\u0026notifier_version=2.1.8\u0026os=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=JavaScript HTTP/1.1\r\nHost: notifier-configs.airbrake.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/\r\ncache-control: no-cache,no-store\r\nOrigin: https://hsbc6.cashanalytics.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:03 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 219\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a49ad39cc66d465717e6d7a4212b21e5","sha1":"1c71b7f96f0c1d5d4904a96a3474386ac2728bf1","sha256":"3be3c66d4a03892f0162655d684121388f8977d5df481d33de27b4666df8673f","sha512":"5986329ffc91a80332b89bd4cc3a532f04448336cd2b38cbfac6c494ebad5a43f084a57d4cf53e937551a8b08617e0ebc84eeebce972d68a2b54a2b9f42ba282","ssdeep":"","tlshash":"91d02341955e1cfe88c44c55f05f3f0b5a2f066308d518207c59f5d480fd0310f51523","first_seen":"2026-02-18T03:35:13.270511Z","last_seen":"2026-02-18T12:50:39.656243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc6.cashanalytics.com/favicon.svg","fqdn":"hsbc6.cashanalytics.com","domain":"cashanalytics.com","tld":"com"},"ip":{"addr":"54.77.170.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc6.cashanalytics.com/users/login","date":"2026-02-18T12:50:06.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cashanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 13 Jan 2026 00:00:00 GMT","end":"Wed, 10 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:F3:90:73:2C:53:6E:8D:0D:81:D8:D2:77:51:D8:B0:A9:7F:40:F0","sha256":"70:08:03:32:F3:5F:E5:09:B0:9A:C8:F9:5E:3B:94:D3:A5:42:0D:FA:8B:89:90:4A:82:DA:3A:4A:67:CC:0A:FB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hsbc6.cashanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc6.cashanalytics.com/users/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session_id=e6d3dbe8e4ac298a35d3092e9154c02d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:50:06 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 25 Aug 2025 11:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ac4292-38a\"\r\nstrict-transport-security: max-age=63072000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"efa04266f3c07756bd8d68ea56ed69e5","sha1":"2b266f9934c6f63e1b4444e0eb5c79b87dddc3c7","sha256":"279f8a0fa8f3648f2454ca9cf84c2c578bb052cd6f57d52b5d233c6af889a480","sha512":"a452391b2d5bba550ab674e4eb4642083e1fb3cd15df01e85bd5b13e4ac184c85617a959bec68b3a3abe94472041864498d9d6eafa4c3206b08811d6b8943c56","ssdeep":"","tlshash":"571140f808451538c9c6cac24ba8f8e8027ef3ce21cd359b9fce2ad20c229f455dd10a","first_seen":"2026-02-15T11:16:56.475808Z","last_seen":"2026-02-18T12:50:39.635348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"hsbc6.cashanalytics.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"hsbc6.cashanalytics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}