{"report_id":"5106da39-9c1b-4508-b7f4-95bebee6b83e","version":0,"status":"done","tags":[],"date":"2026-06-10T12:59:04Z","url":{"schema":"http","addr":"securetransfer-ca.com","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"title":"securetransfer-ca.com/","dom":{"size":5650,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"781f02de5e5b81ab095854a548b5636d","sha1":"d4d872e6719d0adcdbec38a599fe6c01ed74d440","sha256":"47bba1f48c7b4e1c5cb932731c222e48fb4debfdfac6760006e899c99075e6e5","sha512":"e097f7183d9c7f9f7b6e238e8229a200f46e129b2dc26859059bc2394e338ca232a95873bc439fae54f4274f79041f4997ab0fd5a792fc6561d04027b6bcc7a1","ssdeep":"96:nwl1v1/I2YpI6KjLKkCZhCiR8shwECketu7GFHv6kg9R20yf0JiOkgClq:wl1v1/I2YpI6KjLKkCZhC3WwECRJHv6t","tlshash":"cdc1524b0cf3103b392394a4afb7741a3462a10b5085cd9a795d93dd0f82b998ca37ed","dom_hash":"domhash4d93d9861f074b69476d80f245ddf372","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"securetransfer-ca.com","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T12:59:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"securetransfer-ca.com","ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":73,"request_count":73,"received_data":229486,"sent_data":44608,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":18,"received_data":153025,"sent_data":8622,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-07T23:49:17.429937Z","alert_count":0,"request_count":18,"received_data":1622592,"sent_data":8820,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-07T22:40:26.930816Z","alert_count":0,"request_count":18,"received_data":731250,"sent_data":9396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-07-23T09:04:15.020716Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d258dd8491daec47e730b7f882965d1c","sha1":"eb55b8de6e285cf94b993f251c39ecf64842480b","sha256":"4492368331fa109fc6706574a84782e30df7cda821d883238ba4b2eeaec10047","sha512":"7deedf7dc8c137bd4fe838b43d573243f4b9d045944b6d10a7cd5ae73e46567b406eacb4ffa54aa00741f1406cff4f7636b984db63b75a6ee21034d23033ab29","ssdeep":"","tlshash":"6071224b0df7117e242354a88b67341b3432610b5185ed59780de7da0f42b699c33bdf","size":3539,"data":"","first_seen":"2026-06-10T12:59:17.132192Z","last_seen":"2026-06-10T13:11:31.800592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj31 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj33 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj34 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj27 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj26 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj29 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj28 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj32 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj30 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj64 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj66 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj67 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj60 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj59 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj62 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj61 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj65 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj63 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj93 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj99 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj101 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj102 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj95 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj94 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj97 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj96 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj100 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj98 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj128 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj134 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj136 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj137 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj130 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj129 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj132 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj131 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj135 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj133 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj163 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj169 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj171 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj172 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj165 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj164 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj167 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj166 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj170 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj168 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj198 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj204 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj206 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj207 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj200 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj199 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj202 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj201 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj205 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj203 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj233 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj239 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj241 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj242 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj235 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj234 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj237 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj236 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj240 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj238 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj268 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj274 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj276 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj277 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj270 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj269 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj272 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj271 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj275 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj273 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj303 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj309 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj311 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj312 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj305 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj304 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj307 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj306 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj310 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj308 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj338 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj344 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj346 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj347 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj340 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj339 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj342 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj341 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj345 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj343 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj373 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj379 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj381 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj382 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj375 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj374 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj377 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj376 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj380 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj378 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj408 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj414 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj416 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj417 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj410 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj409 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj412 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj411 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj415 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj413 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj443 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj449 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj451 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj452 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj445 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj444 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj447 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj446 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj450 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj448 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj478 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj484 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj486 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj487 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj480 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj479 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj482 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj481 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj485 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj483 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj513 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj519 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj521 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj522 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj515 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj514 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj517 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj516 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj520 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj518 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj548 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj554 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj556 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj557 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj550 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj549 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj552 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj551 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj555 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj553 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj583 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj589 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj591 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj592 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj585 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj584 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj587 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj586 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj590 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj588 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher14.process7//obj618 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj624 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj626 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj627 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj620 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj619 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj622 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj621 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj625 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj623 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://securetransfer-ca.com/","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:00.972Z","timestamp":1781096280972,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.252Z","timestamp":1781096286252,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.400Z","timestamp":1781096292400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.388Z","timestamp":1781096294388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.417Z","timestamp":1781096296417,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.130Z","timestamp":1781096285130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmUh2XIWki3GnJh9WDcviv9DeDkRL4niM%2FXf372UIg7ssKb5%2BdXVwcuysaOuG0Uc1KvBkcKtRNa4NCFwlcD89q1DDoTH9hSg%2FxJkNtN5XwqM9VIeXdkentiMaStNOjO7qLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988ba61c0b0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.269Z","timestamp":1781096287269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.300Z","timestamp":1781096292300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:12 GMT\r\nage: 1202303\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132351\r\nx-timer: S1781096292.305454,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.336Z","timestamp":1781096298336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxfrjpV9ghidFcQ%2FMK9nV1kXMJ%2BVbiHGg%2FOOJeDcc1LDpDcbmmowlXfa2hJAiIUFYWDjPX7ddk%2FTD6ufnu6G%2F7dhj17ktp74Otwww4iehy1%2F3dYPrk2Eefl0ZdZ2b0nQ4uQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bf89df50883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.164Z","timestamp":1781096286164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQLupARZmSdG1bE%2FDPpoatZCU8qFtGcf5Xojm%2BH0d42JVLyTog%2BQ6GMRzANNVJq88KgZbWi9ywZMFlSAcrcNY%2BzXRXMVUEyC85IrDL9RTDDGI2xJlwMN81nyHGbdVeslAZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bac8b610883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.326Z","timestamp":1781096297326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:17 GMT\r\nage: 1202308\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132359\r\nx-timer: S1781096297.331571,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.301Z","timestamp":1781096292301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517532\r\nexpires: Mon, 31 May 2027 12:58:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ur%2BkBoctq6h8lCGi1JNyMlUeSwO3wXdb9KfQVAWe2VIU3zwfL5m1w%2FkCkuElhHOg22YX%2FBXBm%2BfViTxRMTxNpVlZivoISGEImWFUpnlWdaSsHZqOqxdGffSPgPq8PAz%2FG%2FvQbYDY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bd2ef40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.416Z","timestamp":1781096297416,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.069Z","timestamp":1781096283069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:03 GMT\r\nage: 1202294\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132333\r\nx-timer: S1781096283.073637,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.280Z","timestamp":1781096291280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41894\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2B63WR5rflt7shanjZkDsrlyLeJMtb95jK0%2BrLOLhDoOJUpweHVQbhruJYgeXcIoiiF%2FpjxXlJqk8xU%2FfahWh%2B45rMPDrgwhEgbMtsJZ3e2h1mq%2Fkh9WwaGiFjAok32Z1Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bcc7b1c0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:57:54.484Z","timestamp":1781096274484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:57:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517514\r\nexpires: Mon, 31 May 2027 12:57:54 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P90v5kXgf%2BNytPxIbt6PX5Xh%2B2542welZZXstzP0QsShSzpIzqG5k1kC3wWqVrS3ZYQ2NVfbDjzMp0%2FE2in8Qr4v5Po0KLn8VL4Jeg%2B6L3OFcvrY319hOXauIjAjmy44TKnPqCiP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988b63aae1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:01.998Z","timestamp":1781096281998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517522\r\nexpires: Mon, 31 May 2027 12:58:02 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgDZYfTsAdwKVG%2FeuOsXJxUAkpuvZDuSDMrcxMfWuvngr8whNUrwy9n5%2FpgJ0oOo1wRNNFPC%2BHvPC4RRukL5ipjKBRTxrjBCLevrLutAmBT903ezi1auEsjYIVkWb8VlGYUhF7el\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988b927c69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.217Z","timestamp":1781096288217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41891\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03Tl9tml1bW2zfZmRz1WHSn9twjUhfuWLRbf%2BUKK0qe4uWj8%2FCmiBiy4w8Nke%2F0Abeu5zQARkJAZ72MBpgHHbMOHQgzFjd%2FItq0lbnX2oLf0nTzMgbSfaYkM3q%2Fwd%2FQswFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bb959ad0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.355Z","timestamp":1781096290355,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:11.165Z","timestamp":1781096291165,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:14.202Z","timestamp":1781096294202,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.329Z","timestamp":1781096296329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:16 GMT\r\nage: 1202307\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132358\r\nx-timer: S1781096296.333567,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.334Z","timestamp":1781096298334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517538\r\nexpires: Mon, 31 May 2027 12:58:18 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YA%2BWJUf8jE%2BGKtLNc7YQ7K18LMzjDl%2BxxXDjSZL0vhTJJKq3V60z2u01ox8FBMRVkzkF6qzrYUfLyqwq4MRhw9rtAC31yCBifYoXPVmsTfxzSFq9%2BxfhSEtU9RUog4%2FOTjzM7ByW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bf89b22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15046,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:57:53.511Z","timestamp":1781096273511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:57:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2152,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":286,"connect":65,"send":0,"wait":82,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.278Z","timestamp":1781096291278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517531\r\nexpires: Mon, 31 May 2027 12:58:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anXywAwXJz8mQudDzLju%2BOg9lnNoG3KrEYWEhv02Osi1nBUJVV5cpQQcxdrxHB5HJuPRbyb4FpTfp9ftciZtQvhrRI6f0DuuqwiEygAVvG9lIMMxORN6sv%2FQJ6LkNHcl56mNBXMY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bcc7d1b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.381Z","timestamp":1781096297381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:08.098Z","timestamp":1781096288098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:08 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:09.132Z","timestamp":1781096289132,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.358Z","timestamp":1781096291358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.331Z","timestamp":1781096297331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WN8Ntm7BN8oqgZkqABFwU167j8smrQuXSu15m%2FVjualRpkTUVxWX63MZThFo%2F8VUZj4J2i9LPg%2FGI4XcqkioczeS11N5CygB4JRmMpeMJxwuax4WN7sM%2FVwp%2BHI8HBOxBJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bf25ff40883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.192Z","timestamp":1781096284192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.233Z","timestamp":1781096285233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.186Z","timestamp":1781096287186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:07 GMT\r\nage: 1202298\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132341\r\nx-timer: S1781096287.190212,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:16.216Z","timestamp":1781096296216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.241Z","timestamp":1781096289241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41892\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQm8POcdXqOJ2TmVzA88GmRc8iOQAXkbOLo7Umcqw795f1SjjRv1vq88dDA6zuEEyECz4bP2kLpJd7fEFHka9z9DTWCH8qoCmkCIP4pgXmi9AFpHfO3Kwi1PSx2aNA5plHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bbfcfb80883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4469,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.286Z","timestamp":1781096289286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:01.994Z","timestamp":1781096281994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:01 GMT\r\nage: 1202292\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132332\r\nx-timer: S1781096282.999660,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.161Z","timestamp":1781096286161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517526\r\nexpires: Mon, 31 May 2027 12:58:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoCE28iXVyJ2ruWxnKeZaUP0pkDU8ksFHHjfxBmHeL3De3jW0BdwBTOBjQ4Vvr44k9Kr6BtN%2BynuwO09ylyboIx1xmKxmnbdBndo4svDYgd32RS%2B9vs8Ptsi6P%2FtfLjLTivzvUm7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bac8a31783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.190Z","timestamp":1781096287190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qJs7nvsZr7iBk862FCAvWGZ5BXcm6N9R9XrGG2EHAiVTHGo%2FWyzx889Kh6acT7QKXwEMFpZbMJwElDZGvWmb1WO2bh87rJdln96fnKiYihElyYmsAQSCqqbaoX4%2BAVgsDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bb2fafc0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.240Z","timestamp":1781096289240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517529\r\nexpires: Mon, 31 May 2027 12:58:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M70M60oR3k5vCG0ztpWiqlT3QOonQXvVW0j3SonDKmjd6MmWu4z3pON3M1i87PUmnswlr5JaUrdjAz3N5IwR2Hw4QL7ourHcveJQknFNWoGjzBLlOlx8H7MsQkA6CU%2BcXzg7YApP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bbfcb22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15038,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:13.207Z","timestamp":1781096293207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.410Z","timestamp":1781096298410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:19.232Z","timestamp":1781096299232,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T18:51:01.107391Z","times_seen":17482142,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:10.141Z","timestamp":1781096290141,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.398Z","timestamp":1781096295398,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.331Z","timestamp":1781096296331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517536\r\nexpires: Mon, 31 May 2027 12:58:16 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY9gZYNQORXlp8vQzl%2B6uPxGChLSPubLAt1q4vZ6oWJqTBQyd%2F3N3alOkZDFz1Qm4Hry84ckay248Q9Ca1JRcjnVWxrpJztzWSnGOO%2FZZk%2BEEfIYPnv8PrSNaxU3eo0vTKfCskAP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bec1c35783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:01.024Z","timestamp":1781096281024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":62,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:05.019Z","timestamp":1781096285019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.252Z","timestamp":1781096290252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41893\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiRHU3OPFV%2B3pNfrG5GGwVI77leUi5UM5VPYpRmXs%2BWcwdxi98CInFiWyNyNSV90H%2FDTD8C%2B%2BNWGcFBuv8U0PKVraeDdmNQNcTJGwfm3gS72H3YMOY9V6uyJA8hXrctA9Xw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bc619080883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.295Z","timestamp":1781096290295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:17.225Z","timestamp":1781096297225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.431Z","timestamp":1781096297431,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.106Z","timestamp":1781096284106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:04 GMT\r\nage: 1202295\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132335\r\nx-timer: S1781096284.111355,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.211Z","timestamp":1781096284211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.303Z","timestamp":1781096288303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:08 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:02.105Z","timestamp":1781096282105,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":61,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.159Z","timestamp":1781096286159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:06 GMT\r\nage: 1202297\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132339\r\nx-timer: S1781096286.163473,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:04.002Z","timestamp":1781096284002,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.177Z","timestamp":1781096285177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.209Z","timestamp":1781096286209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.323Z","timestamp":1781096291323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.348Z","timestamp":1781096292348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.313Z","timestamp":1781096294313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:14 GMT\r\nage: 1202305\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132354\r\nx-timer: S1781096294.317369,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.316Z","timestamp":1781096294316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41897\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FkNOLUTklJ42m%2B%2BRLnvC14tMtxOD26iEtXbGdbXdSRSGkehimI6lyNCduKWSSz5rlb%2BhYhab7%2FMd7nnbZNu%2BiNKA6CkHQ1P8UUNNosu050WuE87S%2BeHDPwCzZaB5RlyU%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bdf7be60883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4485,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.129Z","timestamp":1781096285129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517525\r\nexpires: Mon, 31 May 2027 12:58:05 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJTezHgjtN%2BJe2JcOMTOnjFyeGxiRteymINCF5sHgnPMkJtd9UHl%2BFtvU1NjcFeMr4Hv6IbgiyQMUVPUn5zlPgc%2BrsR60YJSfvYBvsb35swRyfbehsl8M%2F4WLOCanB9Tab5LOM5k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988ba60899783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.305Z","timestamp":1781096293305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517533\r\nexpires: Mon, 31 May 2027 12:58:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4Eu%2Fibx%2BHuuk%2FA3PWXf89QfP2Mi8I3%2FAST6oYN8bkqAU%2BEqpZNHqbEuYV5sjTk2U7GrCBnG8RQTFW92Dbs7hzE5%2FkNw9mOJ1VyLp%2FERXeA36lHMgY8HEWtsHcAL5LNyyUQ2wi5m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bd92836783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15050,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.358Z","timestamp":1781096294358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.404Z","timestamp":1781096294404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.400Z","timestamp":1781096298400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.175Z","timestamp":1781096283175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:57:54.481Z","timestamp":1781096274481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:57:54 GMT\r\nage: 1202285\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132322\r\nx-timer: S1781096275.517619,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":10,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:02.935Z","timestamp":1781096282935,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.238Z","timestamp":1781096287238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.322Z","timestamp":1781096288322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:08 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.326Z","timestamp":1781096295326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41898\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZSjvDHUEYz0BStJrDul7vD2JyYanJv9PEvAl%2BSK7Xo%2BqCy4pnYpKIVNSEUpVdyXhhfQZCl12qEqMP7EznjJI3Aj8589028luRdZ6O1fPQCwwqtbq%2FPb5t2iqlnPRrRaD9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988be5ca840883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.072Z","timestamp":1781096283072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zq9MM4SXteCgJpZRD1rMyTSYc2yRvow8R%2FJiw1cTf9eBFixqMMDFdybXLyMjWvQwJjldesC3q1OzSzLKOyLK3%2B8MwD5x5cE08gZFic9CLLOvutuVocImotFq1oqYk7BYepA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988b993f110883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.118Z","timestamp":1781096283118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.250Z","timestamp":1781096290250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517530\r\nexpires: Mon, 31 May 2027 12:58:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COIqaDzyph1G4TyyaPhjz4XcuPOy1r%2FboGRTdblclhteYGK7na%2ByzWN3NFqCVLcyJ76UD%2FZk%2FLw2HGMf2wufe0%2FIrQ7dUFM568eJC%2BaQz7xf4xW2HiLfvNrtG4FIVj85dtJSInG3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bc61bc4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.384Z","timestamp":1781096292384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.373Z","timestamp":1781096296373,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:01.073Z","timestamp":1781096281073,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.334Z","timestamp":1781096289334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.276Z","timestamp":1781096291276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:11 GMT\r\nage: 1202302\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132350\r\nx-timer: S1781096291.280765,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.324Z","timestamp":1781096295324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517535\r\nexpires: Mon, 31 May 2027 12:58:15 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHSUJ%2Bw5jFtN7n7wEJSx93bAtl7dV7jIpPVHYMuY7m383iXxRi1qqurOUuTyFZeEgErqdJtq1hw7LE%2FnlD5tgPZFz8CeP1%2FuKH5j8bmPEVIY72wjAVaRqOifnPzpM1hM4wN597s4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988be5ccb6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.374Z","timestamp":1781096298374,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.288Z","timestamp":1781096287288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.304Z","timestamp":1781096293304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:13 GMT\r\nage: 1202304\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132353\r\nx-timer: S1781096293.308457,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:14.314Z","timestamp":1781096294314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517534\r\nexpires: Mon, 31 May 2027 12:58:14 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0hfbwcn%2FcL3MkVXpNUADouRkA6t1YtmzlJXdAh%2BhKCDrjXNOvCA8TV59Q5xcS60KMBtQpefd%2FhrfpsTGSIG2lj%2FIC2ZjW3pGL1IkVFA75XCLAinIN%2F%2FWUfeapsgnJnWzfQQM0pz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bdf7b3e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:02.001Z","timestamp":1781096282001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41885\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZADbZ0Mq1VJ7Ikp9e2WrAcXykZhGChcBVTNng7qWxEag1UZp6LBoi1yMvF6kzMqcx5vr%2FtMV1gJE8I3vdMI%2B%2FcAv2Y%2FRRCK%2FCHks6f1uoR5Fgwi2jPVdc6g4ooIx8%2BdZZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988b928c270883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.216Z","timestamp":1781096288216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517528\r\nexpires: Mon, 31 May 2027 12:58:08 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBR5sy0ucen857PAz83Zz9bQ9u%2BvGAs8uoVgYKWxAFtLCB%2BEJJhGhFzofxrOE9uOOJaZo8FEUKHSNwFWBw%2F%2B%2Bm7o31vqYvZxSi0h6E3SNz%2FtnCt8DsqYLcqOU2FA9AmopIlC%2FtMR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bb95a72783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15050,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.238Z","timestamp":1781096289238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:09 GMT\r\nage: 1202300\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132346\r\nx-timer: S1781096289.242816,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.336Z","timestamp":1781096290336,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:11.378Z","timestamp":1781096291378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.154Z","timestamp":1781096284154,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:04 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.214Z","timestamp":1781096288214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:08 GMT\r\nage: 1202299\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132345\r\nx-timer: S1781096288.219019,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.332Z","timestamp":1781096296332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41899\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5o0dUpuNH444UvBxjSYZdnzFXVO1hQBkujJGw7VFHY7XWq2Feha%2F2Ypm8iqj9HUYWJfxn%2F0lSxMkiJOD%2Bb3CGxI4ANbZK3M%2BTOwRwlcKGrNj6rkPRhorl7GJebBSuXExPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bec1b570883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:18.333Z","timestamp":1781096298333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:18 GMT\r\nage: 1202309\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132360\r\nx-timer: S1781096298.337238,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.126Z","timestamp":1781096285126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:05 GMT\r\nage: 1202296\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132337\r\nx-timer: S1781096285.130574,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:12.187Z","timestamp":1781096292187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.347Z","timestamp":1781096293347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.377Z","timestamp":1781096293377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:57:54.486Z","timestamp":1781096274486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 12:58:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYVoP%2FLe%2F2xxJVhBoXTb4D2v4ckH1Aaaq9lMwlNQDFr0zGC7ltURLDET8FaPpoFtDTRjaHoN99aRkGHhvHfgfufoaXP%2FqeytAgPrrGwfOavbGWdGEPH3zXz5%2BfL6bjtYzz4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0988b8b7cbc5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6437,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":51,"receive":0,"ssl":6380},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:02.049Z","timestamp":1781096282049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:02.085Z","timestamp":1781096282085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.307Z","timestamp":1781096293307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cpZzHiN3xH%2FlHcsWx3UuFWBetShivetOu1JS%2BfeRAbWBOAcRnirUFhjQUdEd9vCYnloCLr1ZAfS1kHHkPtO5vjy%2Ffs7GUCaJ9DEQ81zDhg6orK0TsukpSaVb6fhwhIXpaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bd92ac30883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:18.237Z","timestamp":1781096298237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:07.187Z","timestamp":1781096287187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517527\r\nexpires: Mon, 31 May 2027 12:58:07 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1n5jx%2FwuUwrcM7rKdvVmRVG5kh1gpK9XOnzuDC9Dm4fFrw6%2BKG1aPeccV3Q%2B%2F6GG35qvZkkcUlPsagqx%2FKVOB2WSmtea0Vw1PmZdaNvjHfyGRjvYdrlY4j6tqNsZIQfrl7OpJVu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bb2ea69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15046,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:08.258Z","timestamp":1781096288258,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:08 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:10.248Z","timestamp":1781096290248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:10 GMT\r\nage: 1202301\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132348\r\nx-timer: S1781096290.253152,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:12.304Z","timestamp":1781096292304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41895\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8%2FhCx7h7jYIO8bE6QhxkRqdsHOtfEeR6tYIDB0lIDvBMPvjpkCgS78GebHoXacQOr%2B5K6%2BAhLGH3BtGpwy8nB1mqEp6wE5CYzzBEj1MUpaulRnfQMRbKio%2Fm%2Bf9LNPbyR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988bd2eada0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:13.392Z","timestamp":1781096293392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.322Z","timestamp":1781096295322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 10 Jun 2026 12:58:15 GMT\r\nage: 1202306\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 374419, 132356\r\nx-timer: S1781096295.327681,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T18:45:44.434909Z","times_seen":493465,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:17.329Z","timestamp":1781096297329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517537\r\nexpires: Mon, 31 May 2027 12:58:17 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvP63sivF8LViA13yl4PJ2K7ZmtHCdwqScpSEfhCNCoTsS%2BiS8bvRCIA24QwLTAulo7VcPZOpLiWWamzvF1DhBXG4B2O8Yg6Eftv1aRO4dOzyzzvIZ7Anw1Jd5gBgKI%2Bd4ZaWI%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988bf24bfb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:05.216Z","timestamp":1781096285216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:15.211Z","timestamp":1781096295211,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/favicon.ico","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.367Z","timestamp":1781096295367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.191Z","timestamp":1781096283191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.111Z","timestamp":1781096284111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 41887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzDxJMt2pc%2BxFMUjqdZaAsk42zVeNUTtUUDA5WcwJgKCxi023bWQNNAxhEyyKsq56QERNQTkFe5d8ae1xUlBCNakV380dGK9bc2ijmDF6C9pbRnmIk8wUxeaq1BmDHcvmlw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0988b9fbd8d0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:06.043Z","timestamp":1781096286043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:07.078Z","timestamp":1781096287078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:15.409Z","timestamp":1781096295409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:04.109Z","timestamp":1781096284109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517524\r\nexpires: Mon, 31 May 2027 12:58:04 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ph0t3fEg0Xv1hXYbZU9mSPzBGRQ%2B548Qq7tnXzE7UOisN%2BrzFgw%2BxCkh%2FRHZU5MQ3JOwYEY1ZQ88asElSJDWDiG41K4a%2BK%2FOA%2BlxDjkiGmkn1dXwZ%2FMJ436fR6750F50oeiP9ZqD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988b9faf94783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15052,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:03.071Z","timestamp":1781096283071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://securetransfer-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 12:58:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4517523\r\nexpires: Mon, 31 May 2027 12:58:03 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8ohoWuIwB4yTp0D32HTB7e6wSM55iAXW0kXMgIOwt04vsps7xSCsE8M%2B5VHnZqWPcI4eVBYaye5KnRcf%2B6kSxmfSbO5%2BPRr5RsnE2KkFQo3vLVPqIKxhzxxKu6rPqpOMx%2FsBiEs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0988b993cec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-07-22T13:52:11.519767Z","times_seen":1775,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:09.318Z","timestamp":1781096289318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/UDfzM1yn.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:16.401Z","timestamp":1781096296401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/UDfzM1yn.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T12:58:01.887Z","timestamp":1781096281887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcb47222e89da367777e64741bdec633","sha1":"4a0fe1dfa213580df4eb60a1f5324ccb86ca7016","sha256":"857107eae7aa02bc1f76175cdea6fffa3c0ed494688a82865d3d48d7d706569e","sha512":"6d9096eab024c856e598e4f5f456f7614a7255607f7a90e5901cb2289e709550efd849c9dcfce6fa5cc50197ea794130d434dd71b03f9b5f734b55da12617169","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shwECketu7GFHv6kg9R20yf0JiOkgClo:El1v1/I2YpI6KjLKkCZDC3WwECRJHv6r","tlshash":"2ec1524b0cf3103b342394a4afb7741a3862a10b5085cd9a795d93dd0f82b999ca37ed","first_seen":"2026-06-10T12:59:17.12576Z","last_seen":"2026-06-10T13:11:31.79896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securetransfer-ca.com/wYO6Kaod/yr7q3pbt.php","fqdn":"securetransfer-ca.com","domain":"securetransfer-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://securetransfer-ca.com/","date":"2026-06-10T12:58:06.269Z","timestamp":1781096286269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"securetransfer-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 22:42:09 GMT","end":"Mon, 07 Sep 2026 22:42:08 GMT"},"fingerprint":{"sha1":"1F:F4:F5:84:DB:E1:48:7C:1F:C5:12:45:B5:3A:2D:05:76:99:11:D7","sha256":"AF:0E:A1:3D:16:D1:B1:18:7D:6A:66:21:A1:C7:CC:FA:F8:3C:03:34:E3:56:DC:6A:28:FB:5E:7F:92:6F:1C:F5"}}},"request":{"raw":"POST /wYO6Kaod/yr7q3pbt.php HTTP/1.1\r\nHost: securetransfer-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://securetransfer-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://securetransfer-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=j4f1mcm5ohmlfjdjfi1cbimj8b; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 10 Jun 2026 12:58:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-23T18:11:02.668553Z","times_seen":226804,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"securetransfer-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}