{"report_id":"53ffcdd5-ee62-4513-a25e-2ec82221e989","version":6,"status":"done","tags":[],"date":"2025-08-08T13:08:04Z","url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"title":"Arvest: Personal: Arvest Online Banking: Online Banking"},"submit":{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-12T13:08:04Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com/arvest/","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-06T15:12:45.48732Z","alert_count":0,"request_count":2,"received_data":1051828,"sent_data":995,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"td.doubleclick.net","ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":0,"first_seen":"2022-11-03T15:22:12Z","last_seen":"2025-08-08T10:08:04.84976Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":1111,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-08-06T15:46:31.989321Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":905,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":11693,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-08-06T16:33:42.005709Z","alert_count":0,"request_count":2,"received_data":13152,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"maika-redaction.com","ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2013-05-20","domain_rank":0,"first_seen":"2025-07-24T15:57:37.514579Z","last_seen":"2025-08-07T13:25:49.408436Z","alert_count":100,"request_count":50,"received_data":1179209,"sent_data":24579,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"Qualtrics","description":"Qualtrics is an cloud-based platform for creating and distributing web-based surveys.","website":"https://www.qualtrics.com","common_platform_enumeration":"","icon":"Qualtrics.svg","categories":["Surveys"]},{"name":"Twitter typeahead.js","description":"","website":"https://twitter.github.io/typeahead.js","common_platform_enumeration":"","icon":"Twitter typeahead.js.png","categories":["JavaScript libraries"]},{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"pi.pardot.com","ip":{"addr":"54.156.13.80","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2007-01-30","domain_rank":4400,"first_seen":"2012-05-30T21:51:48Z","last_seen":"2025-08-03T04:35:02.822126Z","alert_count":0,"request_count":2,"received_data":6386,"sent_data":1180,"comment":"","tags":null,"fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-08-06T15:34:17.533447Z","alert_count":0,"request_count":1,"received_data":853,"sent_data":1051,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script.hotjar.com","ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-01-23","domain_rank":887,"first_seen":"2020-11-05T16:23:46Z","last_seen":"2025-08-02T22:00:41.567092Z","alert_count":0,"request_count":2,"received_data":237702,"sent_data":863,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"snap.licdn.com","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-02-24","domain_rank":1044,"first_seen":"2014-10-06T08:43:45Z","last_seen":"2025-08-07T07:40:45.676477Z","alert_count":0,"request_count":4,"received_data":106029,"sent_data":1714,"comment":"","tags":null,"fingerprints":null},{"fqdn":"siteintercept.qualtrics.com","ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-30","domain_rank":1163,"first_seen":"2012-05-22T04:24:46Z","last_seen":"2025-08-02T01:35:21.629512Z","alert_count":0,"request_count":21,"received_data":638622,"sent_data":11085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stats.g.doubleclick.net","ip":{"addr":"142.250.147.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":96,"first_seen":"2012-07-01T17:13:23Z","last_seen":"2025-08-02T15:24:56.128851Z","alert_count":0,"request_count":1,"received_data":853,"sent_data":770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws.hotjar.com","ip":{"addr":"54.195.44.193","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2007-01-23","domain_rank":0,"first_seen":"2023-04-18T13:19:16Z","last_seen":"2025-08-08T08:35:08.563605Z","alert_count":0,"request_count":1,"received_data":212,"sent_data":580,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-08-06T15:13:31.427017Z","alert_count":0,"request_count":1,"received_data":570,"sent_data":920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"px.ads.linkedin.com","ip":{"addr":"150.171.22.12","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2002-11-02","domain_rank":522,"first_seen":"2017-08-08T16:28:50Z","last_seen":"2025-08-08T08:33:36.091417Z","alert_count":0,"request_count":3,"received_data":2916,"sent_data":1536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":502,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2025-08-06T16:48:31.284325Z","alert_count":0,"request_count":4,"received_data":462811,"sent_data":1867,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com","ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-30","domain_rank":0,"first_seen":"2022-05-24T19:43:02Z","last_seen":"2025-08-05T15:16:27.389283Z","alert_count":0,"request_count":1,"received_data":9770,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.hotjar.com","ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-01-23","domain_rank":641,"first_seen":"2014-11-01T05:14:27Z","last_seen":"2025-08-06T18:00:51.933602Z","alert_count":0,"request_count":1,"received_data":18104,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/pm_fp.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bade26bbd84b22c2f64d22de6e83cdae","sha1":"abaaeba91d06c4ea36b505dabbcdb0ea8d8fe5a7","sha256":"f70fb9db44b518c9b2cf697ed6eb32efd82141f45d612f1ee480eb9de338a859","sha512":"18aa96b211b41fea5b9d4b168d345969836abd4ed965a0f7a4b18d1883668329c666231b7fbc6aa54026f2619947909e0667f7e156090c5c88c72f299ac443ea","ssdeep":"384:Gxg5Vr6vihwc4hQN8+NiKIbcdXcWicEhcu/LLxWcn9C/n2ipGf/0:2Sl6rA8+UumqScu/LLxWfn2ipGf/0","tlshash":"27a2c4667b4e2154a5b32301c5355944debed92341b0a0f8f49e81a9bfb182c83bdff9","size":22503,"data":"","first_seen":"2024-10-21T23:44:43.840788Z","last_seen":"2026-04-01T18:09:23.834478Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/viewport.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae2b6552b4037cfbce95527226b46d5","sha1":"36938c6c8a1a7c6609086a94e1470fe644de2024","sha256":"e2bc669f0b7ef507ff771bd5f7fb4dabdbcedcff21a7828427ec5251afd9c1c1","sha512":"63a3083ece9490db7299d75c21a696d861cf8aca88c6434ba574491d4c34de4b9aeb618c096d02e057b782666b13d3c291417ad80d0fdb663b3eebcb94ade393","ssdeep":"","tlshash":"9041ebbb365f037d47567393953d7a4c9e3ed8b49303a8a94ce89aa4acd4d0805b0adc","size":2001,"data":"","first_seen":"2024-10-21T23:44:43.847694Z","last_seen":"2026-04-01T18:09:23.850628Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/jquery-1.9.1.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-09T01:44:34.273694Z","times_seen":61237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/modules.a3cb6dcf71aec7e1a87f.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdd51ca37556691bfff08a535ef9d190","sha1":"c2fc9cfc3a1bcb9b3626fa277ad7279a466b70f4","sha256":"14901beab79cc1b41cf121cda226068ddfc4a1e2330c69301ab7b1276c74c255","sha512":"889c6251b701a8b28133feeb9a8d2b833f1ccf8b072e5781525db7421a1b3cbd351e27b3004887a38ba14b1492c484d69b2d81f1d9255664665167b00a20065b","ssdeep":"3072:WRwvwE/muMwkZTi8hnp0hEloTUSTJYScYy:WRwvwX+ku85gEyoSdlcYy","tlshash":"b134f9ac76c6b0ba13b72079903fb10ab3371459680d8060e229d9d47d7da9f9723f6d","size":230700,"data":"","first_seen":"2025-07-23T14:16:39.072509Z","last_seen":"2025-08-11T19:33:52.122594Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/web-vitals/dist/web-vitals.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4417e90475391f43aef8c671ace1dd66","sha1":"41e923a60d4be5c60a7ff8d77390cac2ee4ade94","sha256":"8890ec954757ea8e4801f49958afb76e2b8837c47fec5b16598fc20cbd49c220","sha512":"cf0ccf28f30742e01cea3d3d4c8be7a449ae0d43443f60b9e00a5838e999dd1564f9512843881617cde3130703337eebe1c7a282995bdf138e3e2ea9a061c7cd","ssdeep":"96:wsNQxMqI3XzCVZ/40g5hNKs5vYrk/LMd1sjSyJiy8uy/xW6JCy8fDEPJ2DPCrc4q:wwnzCVRUKGNLMdOjS+i+y5W/57EPJqkC","tlshash":"23c1a9b16a42253c33aec6ebf0b052537b3a56d4750644cda13d6f821c278c236abb79","size":5886,"data":"","first_seen":"2025-07-31T21:27:02.526251Z","last_seen":"2026-03-30T00:31:59.089019Z","times_seen":4306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/bpopup-0.10.0.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d614e2fd3d2b07b3af01b12c74b02d35","sha1":"140c49951f8ea91b787fe9c1e7f25c24f42c0de0","sha256":"b55047bf9b91990cbfecc4306349fa33f33822579f26212451fc4faa98437da7","sha512":"2ae264cc91a8902fcbbec3175c1e41b7dd8e5a63bf419a073224715b962374e4f346415799c1af50c452afeebe2f81a847cfbe83c096961b4df24f321729404a","ssdeep":"96:2ST49XdKraoCHGqTdVTU4WAima2XLGjmuSurc6po4OIm16OHg1/:u9Xd1eqBVY9zx2XCjJSuIqfmEzZ","tlshash":"1bb185157a6e352991ebf33e40cf860b127163627f434921b0e4e9d82cb2b64766bf4c","size":5436,"data":"","first_seen":"2024-10-21T23:44:43.866292Z","last_seen":"2026-01-31T20:08:09.213918Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2651856.js?sv=7","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"059f3922ea7bc863e99dec2bd307dcb6","sha1":"aec10ff540c2e4e5a2249cc46c712b0f53d84445","sha256":"69fb65ecd8d6249c74ccf577453df3daa7a88ec1d5e8459b7f5daad8fc0bde86","sha512":"a94efb1ff41bccbe622229e9a1bec6b7c02d574772b55e18c9bcd398068a3eaa7d86ae742a5cbe5eedbdd6d3d80750b48321b20674a7b31a549dfbbe9c9e3675","ssdeep":"384:8KYR1gsbnOPZkOrQ9LvbDE6bLCDOyCE5zbC62:JYb0rGbDEaCDaCn2","tlshash":"bf72d688f199b0b886e76416c47f7707b23d291720489484e29ac1d479afddf9332b7b","size":17472,"data":"","first_seen":"2025-08-08T13:08:10.047391Z","last_seen":"2025-08-08T13:08:10.047391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"eval","is_inline":false,"md5":"55691ae4ec8f74affc9f6983bdcb0f55","sha1":"4636f8ecc84595b07490c05509892a2fef395077","sha256":"f02d14f130856704d7d4dc8f9c974d857a5a55199c57d2e731c5f66e9a981c3e","sha512":"e7742041a400006d429eaa83b5df228f9462c7337bb07a4f09a3f62a8458ae2c1591146f95d3717329c6d18f300778e54e63fdd3ff4a73f502ec5b9adc620ef9","ssdeep":"","tlshash":"7c71d02ef413376ac0afb12c6bf5972436391da956091c193d0f4ba813dea3417a93f9","size":3521,"data":"","first_seen":"2023-03-07T01:27:02Z","last_seen":"2026-03-26T14:12:13.469861Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/7.5f000cafeed9b3b29059.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7257cfe8ee4cca1fbadcc1f7a8750bf9","sha1":"c09038f8ef5bd2b25ef27e8fe048896ad7be039f","sha256":"8c846cbcf5cc95505d0ea24b569f612c179c70b5ba6d4a6bf48ea8d874ddaca1","sha512":"b4b688bb38adc7d0049f9191751b0eb6efcbf566ceee127064a18e138f75accab077be86d76a7dfed61dd7794a641e3318d6470e2d57d3e47caa67af335df376","ssdeep":"","tlshash":"ee51225df0e6a5a405f734a412bf3783f22b903e211914c43b5da2a07b74587963a7fa","size":2898,"data":"","first_seen":"2024-08-20T08:35:49.725325Z","last_seen":"2026-01-31T20:08:09.176798Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/1.5f4f8c3e3982904758f5.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54fdd0e641fa59cc000995a7b4e10412","sha1":"72962cba601369b35ea138693fc62e062b9c3a23","sha256":"a0fde5842f87cb883a7539d2c9222add8d2204fec2bd98a8ce2a489c00b8ecfb","sha512":"a16a2ce3c7b71ef5758bbe1b4518cd61a456728299a7e06c057dd75134735dc321eeae1718f1bf3a5015533b8028542ce4550cc0a57022ff49e8190fb80878e8","ssdeep":"768:4xDrTKABAYAcyCIANmtE0VX85u5y8DiAhAXmtEEn5Xf8a9rihsvgrfSa9wtvfVac:4VTKABAYAcyCIANi60iAhAXqdvEsvvaw","tlshash":"efd2a697b786fa5400cb3062947f17d765362039114192b2dc06c4e8a6bfcb4e36bfab","size":29688,"data":"","first_seen":"2024-08-20T08:35:49.726648Z","last_seen":"2026-01-31T20:08:09.177645Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f7d5743562dfff8608fdabe8577af1b","sha1":"86aa87371c56d712f5845cefac602e5e476ba504","sha256":"a84dfd3d2639e33e0473a487fba8a7a86d6799c27e766342b675ace5ebdd5f96","sha512":"e4281766de739f6ada7d78c68a8bd05d90b9ea1fe18e2d6ef58e957c83ce3769eeb98896ef61fc820d278f7e09d74e7cae03b6b5488c1766b5f217ff0dd50a71","ssdeep":"","tlshash":"ace028c774550cb176dd46f533b1a5247143230cb40d5c22cdfdc814653458748174cc","size":341,"data":"","first_seen":"2023-03-07T22:06:26Z","last_seen":"2026-01-31T20:08:09.230426Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.beta.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d68d726db82c099d64929072ff5c7c","sha1":"e2decfcce41eb9b41179beb118057af83e3de17f","sha256":"40275adcd50ab16d5f98f8bb6680cf80c89484ad400cc117bf516ddbbaccf266","sha512":"afb9a351b79c397d9b4d901b0c16d4822bf2b6d9d90b2b09f7b58402effdf9ce1e66963ad9d0760e56b9d3cac00f65a7b91355939e207eb0aae5a7010ae18d43","ssdeep":"768:f8XGPoIqKIW3C2EndxOT9PzG47WUwc41ldh7vQpdxJYXC2TGVDrC9txNl8zlJ:f8XGcs9tzjqf7vafJY1TKC9txN6/","tlshash":"f033c5d872c3b02647a774a5447f114af23eae55a85c9860d012f8953cbca4fd27bebc","size":50618,"data":"","first_seen":"2025-08-08T08:41:07.676759Z","last_seen":"2025-08-08T18:30:33.064912Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/search-script.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4c0db0cb71deb84e9922cafd5b55657","sha1":"3b04b4c44665424b65a3961831349900d9666f25","sha256":"0b8d1d69c2b0073ea20dc440b46983538b90dd338b8954dd4e5c1aca0c4e7af4","sha512":"f105374fa247f875e9efef88814da235f8da93f0d40d2ff43cf31639323994e78d119268d0525633b8baef9d0877e9b253db32c90f83141c0750bf5375e784ab","ssdeep":"3072:sVt0GmodRqC6LetbWLlxaJYYo5XX1aCSTGbvsDozeSa82iX9aFHxTixDDiVqSbrQ:sAGXFQ2fzd+UfayBU08xzeqwM","tlshash":"2f243aae7114d63e03fb505cf0eb3695ba79a86ce609006c749cddc62769d0a632f7b0","size":221383,"data":"","first_seen":"2024-02-20T05:37:48Z","last_seen":"2026-01-31T20:08:09.178228Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/otSDKStub.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18b357811c039616eb24f0baa46360e","sha1":"7ef528148c7fa2df751baa512f8ea24c84a7c19a","sha256":"5be2dfa172d505acb197760b55c4731347cc239a7a046013c251948bb8214dbc","sha512":"f9498e8904ab5f3bd1d4ff6506007acce1e0a0ec989e3cab9801cb5a3020a0bc3504260b0a97bc90b4ea1f07e66d58916070c5ec0cdcea23d36ba17fc5277284","ssdeep":"384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+xITxMcvn9LuJPvV/:T8wAD5ABwXw+krfflyxUx3n96/","tlshash":"5692f789b100ef3406c3619d5a37e34e3736755d3886d068b899dce0657dd8b3623bb5","size":21100,"data":"","first_seen":"2024-02-10T08:48:07Z","last_seen":"2026-03-23T13:23:46.641472Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad683b31b491c832961a75af0107995","sha1":"c5f4159254a5082b1a055d50075bfd508742f502","sha256":"62a07046ca29fe71c87f3145e4bd9f684d09bc737d616b2df7f021e2458c7b9f","sha512":"24bd253e475932bd77506c7c8ca0d3531faf3ad3ebefb965f4c2e8c3aafb54ed63470ebde7e7f787bf4de0131086d3c46a9cb40f69a8fe8c7cc99debd4e20423","ssdeep":"","tlshash":"f0e0c2abaa494a3077c101daa1f7e24df06b116a1919f092d0cac856612cee8783ba5c","size":308,"data":"","first_seen":"2023-09-19T15:28:21Z","last_seen":"2026-01-31T20:08:09.229162Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_cTsTcEDc1rc1Tnw","fqdn":"znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d8255cf380b086d9849e7ab5526fffe","sha1":"8bea3cca1f0539985761ad2712bc602d53b7e33c","sha256":"b7dc524cd0c3115074da9d532ca8771dcf0e028a966ed4f6e189c06580d865c8","sha512":"ef6269cf644b9aceafebea80163710402ebafc2e18f513c32d6507424b2937edb7d1eddb410fa9c4bafb52ac2e2668c9426ef49caa5f0c39f9aa882113054349","ssdeep":"192:pIUBupNuxaKxbaqva60aJlbtOZCTbKTPsGDzY037PKMull7s:0ulBx7bSCTbKTPsGDzPLPKMu8","tlshash":"f502e9ef76c47d7e02c114e8c53f7141ba2e07aa191da4e1b64ce1612b74aea4227ff0","size":8825,"data":"","first_seen":"2025-07-24T14:15:18.492066Z","last_seen":"2025-08-12T12:37:30.088243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/8.4adfaf62a9bbf2d72d65.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=maika-redaction.com","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40921b796c6765f50ac1581b6b7894f5","sha1":"ab847b42df93178b9c3f59d2cf8cae6aac39007f","sha256":"91db95492628d9a7223abc097f2390b35db18fd7e4434789b602c9c85c71e4fa","sha512":"f4078b334f71f18004946b8dc297a34385ca1089e779de81d5000e9ac6939fcf9e161af430aa63ad7d9852fe92a1b9dedb5eb7e0163a84179eef5d24d3b26b46","ssdeep":"1536:4SczZmfG3GwGMlOLiw41WZSayzNANA2Ak:4RgfG3GwGyH8Sayu","tlshash":"0e8308cfb249b03982932575d13f7216b6372578340e40a8e44ad2d479badafd223bf5","size":86013,"data":"","first_seen":"2025-07-16T17:59:54.79023Z","last_seen":"2025-08-14T20:39:29.947621Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/1.cba293a2ce32b62fd12d.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"499de169670194a0fa19c79398b52644","sha1":"dd2f20b40c7d0ec7f930362c8bebc66e8f467896","sha256":"649edc3e8e1df99c95de91045493d98afd12eb1368619a5de1853783a2a8651b","sha512":"b7cbdca7a6185c4528f5f2a10b718702da7f5534567ebfedd991ca8eadcd724069b5d591f7571f02a8efe93d0e0c8988a53ef16a8f51e407b89400123acb8aaf","ssdeep":"768:4UWrTKABAYAcyxrIA8mtEL8X85u5y8DiAhA0mtEfn5Xfka9rihsvgrfSa9wtvfVF:4RTKABAYAcyNIA8pV0iAhA09dHEsvva0","tlshash":"e8d2a797b786f65400cb3062947f17d765362039114192b2ec06d4e8a6bfcb4e36bfab","size":29785,"data":"","first_seen":"2025-07-16T17:59:54.694809Z","last_seen":"2025-08-14T20:39:29.949651Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7083c9ce7d1a1a7efdbd6c21e56ef68f","sha1":"a94d0df5371424d0c00e57b8cf6aa5d2404b72ba","sha256":"3cc526c4456816f958583d3d70c99c2fef5dcbae92e6f5c134b6993c8dc108a4","sha512":"e634eff4ae2ae4b4955b13cdb2ab51a54dd951a6048ce236a08e8193ea640c2abbe7e12936717feccfe9a4865cad7c5885f274237f08530207feb1b3ae43266a","ssdeep":"768:4lg9tyqHoPcYSzpen3JY74fq12KQcCh2GbjynzSJCcZa:4luT8olR73qg","tlshash":"b953d7c9f691b4e942e7b1f1407f960ef17aa824b45a99c0d16ad5d0bcb884e8137f3c","size":65276,"data":"","first_seen":"2024-10-21T23:44:43.993781Z","last_seen":"2026-01-31T20:08:09.182437Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bf37358e012c4691217027f6b145983","sha1":"1de1ab1279c1d4a62d0d689782865816c7376fac","sha256":"e12d7e885427fc7cc9c6f54adcb51194be0876a94ab1fca7d9e282b0b7b439e8","sha512":"a981f6721671a1fbb760b847a1e2077b34ed1d2dc8cd135a7a0106fbcdece792ad57eccf178eb0efa4fc301035f7687232558085c5bf14231c44ed4b209e667e","ssdeep":"1536:47mmxxHCbkp+ugJzNDor4bMoAXJBZa1PqyulHBcHH/R7XcZ5zK090MuDKq:4vibNutw3R7XizKm0MQ","tlshash":"a7a3e79db282b96943e37175517f2306f13b11b4258d00a8b929c1c1bd7a98be237ff9","size":103878,"data":"","first_seen":"2024-08-20T08:35:49.724153Z","last_seen":"2026-01-31T20:08:09.211843Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"75ac50bcbf37ad484bb8bc5e6ba43c5e","sha1":"a8b80e4292bbb55932b942e38f3cecac92337065","sha256":"34f343ea72d44da5d751dcd6a2cdbba8eb33bfef87dfc05f60d4b6203e910291","sha512":"def79a967fe9ca9b7bf4467d1c922eee796b77c6f61fda567200535149db23d8a2714b74b120a1032c92e0e15b6a2f62bc617f122862c1b37413a3cc024f2854","ssdeep":"","tlshash":"0f0128bf12957b2ca64192c0387dda45dca70baa3cc4d4cc607d2831c828a4f9b3641b","size":684,"data":"","first_seen":"2023-09-19T15:28:21Z","last_seen":"2026-03-26T14:12:13.496387Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"15a9bf11efd4ef888fb903316790fd8e","sha1":"6dc159518e748943cc35a8ac045ad82bd42c8636","sha256":"c8518d6e8403036f781f8b4a94c943076ec6d35f74d0bc2c782024acfea8438f","sha512":"49fa49a0ea7bffb0cd2824606ab13ec132de906fbe15d229cfca6464287d2718e18d64d2e1ed50c2eb7aae205d17c1313af2ca3e3fec5a10659efe3e09067768","ssdeep":"","tlshash":"b3d02b80d27879af40345979f19abff06372848df0909d2caabc31cc11a449c1b3a210","size":271,"data":"","first_seen":"2023-03-08T07:10:38Z","last_seen":"2026-01-31T20:08:09.231398Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.beta.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d68d726db82c099d64929072ff5c7c","sha1":"e2decfcce41eb9b41179beb118057af83e3de17f","sha256":"40275adcd50ab16d5f98f8bb6680cf80c89484ad400cc117bf516ddbbaccf266","sha512":"afb9a351b79c397d9b4d901b0c16d4822bf2b6d9d90b2b09f7b58402effdf9ce1e66963ad9d0760e56b9d3cac00f65a7b91355939e207eb0aae5a7010ae18d43","ssdeep":"768:f8XGPoIqKIW3C2EndxOT9PzG47WUwc41ldh7vQpdxJYXC2TGVDrC9txNl8zlJ:f8XGcs9tzjqf7vafJY1TKC9txN6/","tlshash":"f033c5d872c3b02647a774a5447f114af23eae55a85c9860d012f8953cbca4fd27bebc","size":50618,"data":"","first_seen":"2025-08-08T08:41:07.676759Z","last_seen":"2025-08-08T18:30:33.064912Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pi.pardot.com/pd.js","fqdn":"pi.pardot.com","domain":"pardot.com","tld":"com"},"ip":{"addr":"54.156.13.80","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c0335550002dc4c4db0de1d9dcf043d","sha1":"0bd0357faa46e9ff78d939b196d43ed47c701160","sha256":"41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136","sha512":"449683e6a927848f403214c49705a91d54a880d4da605f2e7b3fc52bf178c7475ca6131fad823a6aead84a1eb4a3e0501b122900c97241ce620ab45330861f12","ssdeep":"96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8","tlshash":"70c16498fd94d4b6417b059930bfd6bcb23c57b1340d9150d2b8cab4346cd322b92e6d","size":5620,"data":"","first_seen":"2023-04-14T17:45:12Z","last_seen":"2026-04-09T01:09:14.713391Z","times_seen":10784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"120877b10a4af5332f8742c5a7762bef","sha1":"bac79b4fe74cd5439a0ab1618af253de70d02d40","sha256":"4e183fc4cdfffadd50cd75bce5c7c9be1cd9f81dab24d8795b1f1bdf5b538861","sha512":"7dd4144843aa72065b526c2c93c27a170d1c281fd12573a6a7d5345a235759a0d0658d13ebf9643cce2eb3fff5852b2e952833942bb49e3d1164d3f3faaa03f7","ssdeep":"1536:44amxiXKjgOi9+uaJzNDor4bMogpJBZa1PqyulHBkHHyR6k5zK09UMuiKq:4pogO1ufcsR6EzKmUMd","tlshash":"cda3e79db2c2b96943e37174517f2306f13b11b4258d00a8b929c1d1bd6a98be237ff9","size":104560,"data":"","first_seen":"2025-07-16T17:59:54.79117Z","last_seen":"2025-08-14T20:39:29.948242Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/helper.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"142b68ffef2c58c75c3e928de94f6eb4","sha1":"f8bc1fc827e62b9aae72a4ec656089fc170ebdd7","sha256":"c69aee89540f62119a3f238ce99a2a5d11bf3d1fda7476e4726f7b2f457431f8","sha512":"60351bb64cffd867884acc4d58c9ca1c12ecb402b29265be31bf2a2008c407c0f26df12da40c5f77f901069beab23e523dfe8d9ee336bda65f14b8eab3920dde","ssdeep":"192:yULdNBrldeKYi22N6NHO0sbY+ISlHd3ll2/iQsWs+/EeE:rJ/PYd2N6Nu0sE+XHW6QsC/EeE","tlshash":"e9622e59224921b1893b772aab5bb208ff3240fb160196c4bd5c8fd82f7092516e9fdd","size":15267,"data":"","first_seen":"2024-10-21T23:44:43.860563Z","last_seen":"2026-01-31T20:08:09.167015Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/typeahead.bundle.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a08fa0281a5f658b731f8850761455a","sha1":"dc7d03cbe269ff69f3e51d678a27c665bd2ea426","sha256":"47f3e568e98dcede576220692a11b6987954da32bef0da8b49c58103d284071c","sha512":"4eb270c134d1a7d7e50a150012930a5053ac38bcb569c5ff127920989dd5830d5024865d19d3e5f8213d733c58b8c651e222054d498d9f4f47e84fab3f277442","ssdeep":"384:NFp+L/Flc+lVZF9ro5Yssl2cHlQMSFE+3Wkv5jTnZzhjwcX/45Mr1XUPanJTkzkD:lqvc+lVZb0cHlQMSz3WkxjTRV/4A1X3","tlshash":"41d295c9f2d2b54256676074d0bf1107613b68a9b80c882cb97998d5be78e0d2337f7d","size":29667,"data":"","first_seen":"2023-03-07T01:24:15Z","last_seen":"2026-03-26T14:12:13.390546Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b23373eee11488cb1d9988720f4229","sha1":"056156cd926cd3e7f32ce0ab458b0d0c42020396","sha256":"cd8d68ea85035b22f983202bc69162920ef089fb4683e042daaf7f2821f00ad3","sha512":"6dff15d725ebf020286fda90515be18f3b1967f766372f7050d7428fde063ff2e44ddae30ebd9769a9dee86bac795832f215c631fbd69fa13ff819334c259604","ssdeep":"384:8Tg8XNbpLxCtduhA5SNYbGr1Uci0FPvfC5mC1X2cHKpQinGHKJxEV88y:agKFLxVhA5SNGsUci0tDCZ1gyy","tlshash":"4dc208ddb140fe3446c3a19c9a3be25a723b756d34869164b8a4ece0247cc4f6633bb5","size":25884,"data":"","first_seen":"2025-08-04T14:43:06.487641Z","last_seen":"2026-04-06T20:49:33.247823Z","times_seen":5819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TGPDH6G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8890e2218a9196c10f6cf306797b200","sha1":"cacbf3b6e6043b1db967f418f675e0e1c122eb32","sha256":"3bb9139577c36524d78e997c788705062beffe9202b2ba11124aea9e09971ef5","sha512":"56c4592b45a5caff7d5eb9c71d14653f2e7de56b3f416eff35915c8d4375dde88f74ef0f9ae48cf48198de2d279654e2564ec47b90547ada18844f476fc16e63","ssdeep":"6144:Dl0aW69Wf25cxT2X4dpLSAyev+OE5GT2PG6B4xwhSdZN:h052ATbZlQmwI","tlshash":"7ac408cdb385747ac3a6a575803f054a653e24f3b58ca850f099c8e42e7457e2263fbe","size":561182,"data":"","first_seen":"2025-08-08T13:08:10.10271Z","last_seen":"2025-08-08T13:08:10.10271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"eval","is_inline":false,"md5":"340f48a373c9fd26c14396653799dc9d","sha1":"96e88ac2fb5ca282746eb3874e38501536ac3e0e","sha256":"959e8df019462170de10ef1d07db6c3cb07560666dcc6d64d32bd8f8cb4ca413","sha512":"fbe0e6a558da4d4981364cbda29510af4d8e0ffc064eed1198103ee99fb258e13948bfce9a4208f79204b9b052fd34d44d99eefc87646b41daf3690268185432","ssdeep":"","tlshash":"f1b09215f926a7d2e7631b6427ba820d4f29a9e84a0c882494de9ea8162014b9318b02","size":124,"data":"","first_seen":"2024-08-07T04:22:37Z","last_seen":"2026-03-26T14:12:13.444535Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/jquery.selectbox-0.2.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d011226357499db727cdf313faa05859","sha1":"a5d181f45a81db9a6e892e6d9244f361cbd81951","sha256":"6fa4c9f68e9b5b06234e16b32ff959da7b13da29c5cdfd1be1a81b83587f180e","sha512":"ea7c1b7dcbc4e8a94e3eb771cdac59a49ae90d165d9b973574834865ae0e204b42fee0e7cc6d34a567afa24c087d272eb75e19762641249b80238da69f0e7d6d","ssdeep":"96:LGO/bWP6dQd25HGvBNve3CBWteIqY4SXl4MGwOiMW7MjWGsk+N:9bEdCGvDvcCBWtRnm+zQqU8","tlshash":"e7f1b349308431b500ffb07b54be275aa6b149fcc180d024a8b1e2ada9b95c56277fbf","size":8114,"data":"","first_seen":"2024-10-21T23:44:43.863242Z","last_seen":"2026-01-31T20:08:09.218566Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d1e2f592556532590546d5a0efdea33","sha1":"70eb5939ba906b0dec772693300c068ac97062e2","sha256":"393e7ba69383b11440e5010e017d7b6ffd04c8dc379a74195e07baf3a0945fd1","sha512":"68277e3abcb920ec67fedf29aee2adf73b514de635d93689cf99e1e7718ec56844bcf681a25b3e15904db603bc2c99c34b7a506ec176a7401b092b1b530411d4","ssdeep":"1536:4gzeMUtn2dSWjDHYrX68dgdBYHAX1LTag2MfiWFE04tziCxJg3O4lYrWb30FjpnO:4IeMVjDHY28tHAsJtJ3H0gZta7","tlshash":"b1a31788b642b4ea47eb30f9503f460ab13a6428b10a95d5f9acd5d56bb8c4e4073f7c","size":107356,"data":"","first_seen":"2025-07-16T17:59:54.812789Z","last_seen":"2025-08-14T17:33:04.584605Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9884b15a5a2019aa8caa3f9c65471dc8","sha1":"07dcfac9bb489e124420bf8b3aa92d5b1c443539","sha256":"9425520ff17098ace2d51bb026d8db9cef803ac1aca34f32a676f40e3ae90f01","sha512":"8171d49bd71653177f13b10c2f5a160b58b685057ec6ceaa874c46c75501b82dca6411ca6b9d39e95a8384233d25d6ddef3093f158efded28610ecc1a18c5f0a","ssdeep":"","tlshash":"383110a8324ab63b13813839692f6c80f03e375a383c08e9d45199d22d25a4bb09e774","size":1517,"data":"","first_seen":"2025-08-06T09:13:50.384538Z","last_seen":"2025-11-16T03:12:44.591229Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/main.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f60003644cc5c8f7c2660bd58433fe","sha1":"f42a9db5186e7e61e007cb7bbf2ab17d9d6d11e9","sha256":"84e48b945f7a402015726fa2357362c6d169b1bcc293b92bb1ced235bb50791b","sha512":"93875468ef19951822c7bbf6a8a3fde8dda3e074e9fb514af336b018e050154810fd95c7df72c3fb2689125a58e54015df48112174a0e444749e03162db8b73b","ssdeep":"96:70PWPWH8tfdoH3lR4sbp4PwgRTtiUCGmtuWsFMS7mvbW5WBLLTwu5B:QPW+H8RS37yPwgRTtiU4q7wK6LLTD5B","tlshash":"0ef1845cf67ca0b201ff362b111f59011573acb7db468a20b46749e45ef8e5819b3f29","size":7836,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-03-26T14:12:13.401713Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9884b15a5a2019aa8caa3f9c65471dc8","sha1":"07dcfac9bb489e124420bf8b3aa92d5b1c443539","sha256":"9425520ff17098ace2d51bb026d8db9cef803ac1aca34f32a676f40e3ae90f01","sha512":"8171d49bd71653177f13b10c2f5a160b58b685057ec6ceaa874c46c75501b82dca6411ca6b9d39e95a8384233d25d6ddef3093f158efded28610ecc1a18c5f0a","ssdeep":"","tlshash":"383110a8324ab63b13813839692f6c80f03e375a383c08e9d45199d22d25a4bb09e774","size":1517,"data":"","first_seen":"2025-08-06T09:13:50.384538Z","last_seen":"2025-11-16T03:12:44.591229Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a27d41a8be586dbadef2b237daba6fce","sha1":"7b9ac5f4f14b0be90dc89db29181dc26cdbb253c","sha256":"3fcfee7253ba6f04f48f0267dd8eb8273c5e34df17040c68866ddba9d3c998f2","sha512":"a50ea046894f876fd40c68c16765a69a1d5db978ddccf42b5b8c38fc758d3025ab24efc78f8d3855803cdae38c592157ab9b820ec308cbf33fdb36ac39bba151","ssdeep":"","tlshash":"bef0822f22197a2861e152d53dae8e85dcbb0f9535c4f44c54392d74c968f9b8b32c63","size":441,"data":"","first_seen":"2024-10-21T23:44:43.984982Z","last_seen":"2026-01-31T20:08:09.232383Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6bd1ce1ff27fbd31c6a202980249271","sha1":"5244009b853f3d466e287ab834e3d9cb10230f9e","sha256":"534507f3a64385206ab0c990082e1b2379e87af8f75bb3096e1de1cafbe92aa2","sha512":"c6d488d06f3e35897ef1db052d772a9896b5b003af7b6315265ff5988188a12414a52005c7fa59452064d20e34cf617d1f11dd4be9eefc10c099fc640b3a4762","ssdeep":"","tlshash":"58e02618e7ac090726af2109280b4b6c3177643ad2034842bbb4725e0ce690214c889a","size":343,"data":"","first_seen":"2024-10-21T23:44:43.987922Z","last_seen":"2026-01-31T20:08:09.233836Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"651c4f8a71b74bda9981fcf9690335b8","sha1":"9cc0b2b7a15113a715d9e621d14c2cfbdbfbbe85","sha256":"8ab723a00388d5796de52b4e3895d44ff3dad2219054a5eafe70296251e15369","sha512":"fd44645a89a9a052c5fc42a9723719f0a5cd1f08e634713e501bb471be6b52d7b18361363bba43ea7ac263ae918fc94592599dc208e645c28574a3565eebc598","ssdeep":"","tlshash":"bce028ccf3407438076631e34b1fb3457130f031bd0214501165045c26dde1f00634d7","size":336,"data":"","first_seen":"2025-06-11T11:19:41.599588Z","last_seen":"2026-03-26T14:12:13.465574Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e749c73ed7181f62b4b7e70847c897cf","sha1":"2f8660adb42a3ce0448b77b95cd4520066b4a309","sha256":"c1602459cb99bbbeb45dd205a5c2612dad6494777630b98bb49a27d0b03e1ae2","sha512":"a72541c7d8cea311870803d29c24859e9f2dd555a988de9d40027c8fd8696ea012267a462220a3af41c388ca682f74e6bca0b105e2466dcf668383f2857b4f46","ssdeep":"","tlshash":"9e2165e8b7561f38c151918c12bfa34574f525246c84b4cdf899d8c0f158eaf11abe75","size":1257,"data":"","first_seen":"2023-03-07T01:27:02Z","last_seen":"2026-03-26T14:12:13.49725Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/bootstrap_custom.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2d738fc9039f713dac809642eb8784a","sha1":"cf913245a85a5782bb16cdd3f74f8be6971b6a9f","sha256":"7cb7d45abdb6a6b76a257b2065c376ebd1bdb616549796a226672c0efe26712f","sha512":"6fd4921723c25b6bcc5f980a248465882f5e7211f13a9f5f2d3c366605819e48da39356461dc1f4d555edc6d661d34af0fdf9bbcdf6ec942bec69f2b65a12cf8","ssdeep":"384:4RA/0rv3LG8YKWubYXWI+0Y+sVR22UrC7/LF9:4RA/0rv3LG8Eu0XS0+R2ozF9","tlshash":"13528646b361326083dbf2b1015f010db23aab7cea86915c3d64dae27c72c487527f7a","size":14003,"data":"","first_seen":"2024-10-21T23:44:43.853961Z","last_seen":"2026-01-31T20:08:09.198968Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/OtAutoBlock.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b2bf79bd2a1affea2dec51f50e025ec","sha1":"af564f312a8814c262abe79164cfe3f1fe3a6053","sha256":"1b1852f52af150cc8a56f34dc02793ad80ff6e65d025b107e7a687a3c6c91f61","sha512":"b25644221828cf08b29a29010429fb4207e8d7530c34c9ec07c3c9c1ee7534f0ab827a9a8776dc091b0fb90443c465a42096ad1a965b39d9aca8948e66ef54f7","ssdeep":"384:km+TKVDUhFvAcmDIZ8FxlljnHr/7xcsDy1uV:kLTKVDUvsC8PnnJQuV","tlshash":"29b29d9e47dc9ced1b192e906456b20cadcfb44f4bc3ece1a01ccea497e99b19015a2d","size":25210,"data":"","first_seen":"2023-12-18T18:22:55Z","last_seen":"2026-01-31T20:08:09.206408Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b367dd02e41abc8dbc0190dcb35ff61","sha1":"5e24ba41be5efe4af6dd970e101bc24acea46a7c","sha256":"22031038e39e75078c3c197b952ade3153e626f53ad9b73a97c1dcb065e76d67","sha512":"a8abcc2bd065c98b23275e49e9a2edebe8e29c0eb5fbc80edea29bec8cd3893494b80c15a88a4865a6224be9c01dbfe12da9e58d46c3a5e8a65e6d5389cb25ec","ssdeep":"","tlshash":"1f80008aa0203200800228fc80ab0a28b022302aaf22a03c2088a08b0aab0200b028cc","size":28,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-04-09T01:10:12.969263Z","times_seen":16902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/aob-search.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"41aadafc0c79b10eb389ea2924865914","sha1":"b0370682143b2c443df24ca9aa9ee8e6d3f64df0","sha256":"e2dc701dd8b23048c0e3b2483583dda42b19f10f9b1c35ce2a60312742734d11","sha512":"f0f47d95fcacf22d9a367c0f6b89fcea9ad767a8013ae2705200ea6cd46b9947aa4275197496e31fceb323bc50578c3eb0cf91c75c0bd4d1ab37f4fcf4b9e816","ssdeep":"96:+7d54bx8WoeXjGOKeAqn8WFHpjG6vFHg+NSfFaPbzn:+34dpHtvFAAbzn","tlshash":"10126f55371d98c651a8422f443f9800dd2ce177a20d4462fcbeaf45fff990863d9ab6","size":9081,"data":"","first_seen":"2024-10-21T23:44:43.850643Z","last_seen":"2026-04-01T18:09:23.824482Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b367dd02e41abc8dbc0190dcb35ff61","sha1":"5e24ba41be5efe4af6dd970e101bc24acea46a7c","sha256":"22031038e39e75078c3c197b952ade3153e626f53ad9b73a97c1dcb065e76d67","sha512":"a8abcc2bd065c98b23275e49e9a2edebe8e29c0eb5fbc80edea29bec8cd3893494b80c15a88a4865a6224be9c01dbfe12da9e58d46c3a5e8a65e6d5389cb25ec","ssdeep":"","tlshash":"1f80008aa0203200800228fc80ab0a28b022302aaf22a03c2088a08b0aab0200b028cc","size":28,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-04-09T01:10:12.969263Z","times_seen":16902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee5f9431b3b6b995ba4045809475d34f","sha1":"7ee903f05b25e985dc970dbccc702fa54cb45d56","sha256":"54aa3b884032a8d933bc22cc9438a2883a1e5ec40f38ea0d2735315248a67210","sha512":"b615efe4d6ea77f58be5f6c0b8614fb5cf2b72f2f6a4788de5adeffb0bc91fcb3221924b38697768ccffb8ce004915705759955590c8c80538fcd3b5caad9b98","ssdeep":"","tlshash":"08e0722aba0a4930738200eae0f3c20c70af536a8501e442c0cac440a40ceac282aa1c","size":309,"data":"","first_seen":"2024-10-21T23:44:44.000468Z","last_seen":"2026-01-31T20:08:09.236249Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f819e6a24172e252f3319d35af359c38","sha1":"977464903d9b9a0f3dfe57e89c11c6163bdf5c16","sha256":"12027c36625dfbc639cf70056668ed9dd53781c1c4961e746d6fe6f1225a9e63","sha512":"b179662943e7eff7b937a61ff926261bac1495e474a1eb65dcb4c9232edac2262e984157173f373095c150a287c6a5570bf7c332b4cd5f2d04e4804f094237e5","ssdeep":"96:Q395qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:q5TdCpFqImxZ5NvAE/9PipDwEOddh","tlshash":"0bb1a7dcf990b067ca676031883f130a733a75425459c074b27a89e5acf86ded723f69","size":5523,"data":"","first_seen":"2025-05-21T01:08:04.685151Z","last_seen":"2026-03-24T11:35:44.957206Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/5.702eb9d1cd18a1f8aee0.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ac6ced1ebc41755b6dbfd2d50eb075","sha1":"60e4390c09d77782769bcca6c985c1f4484fdb8e","sha256":"72c3f09ac50dffd3d2970b8f21dd377ecc12dbbccd84921ba287da19791df827","sha512":"19fd3ff033c38d80788ab59a8e19807d4c0e139173f56f097e68686ef9af3f09ad9bcc9f1c14812195546da740bbd309cd25c14ee6e0ffc916eec85d855e1f65","ssdeep":"","tlshash":"9b51105df0a2a5a405fa24a412bb7783f23b903e211514c43b5da2a07b74587963a7fa","size":2901,"data":"","first_seen":"2025-07-16T17:59:54.72931Z","last_seen":"2025-08-14T20:39:29.914193Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e749c73ed7181f62b4b7e70847c897cf","sha1":"2f8660adb42a3ce0448b77b95cd4520066b4a309","sha256":"c1602459cb99bbbeb45dd205a5c2612dad6494777630b98bb49a27d0b03e1ae2","sha512":"a72541c7d8cea311870803d29c24859e9f2dd555a988de9d40027c8fd8696ea012267a462220a3af41c388ca682f74e6bca0b105e2466dcf668383f2857b4f46","ssdeep":"","tlshash":"9e2165e8b7561f38c151918c12bfa34574f525246c84b4cdf899d8c0f158eaf11abe75","size":1257,"data":"","first_seen":"2023-03-07T01:27:02Z","last_seen":"2026-03-26T14:12:13.49725Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/common.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c335d77c10f484b4ca97b4412d675eae","sha1":"49137ad6fa5eea44039c10e846c40fec97574db8","sha256":"49825a22ee9e05fb6a125bbe4d158571887d62129b9df126af4f35682e1400fc","sha512":"436fcd1dbd160c491fa147a97632e8e10b78f0dfd4d371fe87686247d434bc09f163869106e35cd905618b9f74ba48fd4e6d1dd1f745cff357851b56311e8aed","ssdeep":"192:z0qRoDxMj1oUX/Ln6rzwHzNYm7jquBL7WnG8/WLE:z0qRoDxMVXznewHzSAZ8/iE","tlshash":"e022c72832a474a35afb307250af9507a571cdb799058072a092dce52dfce948b73f7a","size":10229,"data":"","first_seen":"2024-10-21T23:44:43.844063Z","last_seen":"2026-04-01T18:09:23.823468Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202307.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a3bf4c4852fc9d4e0c2cfff73f161d2","sha1":"1ee8b1e15b3f5544f92696745ae068f5c451d7d5","sha256":"71d07479f4b2b809e5769a352f4f55b84690289026ace7ed5395230002551a11","sha512":"838ca2b5ecfa64abdde59164c2157066076ddeae630c35b4b315d5d415d1c5ee1b711c25232722d246bf5101746203fb60cc62169b87779f9f684568130f6e54","ssdeep":"6144:Uvm4OU/xiO9qbYUo6ULWgWAG9wE7qAHHoaS/R8DwP33cA0s:wZ/xiO42WwE7qP/Rie","tlshash":"9994184a75a0753583e752b9c02b454eb63138adac5580acf01cc5f90bf9f861e93fab","size":414625,"data":"","first_seen":"2023-08-02T19:12:49Z","last_seen":"2026-04-08T05:51:01.956188Z","times_seen":1641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/12.93f2ca20511a668d8998.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=www.arvest.com","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2e46adbe14f1ef4552f86c8667386b7","sha1":"721eecaceba8f43429a6f82845429386675ddedc","sha256":"c17bc0015006ea96281dd68dc9d5485513eabedc8c664b36ef2f104c5d46b460","sha512":"c8e8f603556d3321d2348d6f75b431ddf5c29a9e136a3b5b16de1a2bdf7b1d6d7639ca498ba2d24231bf2eba0b082979fb9200f7fd3ec474cce3555e14f109fc","ssdeep":"1536:4bzFSt/dcNANA2AKFg6+HbZ/fYPOL4/4Z:4HFSt/d86+HbZ/APu","tlshash":"3a73f8cfb249b03942d32575d23f3206ba372578680d40a8f409d2d579ba9af9227ff5","size":75209,"data":"","first_seen":"2024-08-20T08:35:49.721626Z","last_seen":"2026-01-31T20:08:09.211183Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"182636d689412c14ee78d914a427bf51","sha1":"18fb4e70b6eb2a7d853e6f0a7b1dd9568e9d123b","sha256":"3172d4a630db6b527bcef60ad6fa5bfa51b71a5f5aba6e3d5e6daceee919abbf","sha512":"4cd09d4665b6353b958117dd441a98f9e5eeaede22da7a66cd405388180bd8b2dae0fab304b98c0b144f132f61eb10dee50c1cb984ee20e212b28d0d8fd80719","ssdeep":"","tlshash":"05c02bf825035c7002ff4b920f6f21402481331441800960080170cd2520d371084c50","size":134,"data":"","first_seen":"2024-10-21T23:44:44.003258Z","last_seen":"2026-01-31T20:08:09.236873Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GRH26TKW0W\u0026cx=c\u0026gtm=45He5861v811537095za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"329433b54ead9dc2a3209b5458a04054","sha1":"31e4b4b97fb53c0a61e6b3f77af5fecc312aa3a2","sha256":"43bd6a6bcd22e07bd81032078ed35e83ae66ebc7e0eb421be939f1d24b7c5b32","sha512":"8e9f4b96b1a04cfadae49a2e94a75039646c5e47250768e513e36bb92ca7e563d13c158f4fe090a63e179c32f0298da8dcf4a7b9e706d7852d2cd4ff64faa59c","ssdeep":"6144:+xP2NnBN8LMAyev+Ot6GT2PG6B4xdHS4rcgO:wPiBilGmd3AL","tlshash":"e6a4f8ce73c674669396f478503f01cba97b25a2b49cc8aab1c9ccf02d3459a4167f78","size":488616,"data":"","first_seen":"2025-08-08T13:08:09.987992Z","last_seen":"2025-08-08T13:08:09.987992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.licdn.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Fri, 12 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"79:D6:4B:9C:B6:FE:66:4C:08:64:D7:B0:7C:05:D9:7F:B7:5B:41:CA","sha256":"E1:E1:F9:58:9B:F3:C3:BB:E2:CE:9E:C3:F9:DC:6F:82:A3:90:3E:F7:B6:2A:30:61:AB:47:C5:14:C7:58:89:05"}}},"request":{"raw":"GET /li.lms-analytics/insight.min.js HTTP/1.1\r\nHost: snap.licdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 10:13:29 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-length: 767\r\nx-cdn-proto: HTTP2\r\nx-content-type-options: nosniff\r\nx-cdn: AKAM\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1516)","md5":"9884b15a5a2019aa8caa3f9c65471dc8","sha1":"07dcfac9bb489e124420bf8b3aa92d5b1c443539","sha256":"9425520ff17098ace2d51bb026d8db9cef803ac1aca34f32a676f40e3ae90f01","sha512":"8171d49bd71653177f13b10c2f5a160b58b685057ec6ceaa874c46c75501b82dca6411ca6b9d39e95a8384233d25d6ddef3093f158efded28610ecc1a18c5f0a","ssdeep":"","tlshash":"383110a8324ab63b13813839692f6c80f03e375a383c08e9d45199d22d25a4bb09e774","first_seen":"2025-08-06T09:13:50.384538Z","last_seen":"2025-11-16T03:12:44.591229Z","times_seen":76,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/web-vitals@5.1.0/dist/web-vitals.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 07:12:29 GMT","end":"Thu, 25 Sep 2025 08:12:28 GMT"},"fingerprint":{"sha1":"74:03:6D:4D:8D:B7:AF:5F:95:BA:97:8E:E3:FA:63:4F:20:FD:29:80","sha256":"69:54:C9:A2:F1:AD:43:49:96:12:57:59:D0:D2:97:F9:C2:07:C3:04:1D:97:3B:AD:07:2B:41:AD:FE:E3:99:2F"}}},"request":{"raw":"GET /web-vitals@5.1.0/dist/web-vitals.iife.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 96bf3d044c0eb4ff-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 640740\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 08 Aug 2026 13:07:43 GMT\r\nlast-modified: Thu, 31 Jul 2025 20:25:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:iJDslUdX6o5IAfSZWK+3biuIN8R/7FsWWY/CDL1JwiA=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K1H2HSNK8PNBZZZBF151HYK2-ord\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5886,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5885)","md5":"4417e90475391f43aef8c671ace1dd66","sha1":"41e923a60d4be5c60a7ff8d77390cac2ee4ade94","sha256":"8890ec954757ea8e4801f49958afb76e2b8837c47fec5b16598fc20cbd49c220","sha512":"cf0ccf28f30742e01cea3d3d4c8be7a449ae0d43443f60b9e00a5838e999dd1564f9512843881617cde3130703337eebe1c7a282995bdf138e3e2ea9a061c7cd","ssdeep":"96:wsNQxMqI3XzCVZ/40g5hNKs5vYrk/LMd1sjSyJiy8uy/xW6JCy8fDEPJ2DPCrc4q:wwnzCVRUKGNLMdOjS+i+y5W/57EPJqkC","tlshash":"23c1a9b16a42253c33aec6ebf0b052537b3a56d4750644cda13d6f821c278c236abb79","first_seen":"2025-07-31T21:27:02.526251Z","last_seen":"2026-03-30T00:31:59.089019Z","times_seen":4306,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/MyFontsWebfontsKit.css","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/MyFontsWebfontsKit.css HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 644\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1738,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f8f9ecdc1f918090d71f35250f298a97","sha1":"edf72bf03ad9ca0ee3d155b5e3035a0c097674f9","sha256":"0b9ef95e6810f4ea8fb771c6f98b5082f5297c18a3b9fe09f3f4acb7f1ef9753","sha512":"415ba4d6420f775e66cdc5c7a017ac66ecc21027fb6f45a019663671930b92d6f762292a9968eb9c37edb3b5f76d87f2c9e89b23023d4996ffe4e1d7269fc6ea","ssdeep":"","tlshash":"dd31cceca3dd39938a710a5c7ae99a79d8db8118500d7601b838af5c1cf942c92d0f5f","first_seen":"2024-06-20T19:33:33Z","last_seen":"2026-04-01T18:09:23.829184Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/viewport.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/viewport.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 784\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2001,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1ae2b6552b4037cfbce95527226b46d5","sha1":"36938c6c8a1a7c6609086a94e1470fe644de2024","sha256":"e2bc669f0b7ef507ff771bd5f7fb4dabdbcedcff21a7828427ec5251afd9c1c1","sha512":"63a3083ece9490db7299d75c21a696d861cf8aca88c6434ba574491d4c34de4b9aeb618c096d02e057b782666b13d3c291417ad80d0fdb663b3eebcb94ade393","ssdeep":"","tlshash":"9041ebbb365f037d47567393953d7a4c9e3ed8b49303a8a94ce89aa4acd4d0805b0adc","first_seen":"2024-10-21T23:44:43.847694Z","last_seen":"2026-04-01T18:09:23.850628Z","times_seen":12,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/twitter.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/twitter.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4020\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced","md5":"40e835c38ccfba27ff127591a858af3a","sha1":"69372daeba5fc74d8c61f03229efc4793157e156","sha256":"d7a3631bbf3cb473e49619fcb0b0857b4b37a24f11f19ae4956873648285a0a2","sha512":"26e7cb2a4a8c8cbe0477eb90ae8bd515963ef9786342df81dea4c712926ed31f2246968a6602f80df798e6891e4568a25b4e4f84821934705810899fc847775a","ssdeep":"","tlshash":"6b818f87ddd2d13d15a2133804ae07e5f95292dc4b50ba9294631a33c15fd96e8b8cc3","first_seen":"2024-05-25T03:47:28Z","last_seen":"2026-01-31T20:08:09.189524Z","times_seen":32,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/nhl.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/nhl.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1277\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 41, 8-bit/color RGB, non-interlaced","md5":"830f5671b5f424dbdec5eceef461f89c","sha1":"fda690c867fdb5a93c0011d5c164491fdeca60b9","sha256":"f4d067fab799e99b87904f659c692a443efdefb8d5eefcc98fc7db2cd5bd39cb","sha512":"5dbdc037ed2069476cb5ee34e95495d2c7f463e2a19d87765aaaba51856877a3c00866b4772e741388267f612b1b4927be26f31bfed1f23fbc85de30b36f589e","ssdeep":"","tlshash":"b721c5ca2f24503a8aa11fa4a174085afc234a1acf3d0f6460b0adb346f308a5162a6c","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.791751Z","times_seen":137,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/static/q-siteintercept/~/img/wr-dialog-close-btn-black.png","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /static/q-siteintercept/~/img/wr-dialog-close-btn-black.png HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96bf3cfd0e1256c1-OSL\r\ncache-control: public, max-age=30\r\nlocation: /static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img/wr-dialog-close-btn-black.png\r\nstatic-version: 87b1e226c58fe48d0a26070da0726c00f5a08139\r\nx-request-id: 0edee2ef-6e83-4d27-8238-283d4c760ea2\r\nx-transaction-id: d5d8a613-686a-4bd9-b5ac-49317144bdf1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 15\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-08T13:07:41.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/ HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 27936\r\nserver: OVHcloud\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"Qualtrics","description":"Qualtrics is an cloud-based platform for creating and distributing web-based surveys.","website":"https://www.qualtrics.com","common_platform_enumeration":"","icon":"Qualtrics.svg","categories":["Surveys"]},{"name":"Twitter typeahead.js","description":"","website":"https://twitter.github.io/typeahead.js","common_platform_enumeration":"","icon":"Twitter typeahead.js.png","categories":["JavaScript libraries"]}],"data":{"size":142276,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (63262), with CRLF line terminators","md5":"22c92633c08c4fbfe1b5326a22ff7b9a","sha1":"69b4a1088a1b659472b8bfa7707cb01e2ac1d191","sha256":"83ed8efe25e4c5c5087616d5328864e63fbfc50d6ca90db35adae60c55fe3c4b","sha512":"b5b08cf6c868f0d4320be5fe82b846f0a614d91719983d9c407af69f7c7fac4b42ab06ec7a70ae2cd027af84c26c85c43ad0a6a44d90222815f371704684ec05","ssdeep":"1536:7+aTWBynNZAjvdqtuxaPFKIYKBlqInBJDWnvP:Q3jF943bq","tlshash":"a1d3505b3994231fdad38709a6627a9878129c6fbe334cedf15e13394bccbe24c0550a","first_seen":"2024-10-21T23:44:43.82633Z","last_seen":"2026-01-31T20:08:09.162279Z","times_seen":10,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":53,"dns":1,"connect":22,"send":0,"wait":27,"receive":22,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com/arvest/","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"px.ads.linkedin.com/wa/","fqdn":"px.ads.linkedin.com","domain":"linkedin.com","tld":"com"},"ip":{"addr":"150.171.22.12","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linkedin.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"EA:ED:61:47:7E:F0:E7:48:47:58:C7:BA:C8:F0:07:3B:88:95:A9:72","sha256":"75:5F:4C:98:A1:71:8E:9D:EF:EA:19:C3:E1:2D:C3:20:6D:97:97:F6:93:5C:E4:8E:6F:C5:EE:91:25:20:99:9D"}}},"request":{"raw":"POST /wa/ HTTP/1.1\r\nHost: px.ads.linkedin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 405\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\nset-cookie: bcookie=\"v=2\u0026f33a82c9-2bd5-40b6-894b-adb38f570094\"; Domain=.linkedin.com; Expires=Sat, 08-Aug-2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nli_gc=MTswOzE3NTQ2NTg0NjM7MjswMjE7M1W0zf9yPbglZMqxZkOl4D4n/hRA53YWFHBylO44gg==; Domain=.linkedin.com; Expires=Wed, 04 Feb 2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nlidc=\"b=OGST09:s=O:r=O:a=O:p=O:g=3207:u=1:x=1:i=1754658463:t=1754744863:v=2:sig=AQF7yoFfNgQ8jsZPbxMRB-sFtdKM0zg1\"; Expires=Sat, 09 Aug 2025 13:07:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure\r\nlinkedin-action: 1\r\naccess-control-allow-origin: https://maika-redaction.com\r\naccess-control-allow-credentials: true\r\nx-li-fabric: prod-lor1\r\nx-li-pop: afd-prod-lor1-x\r\nx-li-proto: http/2\r\nx-li-uuid: AAY72kJnC0qeT5lHzfMGzg==\r\nx-cache: CONFIG_NOCACHE\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-msedge-ref: Ref A: D4D958EBF1A14CD88D6719EC66581561 Ref B: OSL30EDGE0108 Ref C: 2025-08-08T13:07:43Z\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":30,"dns":9,"connect":2,"send":0,"wait":193,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3d034f6856c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"19870-1980f029fd8\"\r\nlast-modified: Tue, 15 Jul 2025 16:54:47 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 118325\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64779)","md5":"120877b10a4af5332f8742c5a7762bef","sha1":"bac79b4fe74cd5439a0ab1618af253de70d02d40","sha256":"4e183fc4cdfffadd50cd75bce5c7c9be1cd9f81dab24d8795b1f1bdf5b538861","sha512":"7dd4144843aa72065b526c2c93c27a170d1c281fd12573a6a7d5345a235759a0d0658d13ebf9643cce2eb3fff5852b2e952833942bb49e3d1164d3f3faaa03f7","ssdeep":"1536:44amxiXKjgOi9+uaJzNDor4bMogpJBZa1PqyulHBkHHyR6k5zK09UMuiKq:4pogO1ufcsR6EzKmUMd","tlshash":"cda3e79db2c2b96943e37174517f2306f13b11b4258d00a8b929c1d1bd6a98be237ff9","first_seen":"2025-07-16T17:59:54.79117Z","last_seen":"2025-08-14T20:39:29.948242Z","times_seen":283,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pi.pardot.com/pd.js","fqdn":"pi.pardot.com","domain":"pardot.com","tld":"com"},"ip":{"addr":"54.156.13.80","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pi.pardot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:A8:69:C5:82:C9:BE:D8:BD:C9:86:96:05:D5:E2:8D:C2:40:77:B0","sha256":"53:4A:64:59:F1:01:4B:D7:99:07:B2:D6:ED:E3:67:AA:A4:C3:D2:5B:C4:D4:1C:5C:25:1C:97:42:D6:B2:05:9C"}}},"request":{"raw":"GET /pd.js HTTP/1.1\r\nHost: pi.pardot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 08 Aug 2025 13:07:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1988\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 05:26:21 GMT\r\netag: \"15f4-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\nexpires: Sun, 08 Aug 2027 13:07:43 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5453)","md5":"0c0335550002dc4c4db0de1d9dcf043d","sha1":"0bd0357faa46e9ff78d939b196d43ed47c701160","sha256":"41402adfc915ad6dfd6328c06c8038763d25fe603e63beba4a2638a2bbc03136","sha512":"449683e6a927848f403214c49705a91d54a880d4da605f2e7b3fc52bf178c7475ca6131fad823a6aead84a1eb4a3e0501b122900c97241ce620ab45330861f12","ssdeep":"96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8","tlshash":"70c16498fd94d4b6417b059930bfd6bcb23c57b1340d9150d2b8cab4346cd322b92e6d","first_seen":"2023-04-14T17:45:12Z","last_seen":"2026-04-09T01:09:14.713391Z","times_seen":10784,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/pm_fp.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/pm_fp.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6401\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22503,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"bade26bbd84b22c2f64d22de6e83cdae","sha1":"abaaeba91d06c4ea36b505dabbcdb0ea8d8fe5a7","sha256":"f70fb9db44b518c9b2cf697ed6eb32efd82141f45d612f1ee480eb9de338a859","sha512":"18aa96b211b41fea5b9d4b168d345969836abd4ed965a0f7a4b18d1883668329c666231b7fbc6aa54026f2619947909e0667f7e156090c5c88c72f299ac443ea","ssdeep":"384:Gxg5Vr6vihwc4hQN8+NiKIbcdXcWicEhcu/LLxWcn9C/n2ipGf/0:2Sl6rA8+UumqScu/LLxWfn2ipGf/0","tlshash":"27a2c4667b4e2154a5b32301c5355944debed92341b0a0f8f49e81a9bfb182c83bdff9","first_seen":"2024-10-21T23:44:43.840788Z","last_seen":"2026-04-01T18:09:23.834478Z","times_seen":12,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/template/nav-search-bar-bg.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/template/nav-search-bar-bg.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/layout2.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/search-script.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/search-script.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 48819\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":221383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61526), with no line terminators","md5":"a4c0db0cb71deb84e9922cafd5b55657","sha1":"3b04b4c44665424b65a3961831349900d9666f25","sha256":"0b8d1d69c2b0073ea20dc440b46983538b90dd338b8954dd4e5c1aca0c4e7af4","sha512":"f105374fa247f875e9efef88814da235f8da93f0d40d2ff43cf31639323994e78d119268d0525633b8baef9d0877e9b253db32c90f83141c0750bf5375e784ab","ssdeep":"3072:sVt0GmodRqC6LetbWLlxaJYYo5XX1aCSTGbvsDozeSa82iX9aFHxTixDDiVqSbrQ:sAGXFQ2fzd+UfayBU08xzeqwM","tlshash":"2f243aae7114d63e03fb505cf0eb3695ba79a86ce609006c749cddc62769d0a632f7b0","first_seen":"2024-02-20T05:37:48Z","last_seen":"2026-01-31T20:08:09.178228Z","times_seen":12,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/ HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 27936\r\nserver: OVHcloud\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142276,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (63262), with CRLF line terminators","md5":"22c92633c08c4fbfe1b5326a22ff7b9a","sha1":"69b4a1088a1b659472b8bfa7707cb01e2ac1d191","sha256":"83ed8efe25e4c5c5087616d5328864e63fbfc50d6ca90db35adae60c55fe3c4b","sha512":"b5b08cf6c868f0d4320be5fe82b846f0a614d91719983d9c407af69f7c7fac4b42ab06ec7a70ae2cd027af84c26c85c43ad0a6a44d90222815f371704684ec05","ssdeep":"1536:7+aTWBynNZAjvdqtuxaPFKIYKBlqInBJDWnvP:Q3jF943bq","tlshash":"a1d3505b3994231fdad38709a6627a9878129c6fbe334cedf15e13394bccbe24c0550a","first_seen":"2024-10-21T23:44:43.82633Z","last_seen":"2026-01-31T20:08:09.162279Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com/arvest/","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/1.5f4f8c3e3982904758f5.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/1.5f4f8c3e3982904758f5.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3cf9e9aa56c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"73f8-18dc302ef70\"\r\nlast-modified: Mon, 19 Feb 2024 20:16:06 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29688,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28835)","md5":"54fdd0e641fa59cc000995a7b4e10412","sha1":"72962cba601369b35ea138693fc62e062b9c3a23","sha256":"a0fde5842f87cb883a7539d2c9222add8d2204fec2bd98a8ce2a489c00b8ecfb","sha512":"a16a2ce3c7b71ef5758bbe1b4518cd61a456728299a7e06c057dd75134735dc321eeae1718f1bf3a5015533b8028542ce4550cc0a57022ff49e8190fb80878e8","ssdeep":"768:4xDrTKABAYAcyCIANmtE0VX85u5y8DiAhAXmtEEn5Xf8a9rihsvgrfSa9wtvfVac:4VTKABAYAcyCIANi60iAhAXqdvEsvvaw","tlshash":"efd2a697b786fa5400cb3062947f17d765362039114192b2dc06c4e8a6bfcb4e36bfab","first_seen":"2024-08-20T08:35:49.726648Z","last_seen":"2026-01-31T20:08:09.177645Z","times_seen":10,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/template/footer-bg960.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/template/footer-bg960.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/layout2.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-GRH26TKW0W\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026_p=1754658461806\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1056423113.1754658463\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026sid=1754658462\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026dt=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=2\u0026ep.day_of_week=Friday\u0026tfd=1581","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-GRH26TKW0W\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026_p=1754658461806\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1056423113.1754658463\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026sid=1754658462\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026dt=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=2\u0026ep.day_of_week=Friday\u0026tfd=1581 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://maika-redaction.com\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":35,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/12.93f2ca20511a668d8998.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=www.arvest.com","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/12.93f2ca20511a668d8998.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=www.arvest.com HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3cf9f9b156c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"125c9-18dc302ef70\"\r\nlast-modified: Mon, 19 Feb 2024 20:16:06 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64780)","md5":"f2e46adbe14f1ef4552f86c8667386b7","sha1":"721eecaceba8f43429a6f82845429386675ddedc","sha256":"c17bc0015006ea96281dd68dc9d5485513eabedc8c664b36ef2f104c5d46b460","sha512":"c8e8f603556d3321d2348d6f75b431ddf5c29a9e136a3b5b16de1a2bdf7b1d6d7639ca498ba2d24231bf2eba0b082979fb9200f7fd3ec474cce3555e14f109fc","ssdeep":"1536:4bzFSt/dcNANA2AKFg6+HbZ/fYPOL4/4Z:4HFSt/d86+HbZ/APu","tlshash":"3a73f8cfb249b03942d32575d23f3206ba372578680d40a8f409d2d579ba9af9227ff5","first_seen":"2024-08-20T08:35:49.721626Z","last_seen":"2026-01-31T20:08:09.211183Z","times_seen":10,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":24,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/login-arrow-icon.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/login-arrow-icon.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 271\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 10, 8-bit/color RGBA, non-interlaced","md5":"5b7b9d12e8761792332ba60dc88d4a0f","sha1":"9460decf6b3018147c938608402e9f0245755d77","sha256":"01d1a470c25a6f60c6fa9e7de42b0158533a7bf3de3c0d7c2687f5a5a8269377","sha512":"2b0582ac577f9a0e73b1940e5e5442c73edfc4a2013ca66e7dd8533a24b6eaff0c1c6b2fcbb49bd7026177ac8efd14fa72b70ba1e9f944cbe878a04a267a4f45","ssdeep":"","tlshash":"a0d02bc7620cbcb5d141873a505dc0694d92a3850427699a5dfb1c25269cb104054e86","first_seen":"2023-07-31T08:50:35Z","last_seen":"2026-04-04T13:17:57.795401Z","times_seen":98,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/soc-share-circle.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/soc-share-circle.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"61e6e6016584e2d1ee3a7ff2fba0e7fd","sha1":"3cfcf1223ded85b667aed1a925038cf719a0b7c5","sha256":"16eba136a35400f1100a450d2f48d656b67296e74c62521aedcd8fab29c7d4ce","sha512":"713fa8ce08b2d3160a94dd1116865d7a6703c5ac62608072153256aa1b7b46bd262040bf6f0abc90a4d39c3898421930948e2f63f179250ab917f6bac68685d9","ssdeep":"","tlshash":"080165f38eeb4b2a4b334fd3993324b07e31431c4c910090b831c165470b1e215a49d9","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.796743Z","times_seen":142,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/fdic.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/fdic.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1411\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 41, 8-bit/color RGB, non-interlaced","md5":"4d7d634e423739bcc12cf93f7f9d526c","sha1":"a28a5ab097bd295ac094206062902a6271995fd8","sha256":"971cbfd037bdfa175bbcc512eb44ef5430b917a88df8b0b0344d85dff95f795e","sha512":"ebce907617f99fdc49707bc48c77f82d415ab8927b4e880488cda00bbee60c3b03e9dadfc6c102e2519da4ef3c1090e3bcef9b37441d73dbb4c5dbc8623164e8","ssdeep":"","tlshash":"4e21e6c92e614cb68bb8478d5db4e1c3f8a50410076370a80811a042bea240fe1b7b2a","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.798301Z","times_seen":136,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/bpopup-0.10.0.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/bpopup-0.10.0.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2096\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5436,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5095), with CRLF line terminators","md5":"d614e2fd3d2b07b3af01b12c74b02d35","sha1":"140c49951f8ea91b787fe9c1e7f25c24f42c0de0","sha256":"b55047bf9b91990cbfecc4306349fa33f33822579f26212451fc4faa98437da7","sha512":"2ae264cc91a8902fcbbec3175c1e41b7dd8e5a63bf419a073224715b962374e4f346415799c1af50c452afeebe2f81a847cfbe83c096961b4df24f321729404a","ssdeep":"96:2ST49XdKraoCHGqTdVTU4WAima2XLGjmuSurc6po4OIm16OHg1/:u9Xd1eqBVY9zx2XCjJSuIqfmEzZ","tlshash":"1bb185157a6e352991ebf33e40cf860b127163627f434921b0e4e9d82cb2b64766bf4c","first_seen":"2024-10-21T23:44:43.866292Z","last_seen":"2026-01-31T20:08:09.213918Z","times_seen":10,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"px.ads.linkedin.com/collect?v=2\u0026fmt=js\u0026pid=6159052%2C7175113\u0026time=1754658463295\u0026url=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026tm=gtmv2","fqdn":"px.ads.linkedin.com","domain":"linkedin.com","tld":"com"},"ip":{"addr":"150.171.22.12","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linkedin.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"EA:ED:61:47:7E:F0:E7:48:47:58:C7:BA:C8:F0:07:3B:88:95:A9:72","sha256":"75:5F:4C:98:A1:71:8E:9D:EF:EA:19:C3:E1:2D:C3:20:6D:97:97:F6:93:5C:E4:8E:6F:C5:EE:91:25:20:99:9D"}}},"request":{"raw":"GET /collect?v=2\u0026fmt=js\u0026pid=6159052%2C7175113\u0026time=1754658463295\u0026url=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026tm=gtmv2 HTTP/1.1\r\nHost: px.ads.linkedin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: bcookie=\"v=2\u002609cff453-934f-40d1-814c-09939b1e10fc\"; Domain=.linkedin.com; Expires=Sat, 08-Aug-2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nli_gc=MTswOzE3NTQ2NTg0NjM7MjswMjHWdEYvq86SpVAK1gcDBB/K3K1emIU3T31fj7YpQkoAcQ==; Domain=.linkedin.com; Expires=Wed, 04 Feb 2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nlidc=\"b=TGST09:s=T:r=T:a=T:p=T:g=3089:u=1:x=1:i=1754658463:t=1754744863:v=2:sig=AQE-sNNtVIIlasi8yD64OPPqrrR4Yj90\"; Expires=Sat, 09 Aug 2025 13:07:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure\r\nlinkedin-action: 1\r\nx-li-fabric: prod-ltx1\r\nx-li-pop: afd-prod-ltx1-x\r\nx-li-proto: http/2\r\nx-li-uuid: AAY72kJpKFQqR/44Sjw96w==\r\nx-cache: CONFIG_NOCACHE\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-msedge-ref: Ref A: 501D309E0C2249C48947B652CBD98EBF Ref B: OSL30EDGE0108 Ref C: 2025-08-08T13:07:43Z\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_cTsTcEDc1rc1Tnw\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_cTsTcEDc1rc1Tnw\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 131\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/json\r\ncf-ray: 96bf3d028e4f56c1-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://maika-redaction.com\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\ntrace-id: ad7cf00a6e4bf0c1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27816eff3a704183b00e00e5189ea1e0","sha1":"d94913c8f6e4b9bea0fe1a274f135cbb2389cd8c","sha256":"d9bc7db389ec80e22adbb192e06a1dd872dffa4f3f740a7c5a50ea3c1afe9265","sha512":"77816244a4b091efec1006b87f1af386a3741f061a102af8d174df65f9856a11d9a33ebd776fffb21817fe9906fa1e79f224d795039e454fdff02eea4b6f92cc","ssdeep":"","tlshash":"bb8163e662d61c7dc2435394a1657f0a4fbda1331188b934d88d5a8a90ff0fb16153bb","first_seen":"2025-07-24T15:57:40.128693Z","last_seen":"2025-08-11T20:28:35.381515Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 20:50:53 GMT","end":"Fri, 31 Oct 2025 21:50:50 GMT"},"fingerprint":{"sha1":"FF:32:5C:59:52:BE:FB:87:30:3C:92:2F:E9:22:F8:2C:0A:7B:95:A4","sha256":"6A:B0:43:BA:D0:F7:C8:16:F0:EB:73:D7:6E:2D:27:54:22:CF:D1:13:AE:C3:FC:25:12:42:C2:5C:30:56:47:85"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8534\r\ncf-ray: 96bf3d02bcdb5693-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: udEX4Ya0Cg+3idNBGccl5Q==\r\nlast-modified: Thu, 07 Aug 2025 05:45:35 GMT\r\netag: 0x8DDD575A163AE42\r\nx-ms-request-id: 4d617389-501e-00b5-6a74-079e75000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 30944\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25883)","md5":"91b23373eee11488cb1d9988720f4229","sha1":"056156cd926cd3e7f32ce0ab458b0d0c42020396","sha256":"cd8d68ea85035b22f983202bc69162920ef089fb4683e042daaf7f2821f00ad3","sha512":"6dff15d725ebf020286fda90515be18f3b1967f766372f7050d7428fde063ff2e44ddae30ebd9769a9dee86bac795832f215c631fbd69fa13ff819334c259604","ssdeep":"384:8Tg8XNbpLxCtduhA5SNYbGr1Uci0FPvfC5mC1X2cHKpQinGHKJxEV88y:agKFLxVhA5SNGsUci0tDCZ1gyy","tlshash":"4dc208ddb140fe3446c3a19c9a3be25a723b756d34869164b8a4ece0247cc4f6633bb5","first_seen":"2025-08-04T14:43:06.487641Z","last_seen":"2026-04-06T20:49:33.247823Z","times_seen":5819,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/layout2.css","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/layout2.css HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 7129\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7998), with CRLF line terminators","md5":"2b346809f0614c676fe3ec2ce80d64c3","sha1":"cefa989b127e47ffc4f093805eca7bc0e5270806","sha256":"321c54c075b6f9830e5a64d4176b72203e6f937eb6c80760e9f3ca68c88999d7","sha512":"b1ec0779b45d8d77de812951c7364019b663714c2deb9e27432457de2a425f5bd02211fd3ab8ce134c0bba3e9fe9ee62bef973a73731494d08dd4ec1e1847281","ssdeep":"768:NjEdKZt/VQoTkTBmTR8chcdJa43TaTC4b1RskYKxR9vxZdZ9HSHJ:NDraJ","tlshash":"90e2a851d695305fb11b82fff472a795a70a8182e702cbbaf5ff39a4d6850881533b8c","first_seen":"2024-06-20T19:33:33Z","last_seen":"2026-04-01T18:09:23.854968Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/webfonts/26DA37_1_0.woff","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/webfonts/26DA37_1_0.woff HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/MyFontsWebfontsKit.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/webfonts/26DA37_0_0.ttf","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/webfonts/26DA37_0_0.ttf HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/MyFontsWebfontsKit.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463; _ga_GRH26TKW0W=GS2.1.s1754658462$o1$g0$t1754658462$j60$l0$h0; _ga=GA1.1.1056423113.1754658463\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/modules.a3cb6dcf71aec7e1a87f.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 22 Apr 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:D4:01:7C:02:B6:29:EB:F2:9D:13:9E:7A:B8:C6:D7:A4:C2:B1:A4","sha256":"32:F9:E6:36:BA:8A:91:05:E3:B1:BC:FF:F8:0B:7A:40:92:09:66:45:59:35:ED:80:76:C4:64:B0:B8:E0:D9:D9"}}},"request":{"raw":"GET /modules.a3cb6dcf71aec7e1a87f.js HTTP/1.1\r\nHost: script.hotjar.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56990\r\ndate: Wed, 23 Jul 2025 13:01:06 GMT\r\nx-robots-tag: none\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"ed474257e15f0759c2579a43884d3fe9\"\r\nlast-modified: Wed, 23 Jul 2025 13:00:38 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: uHuC7DaKnKH3OGQk0lV3w1ZSVIT9fm79uDf69s1YEqfilCV1oNGuMw==\r\nage: 1382796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65186)","md5":"bdd51ca37556691bfff08a535ef9d190","sha1":"c2fc9cfc3a1bcb9b3626fa277ad7279a466b70f4","sha256":"14901beab79cc1b41cf121cda226068ddfc4a1e2330c69301ab7b1276c74c255","sha512":"889c6251b701a8b28133feeb9a8d2b833f1ccf8b072e5781525db7421a1b3cbd351e27b3004887a38ba14b1492c484d69b2d81f1d9255664665167b00a20065b","ssdeep":"3072:WRwvwE/muMwkZTi8hnp0hEloTUSTJYScYy:WRwvwX+ku85gEyoSdlcYy","tlshash":"b134f9ac76c6b0ba13b72079903fb10ab3371459680d8060e229d9d47d7da9f9723f6d","first_seen":"2025-07-23T14:16:39.072509Z","last_seen":"2025-08-11T19:33:52.122594Z","times_seen":162,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/static/q-siteintercept/.blob/903d4c43fed535fb4d325b1612c605e48417dc74_wr-dialog-close-btn-black.png","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /static/q-siteintercept/.blob/903d4c43fed535fb4d325b1612c605e48417dc74_wr-dialog-close-btn-black.png HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 245\r\ncf-ray: 96bf3cfd4e6f56c1-OSL\r\ncache-control: public, max-age=31536000, immutable\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=757\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstatic-digest: 903d4c43fed535fb4d325b1612c605e48417dc74\r\nx-content-type-options: nosniff\r\nx-request-id: b408f4e0-c30d-404d-9990-a29fd8960e7b\r\nx-transaction-id: d2d88ba3-4571-4c9a-b594-baba7174a661\r\nlast-modified: Sun, 13 Jul 2025 14:48:03 GMT\r\ncf-cache-status: HIT\r\nage: 627743\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced","md5":"4e704b1ca59be0dd3e47ab4271ae836d","sha1":"970f215302b7e3642664c0c5e1fdd6eb27175bdc","sha256":"88a249614a097dfd513c1599b937d89c8e48bb981bb6a273165dabe58535e33b","sha512":"0ab0d69beedf6fc5c568d53dc4c6fcac088251724fa9be4221e198949a26812be8b701b649e43f1f05164ea9eccc3337d2657bbc4512249981dfb7baa7b145d8","ssdeep":"","tlshash":"2bd095e3f950449ccf453033c01dc471887843141165297c0e7b93539e843cd74d544f","first_seen":"2024-04-27T20:23:43Z","last_seen":"2026-03-11T21:53:48.989308Z","times_seen":1259,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/jquery-1.9.1.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/jquery-1.9.1.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 32775\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-09T01:44:34.273694Z","times_seen":61237,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/soc-fb.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/soc-fb.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 589\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"751b8ec0162efb0faf7d37ff3a1c9467","sha1":"3a524903ab49b0273f484b62e5740e306aad2f6f","sha256":"610c99d9f333e8e356584239f9cbf91592f1c38877fce7d1d1da4bf3aac94e44","sha512":"8ec40b171713a6e3dcab4222639e94c7486442279b019890801e7ac507426e7376840402d03ba0abaf28b8b987ba10d2b03e5424a332d6a63b5543158543129f","ssdeep":"","tlshash":"4bf047d1bd52343dd42601137fe53456a4518a1d0b7156e01385f92c1a677c4e3da154","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.781884Z","times_seen":148,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/helper.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/helper.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4048\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15267,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"142b68ffef2c58c75c3e928de94f6eb4","sha1":"f8bc1fc827e62b9aae72a4ec656089fc170ebdd7","sha256":"c69aee89540f62119a3f238ce99a2a5d11bf3d1fda7476e4726f7b2f457431f8","sha512":"60351bb64cffd867884acc4d58c9ca1c12ecb402b29265be31bf2a2008c407c0f26df12da40c5f77f901069beab23e523dfe8d9ee336bda65f14b8eab3920dde","ssdeep":"192:yULdNBrldeKYi22N6NHO0sbY+ISlHd3ll2/iQsWs+/EeE:rJ/PYd2N6Nu0sE+XHW6QsC/EeE","tlshash":"e9622e59224921b1893b772aab5bb208ff3240fb160196c4bd5c8fd82f7092516e9fdd","first_seen":"2024-10-21T23:44:43.860563Z","last_seen":"2026-01-31T20:08:09.167015Z","times_seen":10,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.beta.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.licdn.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Fri, 12 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"79:D6:4B:9C:B6:FE:66:4C:08:64:D7:B0:7C:05:D9:7F:B7:5B:41:CA","sha256":"E1:E1:F9:58:9B:F3:C3:BB:E2:CE:9E:C3:F9:DC:6F:82:A3:90:3E:F7:B6:2A:30:61:AB:47:C5:14:C7:58:89:05"}}},"request":{"raw":"GET /li.lms-analytics/insight.beta.min.js HTTP/1.1\r\nHost: snap.licdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 05 Aug 2025 10:13:28 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 17966\r\nquic-version: 0x00000001\r\nx-cdn-proto: HTTP3\r\nx-content-type-options: nosniff\r\nx-cdn: AKAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50615)","md5":"82d68d726db82c099d64929072ff5c7c","sha1":"e2decfcce41eb9b41179beb118057af83e3de17f","sha256":"40275adcd50ab16d5f98f8bb6680cf80c89484ad400cc117bf516ddbbaccf266","sha512":"afb9a351b79c397d9b4d901b0c16d4822bf2b6d9d90b2b09f7b58402effdf9ce1e66963ad9d0760e56b9d3cac00f65a7b91355939e207eb0aae5a7010ae18d43","ssdeep":"768:f8XGPoIqKIW3C2EndxOT9PzG47WUwc41ldh7vQpdxJYXC2TGVDrC9txNl8zlJ:f8XGcs9tzjqf7vafJY1TKC9txN6/","tlshash":"f033c5d872c3b02647a774a5447f114af23eae55a85c9860d012f8953cbca4fd27bebc","first_seen":"2025-08-08T08:41:07.676759Z","last_seen":"2025-08-08T18:30:33.064912Z","times_seen":38,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_cTsTcEDc1rc1Tnw","fqdn":"znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /SIE/?Q_ZID=ZN_cTsTcEDc1rc1Tnw HTTP/1.1\r\nHost: znctstcedc1rc1tnw-arvest.siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 96bf3cfa09d156c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"2279-i+o8yh8FOZhXYa0nErxgLVO34zw\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 349738\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8825,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7002)","md5":"1d8255cf380b086d9849e7ab5526fffe","sha1":"8bea3cca1f0539985761ad2712bc602d53b7e33c","sha256":"b7dc524cd0c3115074da9d532ca8771dcf0e028a966ed4f6e189c06580d865c8","sha512":"ef6269cf644b9aceafebea80163710402ebafc2e18f513c32d6507424b2937edb7d1eddb410fa9c4bafb52ac2e2668c9426ef49caa5f0c39f9aa882113054349","ssdeep":"192:pIUBupNuxaKxbaqva60aJlbtOZCTbKTPsGDzY037PKMull7s:0ulBx7bSCTbKTPsGDzPLPKMu8","tlshash":"f502e9ef76c47d7e02c114e8c53f7141ba2e07aa191da4e1b64ce1612b74aea4227ff0","first_seen":"2025-07-24T14:15:18.492066Z","last_seen":"2025-08-12T12:37:30.088243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.g.doubleclick.net/g/collect?v=2\u0026tid=G-GRH26TKW0W\u0026cid=1056423113.1754658463\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710","fqdn":"stats.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.147.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"86:B3:55:17:6A:EE:01:BC:51:90:81:E3:71:E4:ED:03:DC:45:AA:3F","sha256":"92:5F:D8:EE:E1:5E:10:8E:6A:83:73:0F:62:A6:BA:52:97:D5:7C:9D:52:0E:29:B9:63:BB:66:E6:EF:9D:6C:1E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-GRH26TKW0W\u0026cid=1056423113.1754658463\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710 HTTP/1.1\r\nHost: stats.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nCookie: test_cookie=CheckForPermission\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://maika-redaction.com\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:127:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:127:0\r\nreport-to: {\"group\":\"ascnsrsggc:127:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:127:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":97,"dns":3,"connect":24,"send":0,"wait":32,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/web-vitals/dist/web-vitals.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 07:12:29 GMT","end":"Thu, 25 Sep 2025 08:12:28 GMT"},"fingerprint":{"sha1":"74:03:6D:4D:8D:B7:AF:5F:95:BA:97:8E:E3:FA:63:4F:20:FD:29:80","sha256":"69:54:C9:A2:F1:AD:43:49:96:12:57:59:D0:D2:97:F9:C2:07:C3:04:1D:97:3B:AD:07:2B:41:AD:FE:E3:99:2F"}}},"request":{"raw":"GET /web-vitals/dist/web-vitals.iife.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 56\r\ncf-ray: 96bf3d03db50b4ff-OSL\r\nlocation: /web-vitals@5.1.0/dist/web-vitals.iife.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5886,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":20,"dns":3,"connect":1,"send":0,"wait":55,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/1.cba293a2ce32b62fd12d.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/1.cba293a2ce32b62fd12d.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3d0428a956c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"7459-1980f029fd8\"\r\nlast-modified: Tue, 15 Jul 2025 16:54:47 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 111097\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29785,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28931)","md5":"499de169670194a0fa19c79398b52644","sha1":"dd2f20b40c7d0ec7f930362c8bebc66e8f467896","sha256":"649edc3e8e1df99c95de91045493d98afd12eb1368619a5de1853783a2a8651b","sha512":"b7cbdca7a6185c4528f5f2a10b718702da7f5534567ebfedd991ca8eadcd724069b5d591f7571f02a8efe93d0e0c8988a53ef16a8f51e407b89400123acb8aaf","ssdeep":"768:4UWrTKABAYAcyxrIA8mtEL8X85u5y8DiAhA0mtEfn5Xfka9rihsvgrfSa9wtvfVF:4RTKABAYAcyNIA8pV0iAhA09dHEsvva0","tlshash":"e8d2a797b786f65400cb3062947f17d765362039114192b2ec06d4e8a6bfcb4e36bfab","first_seen":"2025-07-16T17:59:54.694809Z","last_seen":"2025-08-14T20:39:29.949651Z","times_seen":282,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/static/q-siteintercept/~/img/","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /static/q-siteintercept/~/img/ HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96bf3d051a1556c1-OSL\r\ncache-control: public, max-age=30\r\nlocation: /static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img\r\nstatic-version: 87b1e226c58fe48d0a26070da0726c00f5a08139\r\nx-request-id: 9d63b26a-29e3-4b29-8db7-3970a8652c8c\r\nx-transaction-id: 705c64bd-6536-474f-a07d-b9da390fce65\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 21\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/arvest-logo.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/arvest-logo.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4092\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 69, 8-bit/color RGBA, non-interlaced","md5":"f6ac29e98162f51a7782eb78160dd31c","sha1":"32effa4f9335e1d4308256fb20fd61c381a6f83b","sha256":"8d8f81b3deb15a8d8a4d940347fb3322ca6d49640e7ce14514ccbe07862a1aba","sha512":"a78b8cf525456c8d532e45d6717e950c5ed051108e1de7bd8767ffc4573f612030b1dabc637d8166398cb6ae106c163a3978624eb97bc73e19a1bc46da7760df","ssdeep":"","tlshash":"2e817d8816666ba4837b20b85134ec7ac86dd753aaffa8f20751af8e1d6a71d8274110","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.790315Z","times_seen":186,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/typeahead.bundle.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/typeahead.bundle.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9413\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29518)","md5":"6a08fa0281a5f658b731f8850761455a","sha1":"dc7d03cbe269ff69f3e51d678a27c665bd2ea426","sha256":"47f3e568e98dcede576220692a11b6987954da32bef0da8b49c58103d284071c","sha512":"4eb270c134d1a7d7e50a150012930a5053ac38bcb569c5ff127920989dd5830d5024865d19d3e5f8213d733c58b8c651e222054d498d9f4f47e84fab3f277442","ssdeep":"384:NFp+L/Flc+lVZF9ro5Yssl2cHlQMSFE+3Wkv5jTnZzhjwcX/45Mr1XUPanJTkzkD:lqvc+lVZb0cHlQMSz3WkxjTRV/4A1X3","tlshash":"41d295c9f2d2b54256676074d0bf1107613b68a9b80c882cb97998d5be78e0d2337f7d","first_seen":"2023-03-07T01:24:15Z","last_seen":"2026-03-26T14:12:13.390546Z","times_seen":51,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/jquery.selectbox-0.2.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/jquery.selectbox-0.2.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2752\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7728), with CRLF line terminators","md5":"d011226357499db727cdf313faa05859","sha1":"a5d181f45a81db9a6e892e6d9244f361cbd81951","sha256":"6fa4c9f68e9b5b06234e16b32ff959da7b13da29c5cdfd1be1a81b83587f180e","sha512":"ea7c1b7dcbc4e8a94e3eb771cdac59a49ae90d165d9b973574834865ae0e204b42fee0e7cc6d34a567afa24c087d272eb75e19762641249b80238da69f0e7d6d","ssdeep":"96:LGO/bWP6dQd25HGvBNve3CBWteIqY4SXl4MGwOiMW7MjWGsk+N:9bEdCGvDvcCBWtRnm+zQqU8","tlshash":"e7f1b349308431b500ffb07b54be275aa6b149fcc180d024a8b1e2ada9b95c56277fbf","first_seen":"2024-10-21T23:44:43.863242Z","last_seen":"2026-01-31T20:08:09.218566Z","times_seen":10,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/Free_Blue.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/Free_Blue.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 60883\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 234, 8-bit/color RGBA, non-interlaced","md5":"09e7dc88fbe5d875f69bf0acf1f1593a","sha1":"7655c7d36e597694a580f94ba3d10b63556a73ab","sha256":"57ae174603c8b742a3451fa828ceb88f6adcee9914d15ad2a6e2587a7560ddf3","sha512":"73db43ebaba6bc6fc99ad29c793ba61930b5195101e5bb93af264f656ca649dd340ce3afd1c035c6cfdc594f91f6246800b13c747be2d763a81df7fc11b8b2e6","ssdeep":"768:R/zEQFOimcfeIZY9KHtQe4ldmOGn7rUBUrykjKDH64JawdgZEhCfjBQlzEMHku:R/CimcfJmGie4DG7rctH1QHfjBQl4MEu","tlshash":"3153f1ab4b147c90ed44ca7930f4bf12aea0ffc219e542cacad843595f4ebda6740195","first_seen":"2024-05-25T03:47:28Z","last_seen":"2026-01-31T20:08:09.173893Z","times_seen":24,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/common.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/common.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3874\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10229,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8012), with CRLF line terminators","md5":"c335d77c10f484b4ca97b4412d675eae","sha1":"49137ad6fa5eea44039c10e846c40fec97574db8","sha256":"49825a22ee9e05fb6a125bbe4d158571887d62129b9df126af4f35682e1400fc","sha512":"436fcd1dbd160c491fa147a97632e8e10b78f0dfd4d371fe87686247d434bc09f163869106e35cd905618b9f74ba48fd4e6d1dd1f745cff357851b56311e8aed","ssdeep":"192:z0qRoDxMj1oUX/Ln6rzwHzNYm7jquBL7WnG8/WLE:z0qRoDxMVXznewHzSAZ8/iE","tlshash":"e022c72832a474a35afb307250af9507a571cdb799058072a092dce52dfce948b73f7a","first_seen":"2024-10-21T23:44:43.844063Z","last_seen":"2026-04-01T18:09:23.823468Z","times_seen":12,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/OtAutoBlock.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/OtAutoBlock.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5079\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20793)","md5":"9b2bf79bd2a1affea2dec51f50e025ec","sha1":"af564f312a8814c262abe79164cfe3f1fe3a6053","sha256":"1b1852f52af150cc8a56f34dc02793ad80ff6e65d025b107e7a687a3c6c91f61","sha512":"b25644221828cf08b29a29010429fb4207e8d7530c34c9ec07c3c9c1ee7534f0ab827a9a8776dc091b0fb90443c465a42096ad1a965b39d9aca8948e66ef54f7","ssdeep":"384:km+TKVDUhFvAcmDIZ8FxlljnHr/7xcsDy1uV:kLTKVDUvsC8PnnJQuV","tlshash":"29b29d9e47dc9ced1b192e906456b20cadcfb44f4bc3ece1a01ccea497e99b19015a2d","first_seen":"2023-12-18T18:22:55Z","last_seen":"2026-01-31T20:08:09.206408Z","times_seen":35,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/webfonts/26DA37_1_0.ttf","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/webfonts/26DA37_1_0.ttf HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/MyFontsWebfontsKit.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463; _ga_GRH26TKW0W=GS2.1.s1754658462$o1$g0$t1754658462$j60$l0$h0; _ga=GA1.1.1056423113.1754658463\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/arvest-file_Business_Checking.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/arvest-file_Business_Checking.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/8.4adfaf62a9bbf2d72d65.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=maika-redaction.com","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/8.4adfaf62a9bbf2d72d65.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=maika-redaction.com HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3d00ec0156c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"14ffd-1980f029fd8\"\r\nlast-modified: Tue, 15 Jul 2025 16:54:47 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 110672\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86013,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64779)","md5":"40921b796c6765f50ac1581b6b7894f5","sha1":"ab847b42df93178b9c3f59d2cf8cae6aac39007f","sha256":"91db95492628d9a7223abc097f2390b35db18fd7e4434789b602c9c85c71e4fa","sha512":"f4078b334f71f18004946b8dc297a34385ca1089e779de81d5000e9ac6939fcf9e161af430aa63ad7d9852fe92a1b9dedb5eb7e0163a84179eef5d24d3b26b46","ssdeep":"1536:4SczZmfG3GwGMlOLiw41WZSayzNANA2Ak:4RgfG3GwGyH8Sayu","tlshash":"0e8308cfb249b03982932575d13f7216b6372578340e40a8e44ad2d479badafd223bf5","first_seen":"2025-07-16T17:59:54.79023Z","last_seen":"2025-08-14T20:39:29.947621Z","times_seen":470,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /WRQualtricsShared/Graphics/siteintercept/ HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96bf3d04c9a756c1-OSL\r\ncache-control: public, max-age=30\r\nlocation: /static/q-siteintercept/~/img/\r\nx-request-id: dc44a5eb-2ee5-4e8c-aa6c-6f40ab6a62a7\r\nx-transaction-id: a58f2e50-7386-453f-873e-604e2903e37c\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 10\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/5.702eb9d1cd18a1f8aee0.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/5.702eb9d1cd18a1f8aee0.chunk.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3d0428a656c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"b55-1980f029fd8\"\r\nlast-modified: Tue, 15 Jul 2025 16:54:47 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 118612\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2047)","md5":"a0ac6ced1ebc41755b6dbfd2d50eb075","sha1":"60e4390c09d77782769bcca6c985c1f4484fdb8e","sha256":"72c3f09ac50dffd3d2970b8f21dd377ecc12dbbccd84921ba287da19791df827","sha512":"19fd3ff033c38d80788ab59a8e19807d4c0e139173f56f097e68686ef9af3f09ad9bcc9f1c14812195546da740bbd309cd25c14ee6e0ffc916eec85d855e1f65","ssdeep":"","tlshash":"9b51105df0a2a5a405fa24a412bb7783f23b903e211514c43b5da2a07b74587963a7fa","first_seen":"2025-07-16T17:59:54.72931Z","last_seen":"2025-08-14T20:39:29.914193Z","times_seen":282,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pi.pardot.com/analytics?ver=3\u0026visitor_id=205259305\u0026visitor_id_sign=9bca230bddc73b1ddbd5929395eac0b6472be2dd52ded9a183ef5b51dab662ac7a5e93ddaf135288c22b16e2604ce840129248ce\u0026pi_opt_in=\u0026campaign_id=138064\u0026account_id=968183\u0026title=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026url=https%3A%2F%2Fwww.arvest.com%2Fpersonal%2Fsignon%2Flogon\u0026referrer=https%3A%2F%2Fwww.arvest.com%2F","fqdn":"pi.pardot.com","domain":"pardot.com","tld":"com"},"ip":{"addr":"54.156.13.80","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pi.pardot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Fri, 13 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:A8:69:C5:82:C9:BE:D8:BD:C9:86:96:05:D5:E2:8D:C2:40:77:B0","sha256":"53:4A:64:59:F1:01:4B:D7:99:07:B2:D6:ED:E3:67:AA:A4:C3:D2:5B:C4:D4:1C:5C:25:1C:97:42:D6:B2:05:9C"}}},"request":{"raw":"GET /analytics?ver=3\u0026visitor_id=205259305\u0026visitor_id_sign=9bca230bddc73b1ddbd5929395eac0b6472be2dd52ded9a183ef5b51dab662ac7a5e93ddaf135288c22b16e2604ce840129248ce\u0026pi_opt_in=\u0026campaign_id=138064\u0026account_id=968183\u0026title=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026url=https%3A%2F%2Fwww.arvest.com%2Fpersonal%2Fsignon%2Flogon\u0026referrer=https%3A%2F%2Fwww.arvest.com%2F HTTP/1.1\r\nHost: pi.pardot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 08 Aug 2025 13:07:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nset-cookie: pardot=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0\r\ncache-control: max-age=63072000\r\nexpires: Sun, 08 Aug 2027 13:07:42 GMT\r\nvary: User-Agent\r\nX-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Salesforce Marketing Cloud Account Engagement","description":"Salesforce Marketing Cloud Account Engagement (formerly known as Pardot) is an application specifically designed for B2B marketing automation.","website":"https://www.salesforce.com/products/marketing-cloud/marketing-automation","common_platform_enumeration":"","icon":"Salesforce.svg","categories":["Marketing automation"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":1342,"timings":{"blocked":490,"dns":163,"connect":96,"send":0,"wait":316,"receive":2,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/housing-logo2.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/housing-logo2.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced","md5":"8c339bc63e8f842ea73fbd6f6c05738b","sha1":"001b1bba7b4a22d4216d7a2f9a5d87a21e2ed7da","sha256":"3132b69dbeb859635eea70dbdae8557c143d111eeb9a473fb84fe5fac904cc18","sha512":"b4dfbcc4ff0dc538fa41cda02092916aebede7ab5518189c6ab83e10666790e6408136518ee35841716850e718cf7142d7d7ab735cfd8399b0faccb1e7c5e7da","ssdeep":"","tlshash":"96f083e03a4e82327f6216b20d449829a8a78fd803a8068f15da98854da1b04446c37b","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.797679Z","times_seen":140,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GRH26TKW0W\u0026cx=c\u0026gtm=45He5861v811537095za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-GRH26TKW0W\u0026cx=c\u0026gtm=45He5861v811537095za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nexpires: Fri, 08 Aug 2025 13:07:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 155082\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488616,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7606)","md5":"329433b54ead9dc2a3209b5458a04054","sha1":"31e4b4b97fb53c0a61e6b3f77af5fecc312aa3a2","sha256":"43bd6a6bcd22e07bd81032078ed35e83ae66ebc7e0eb421be939f1d24b7c5b32","sha512":"8e9f4b96b1a04cfadae49a2e94a75039646c5e47250768e513e36bb92ca7e563d13c158f4fe090a63e179c32f0298da8dcf4a7b9e706d7852d2cd4ff64faa59c","ssdeep":"6144:+xP2NnBN8LMAyev+Ot6GT2PG6B4xdHS4rcgO:wPiBilGmd3AL","tlshash":"e6a4f8ce73c674669396f478503f01cba97b25a2b49cc8aab1c9ccf02d3459a4167f78","first_seen":"2025-08-08T13:08:09.987992Z","last_seen":"2025-08-08T13:08:09.987992Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/otSDKStub.js/consent/430cf39f-917d-469f-9c6a-0de3834f38d3/430cf39f-917d-469f-9c6a-0de3834f38d3.json","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/otSDKStub.js/consent/430cf39f-917d-469f-9c6a-0de3834f38d3/430cf39f-917d-469f-9c6a-0de3834f38d3.json HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nCookie: _gcl_au=1.1.2004641207.1754658463; _ga_GRH26TKW0W=GS2.1.s1754658462$o1$g0$t1754658462$j60$l0$h0; _ga=GA1.1.1056423113.1754658463; _hjSessionUser_2651856=eyJpZCI6IjMyMWJhY2FjLTM0NDEtNTc2My1hNDhmLTU0ZGVjNzJmMTgwNSIsImNyZWF0ZWQiOjE3NTQ2NTg0NjMxODgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2651856=eyJpZCI6ImQ3YjdjNzhhLWZkZWEtNGIyMC05MzNlLWFlMGY5OTM1OGRjNyIsImMiOjE3NTQ2NTg0NjMxODksInMiOjEsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxfQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 196\r\nserver: OVHcloud\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-09T01:50:55.931574Z","times_seen":91260,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/soc-instagram.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/soc-instagram.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 686\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit colormap, non-interlaced","md5":"91b6ec862551b25a5a254bc219d2d0d6","sha1":"49a743ec6e545e31b8074f0b09ba12a6eeba5080","sha256":"2ee5b697a7b857ffe13445f6b2ee5ca3f0ab76be6c03b51bc53879648c7bd9a8","sha512":"18c9f4d4188f453d96a1c8743b84e987e83f65c07c03b4f7a9d4a6ecec8878178b0a19502cd88b5ffb856434a707ef9b9d9f64fef7b8261b777f5df9155abe8e","ssdeep":"","tlshash":"f10141fe21806ccc8a1321c45ac7480ca8b710c38325ccb5a56a2845372028315d13c2","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.782525Z","times_seen":149,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/arvest-file_Business_Checking.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/arvest-file_Business_Checking.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/template/top-nav-bg.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/template/top-nav-bg.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/layout2.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=CR_6u0MmncjsLPdtpY\u0026Version=2\u0026Q_InterceptID=SI_01JDqG39AUPDXfw\u0026Q_ORIGIN=https://maika-redaction.com\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BrandTier=\u0026Q_ARCACHEVERSION=21\u0026Q_BRANDDC=iad1","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /WRSiteInterceptEngine/Asset.php?Module=CR_6u0MmncjsLPdtpY\u0026Version=2\u0026Q_InterceptID=SI_01JDqG39AUPDXfw\u0026Q_ORIGIN=https://maika-redaction.com\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BrandTier=\u0026Q_ARCACHEVERSION=21\u0026Q_BRANDDC=iad1 HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 96bf3d0428b356c1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"624-/DdKwWQrlZzda1cVZmLJuMq2mK8\"\r\nvary: Accept-Encoding\r\nx-request-id: 61774617-9c73-4c8d-b54b-a0248a096fbe\r\nx-transaction-id: ad13dd2f-8288-455c-a9bd-075fd7020da9\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e1ab9c524fcb4e54ac130d0df75df32","sha1":"fc374ac1642b959cdd6b57156662c9b8cab698af","sha256":"ea5c39863c6ec124214ecac0a1e0064514ea0c5f6d2630890f087c49b486e0df","sha512":"45b6cdbffaa02631f60cbe81e8140abc09bdade156f72bc4df0a3c79ac9795382bd7567af58605c558a20c1f45fd67791eead36959ead71d9f3db19e381f7ae4","ssdeep":"","tlshash":"4f316ceca1326c2e072bb5ae86cf64153ebe813058447e2d9dcad4e5d1cb6498601e43","first_seen":"2025-02-20T03:05:59.689932Z","last_seen":"2026-03-26T14:12:13.385541Z","times_seen":31,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3cf9f9ac56c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"195c6-18dc302ef70\"\r\nlast-modified: Mon, 19 Feb 2024 20:16:06 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103878,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64780)","md5":"6bf37358e012c4691217027f6b145983","sha1":"1de1ab1279c1d4a62d0d689782865816c7376fac","sha256":"e12d7e885427fc7cc9c6f54adcb51194be0876a94ab1fca7d9e282b0b7b439e8","sha512":"a981f6721671a1fbb760b847a1e2077b34ed1d2dc8cd135a7a0106fbcdece792ad57eccf178eb0efa4fc301035f7687232558085c5bf14231c44ed4b209e667e","ssdeep":"1536:47mmxxHCbkp+ugJzNDor4bMoAXJBZa1PqyulHBcHH/R7XcZ5zK090MuDKq:4vibNutw3R7XizKm0MQ","tlshash":"a7a3e79db282b96943e37175517f2306f13b11b4258d00a8b929c1c1bd7a98be237ff9","first_seen":"2024-08-20T08:35:49.724153Z","last_seen":"2026-01-31T20:08:09.211843Z","times_seen":10,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/webfonts/26DA37_0_0.woff","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/webfonts/26DA37_0_0.woff HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/MyFontsWebfontsKit.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/main.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/main.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2691\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7836), with no line terminators","md5":"82f60003644cc5c8f7c2660bd58433fe","sha1":"f42a9db5186e7e61e007cb7bbf2ab17d9d6d11e9","sha256":"84e48b945f7a402015726fa2357362c6d169b1bcc293b92bb1ced235bb50791b","sha512":"93875468ef19951822c7bbf6a8a3fde8dda3e074e9fb514af336b018e050154810fd95c7df72c3fb2689125a58e54015df48112174a0e444749e03162db8b73b","ssdeep":"96:70PWPWH8tfdoH3lR4sbp4PwgRTtiUCGmtuWsFMS7mvbW5WBLLTwu5B:QPW+H8RS37yPwgRTtiU4q7wK6LLTD5B","tlshash":"0ef1845cf67ca0b201ff362b111f59011573acb7db468a20b46749e45ef8e5819b3f29","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-03-26T14:12:13.401713Z","times_seen":51,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.hotjar.com/c/hotjar-2651856.js?sv=7","fqdn":"static.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 22 Apr 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:D4:01:7C:02:B6:29:EB:F2:9D:13:9E:7A:B8:C6:D7:A4:C2:B1:A4","sha256":"32:F9:E6:36:BA:8A:91:05:E3:B1:BC:FF:F8:0B:7A:40:92:09:66:45:59:35:ED:80:76:C4:64:B0:B8:E0:D9:D9"}}},"request":{"raw":"GET /c/hotjar-2651856.js?sv=7 HTTP/1.1\r\nHost: static.hotjar.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-cache-hit: 1\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncache-control: max-age=60\r\netag: W/059f3922ea7bc863e99dec2bd307dcb6\r\nvary: accept-encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0CEX7KARERQ4W6Ya8kz-vZA7ZyYBuLjAa-jVc4x3TJSePEsAUSQG2w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":17472,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13534)","md5":"059f3922ea7bc863e99dec2bd307dcb6","sha1":"aec10ff540c2e4e5a2249cc46c712b0f53d84445","sha256":"69fb65ecd8d6249c74ccf577453df3daa7a88ec1d5e8459b7f5daad8fc0bde86","sha512":"a94efb1ff41bccbe622229e9a1bec6b7c02d574772b55e18c9bcd398068a3eaa7d86ae742a5cbe5eedbdd6d3d80750b48321b20674a7b31a549dfbbe9c9e3675","ssdeep":"384:8KYR1gsbnOPZkOrQ9LvbDE6bLCDOyCE5zbC62:JYb0rGbDEaCDaCn2","tlshash":"bf72d688f199b0b886e76416c47f7707b23d291720489484e29ac1d479afddf9332b7b","first_seen":"2025-08-08T13:08:10.047391Z","last_seen":"2025-08-08T13:08:10.047391Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":16,"dns":7,"connect":1,"send":0,"wait":91,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/New_Year_New_Plan.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/New_Year_New_Plan.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 64220\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 234, 8-bit/color RGBA, non-interlaced","md5":"6de12c39bca80f71a929c34a284eb2cc","sha1":"fe8207124eb43cda296b2b01c6142af662836987","sha256":"1ca54e1f6292eb97915b904620fa16031aa7ce0537dd6e12e742a279b313fb96","sha512":"7cc9bfb737a079454f124f30d6fc98533783d849f8f87bab6d189680a5d110e648b3bf170453692b76ee31b64623c5480622ec5ada5c0c8985757c96d8e9318a","ssdeep":"1536:dA0iflooCqteKXNJ1HQmY3YL7sciiLgY6p:dIfeqtXJ1wf30BVLgTp","tlshash":"795301f6c81d6680ce935e7560e85a137eb175c4b9a409ca3bb1c018eac17c1bf356eb","first_seen":"2024-05-25T03:47:28Z","last_seen":"2026-01-31T20:08:09.198259Z","times_seen":24,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/ios.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/ios.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4885\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 90, 8-bit gray+alpha, non-interlaced","md5":"bef3793b9b9a330f75b84614e2748868","sha1":"f53f8b1cd3edf18fc1c361bd725637c8a4d95e75","sha256":"45b33290a887374b0351ad46d4f1fddc8038b3b805ae11fc1520c732108691a8","sha512":"44bd46783a3e0c30623c6274ac145d25a20100d3786106485b528430d7d4cef78bf29f15b426db182600df67ce8d42031a5b2a9c8afb4146fa51dae8c2a781e6","ssdeep":"96:KOWpH2LjL5eX0V7gC3zuN50vIAJ2tz9sNZWZ4hfpzGmxn6F:hoUQ87gCCH13gZWqfpnVe","tlshash":"fca19f9491d8596cb242103cf7ef262cd6c0c645bc48e0350b7ef669f07595b84d5e4f","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.801678Z","times_seen":138,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/otSDKStub.js/consent/430cf39f-917d-469f-9c6a-0de3834f38d3/430cf39f-917d-469f-9c6a-0de3834f38d3.json","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/otSDKStub.js/consent/430cf39f-917d-469f-9c6a-0de3834f38d3/430cf39f-917d-469f-9c6a-0de3834f38d3.json HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 196\r\nserver: OVHcloud\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-09T01:50:55.931574Z","times_seen":91260,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 19\r\ncf-ray: 96bf3d055a8b56c1-OSL\r\nx-request-id: 2a616798-3d83-40d7-ae9e-0706314c558f\r\nx-transaction-id: 89467951-0cd4-440e-b878-99afe0e5ad6a\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 38\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/7.5f000cafeed9b3b29059.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/7.5f000cafeed9b3b29059.chunk.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3cf9f9bc56c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"b52-18dc302ef70\"\r\nlast-modified: Mon, 19 Feb 2024 20:16:06 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2045)","md5":"7257cfe8ee4cca1fbadcc1f7a8750bf9","sha1":"c09038f8ef5bd2b25ef27e8fe048896ad7be039f","sha256":"8c846cbcf5cc95505d0ea24b569f612c179c70b5ba6d4a6bf48ea8d874ddaca1","sha512":"b4b688bb38adc7d0049f9191751b0eb6efcbf566ceee127064a18e138f75accab077be86d76a7dfed61dd7794a641e3318d6470e2d57d3e47caa67af335df376","ssdeep":"","tlshash":"ee51225df0e6a5a405f734a412bf3783f22b903e211914c43b5da2a07b74587963a7fa","first_seen":"2024-08-20T08:35:49.725325Z","last_seen":"2026-01-31T20:08:09.176798Z","times_seen":10,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":2,"dns":2,"connect":1,"send":0,"wait":32,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/soc-youtube.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/soc-youtube.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 15201\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"c8bdada8e3406cb7f96ca9a3f28977b1","sha1":"dc7ed96e2c5c32999cdd6ada4bfe0b4b93269667","sha256":"3ffbb276d8124704f5a7e0035b5bb87e4adc7a7e4b322ae2ed476ee37ffa7ffc","sha512":"0b3d6c539e49dd02f67c402ba5fbba9333204fec1c85344037abdd5b6905ba5ff6df5c80cdc5255b6293296bf0ef038175b92c4aae2d57c0fd986f5db6bd7621","ssdeep":"48:ju+k29W8sEv4KvNxN+Y9c6BCvG+I7cdpck7Fm46RhTJbYHBQB3p/kzQf:3kEWRIxNX2CcXFp6RlqH+r/Zf","tlshash":"7a62b720bcf23161a98ada312ed53048cc6706c789918d89fedd88a7bf01fe59c4f187","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.805563Z","times_seen":147,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/icons/myArvest.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/icons/myArvest.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/layout2.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/otSDKStub.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/otSDKStub.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6815\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21099)","md5":"f18b357811c039616eb24f0baa46360e","sha1":"7ef528148c7fa2df751baa512f8ea24c84a7c19a","sha256":"5be2dfa172d505acb197760b55c4731347cc239a7a046013c251948bb8214dbc","sha512":"f9498e8904ab5f3bd1d4ff6506007acce1e0a0ec989e3cab9801cb5a3020a0bc3504260b0a97bc90b4ea1f07e66d58916070c5ec0cdcea23d36ba17fc5277284","ssdeep":"384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+xITxMcvn9LuJPvV/:T8wAD5ABwXw+krfflyxUx3n96/","tlshash":"5692f789b100ef3406c3619d5a37e34e3736755d3886d068b899dce0657dd8b3623bb5","first_seen":"2024-02-10T08:48:07Z","last_seen":"2026-03-23T13:23:46.641472Z","times_seen":2103,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/6172babb-2745-4cff-9039-b1406add1ba4/fada2104-882f-43bd-a08d-f4edf8f3a307/3e6cb5bb-d360-42fe-9fb3-5981de87d38f/Arvest_Blue.png","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 20:50:53 GMT","end":"Fri, 31 Oct 2025 21:50:50 GMT"},"fingerprint":{"sha1":"FF:32:5C:59:52:BE:FB:87:30:3C:92:2F:E9:22:F8:2C:0A:7B:95:A4","sha256":"6A:B0:43:BA:D0:F7:C8:16:F0:EB:73:D7:6E:2D:27:54:22:CF:D1:13:AE:C3:FC:25:12:42:C2:5C:30:56:47:85"}}},"request":{"raw":"GET /logos/6172babb-2745-4cff-9039-b1406add1ba4/fada2104-882f-43bd-a08d-f4edf8f3a307/3e6cb5bb-d360-42fe-9fb3-5981de87d38f/Arvest_Blue.png HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 13471\r\ncf-ray: 96bf3cf9ef6e5693-OSL\r\ncontent-md5: iH4kUmdFlsukv4aqm9ptKg==\r\nlast-modified: Wed, 14 Jul 2021 13:55:36 GMT\r\netag: 0x8D946CF0E6BDBA3\r\nx-ms-request-id: e762046c-d01e-0063-4e62-f7d5af000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 40380\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 774 x 270, 8-bit/color RGBA, non-interlaced","md5":"887e2452674596cba4bf86aa9bda6d2a","sha1":"58657ca3b5d3e8a03174311304a9265639c6cfcc","sha256":"d8dfec6b2ebf53eb2ed27513f1a17f035f59b9c854c193cd3884273e5d9104a0","sha512":"5da9e6eac4fcabba4372752e3dfb2e8f0924a32b93dd088cd9e11c1fc2d96adf7660d554e984e28ff26a3ced6464c2db0359c7922e125d8ff5890876bd690254","ssdeep":"192:NezPcp0lGXpIOddALi8A7n2wH5tjCSnYpaNiWZ+Yn22BvNib6yT:sDcJqaye8A2wZ9CSYpaHZ+YnBk","tlshash":"a652d0e10da75e9d5f431dbb76c70b937d1a0798e807f4721176c40586cb28837a653e","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-03-26T14:12:13.403027Z","times_seen":79,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img/wr-dialog-close-btn-black.png","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /static/q-siteintercept/87b1e226c58fe48d0a26070da0726c00f5a08139/img/wr-dialog-close-btn-black.png HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://maika-redaction.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96bf3cfd2e3956c1-OSL\r\ncache-control: public, max-age=31536000, immutable\r\nlocation: /static/q-siteintercept/.blob/903d4c43fed535fb4d325b1612c605e48417dc74_wr-dialog-close-btn-black.png\r\nx-request-id: a96fb6f3-9a12-4700-a167-5ce4639a20e1\r\nx-transaction-id: ad77c015-db80-4993-a18f-c2fa7123a4ae\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 62347\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws.hotjar.com/api/v2/client/ws?v=7\u0026site_id=2651856","fqdn":"ws.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"54.195.44.193","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M02","organization":"Amazon"},"validity":{"start":"Wed, 08 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:14:24:8E:23:3C:18:28:FD:00:2B:49:9E:5E:08:D3:7F:05:95:8E","sha256":"E3:DE:6C:CA:67:14:68:B7:98:FB:A7:AB:D9:C6:5D:1F:65:3F:D4:04:BC:66:60:32:06:69:5F:06:EB:BC:47:BB"}}},"request":{"raw":"GET /api/v2/client/ws?v=7\u0026site_id=2651856 HTTP/1.1\r\nHost: ws.hotjar.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://maika-redaction.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: UIo1B4I8hmME7ktR7quOdg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 08 Aug 2025 13:07:43 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: oRRW5fzPtQMCddpQ5A8Kovkfks4=\r\nSec-WebSocket-Extensions: permessage-deflate\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":171,"connect":203,"send":0,"wait":34,"receive":1,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1480404905.1754658463\u0026dt=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026auid=2004641207.1754658463\u0026navt=n\u0026npa=1\u0026gtm=45He5861v811537095za200zd811537095\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tft=1754658462654\u0026tfd=1216\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1480404905.1754658463\u0026dt=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026auid=2004641207.1754658463\u0026navt=n\u0026npa=1\u0026gtm=45He5861v811537095za200zd811537095\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tft=1754658462654\u0026tfd=1216\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://maika-redaction.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":101,"dns":0,"connect":7,"send":0,"wait":17,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td.doubleclick.net/td/rul/11451864523?random=1708832324990\u0026cv=11\u0026fst=1708832324990\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be42l0v9174033411za200\u0026gcd=13l3l3l3l1\u0026dma=0\u0026u_w=1366\u0026u_h=768\u0026url=https%3A%2F%2Fwww.arvest.com%2Fpersonal%2Fsignon%2Flogon\u0026ref=https%3A%2F%2Fwww.arvest.com%2F\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026npa=0\u0026pscdl=noapi\u0026auid=1693504877.1708731724\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B122.0.6261.57%7CNot(A%253ABrand%3B24.0.0.0%7CGoogle%2520Chrome%3B122.0.6261.57\u0026uamb=0\u0026uap=Windows\u0026uapv=10.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config","fqdn":"td.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:01 GMT","end":"Mon, 29 Sep 2025 08:34:00 GMT"},"fingerprint":{"sha1":"77:90:8A:63:92:D5:A2:9C:51:72:8D:31:BA:51:0C:62:22:0B:E4:B5","sha256":"98:D8:0B:65:3D:03:15:D7:D1:F0:54:2F:83:3A:99:BE:77:05:F4:95:D2:BD:1B:1F:8C:85:17:45:68:18:36:1C"}}},"request":{"raw":"GET /td/rul/11451864523?random=1708832324990\u0026cv=11\u0026fst=1708832324990\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be42l0v9174033411za200\u0026gcd=13l3l3l3l1\u0026dma=0\u0026u_w=1366\u0026u_h=768\u0026url=https%3A%2F%2Fwww.arvest.com%2Fpersonal%2Fsignon%2Flogon\u0026ref=https%3A%2F%2Fwww.arvest.com%2F\u0026hn=www.googleadservices.com\u0026frm=0\u0026tiba=Arvest%3A%20Personal%3A%20Arvest%20Online%20Banking%3A%20Online%20Banking\u0026npa=0\u0026pscdl=noapi\u0026auid=1693504877.1708731724\u0026uaa=x86\u0026uab=64\u0026uafvl=Chromium%3B122.0.6261.57%7CNot(A%253ABrand%3B24.0.0.0%7CGoogle%2520Chrome%3B122.0.6261.57\u0026uamb=0\u0026uap=Windows\u0026uapv=10.0.0\u0026uaw=0\u0026fledge=1\u0026data=event%3Dgtag.config HTTP/1.1\r\nHost: td.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 16\r\nx-xss-protection: 0\r\nset-cookie: test_cookie=CheckForPermission; expires=Fri, 08-Aug-2025 13:22:42 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"c83301425b2ad1d496473a5ff3d9ecca","sha1":"941efb7368e46b27b937d34b07fc4d41da01b002","sha256":"b633a587c652d02386c4f16f8c6f6aab7352d97f16367c3c40576214372dd628","sha512":"83bafe4c888008afdd1b72c028c7f50dee651ca9e7d8e1b332e0bf3aa1315884155a1458a304f6e5c5627e714bf5a855a8b8d7db3f4eb2bb2789fe2f8f6a1d83","ssdeep":"","tlshash":"db6000cc3000000000000c000cc00300030c00c00000c00030c00c3c000030c0c00000","first_seen":"2023-03-10T03:13:12Z","last_seen":"2026-04-08T18:21:18.456262Z","times_seen":741,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":83,"dns":3,"connect":15,"send":0,"wait":38,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/favicon.ico","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/favicon.ico HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nCookie: _gcl_au=1.1.2004641207.1754658463; _ga_GRH26TKW0W=GS2.1.s1754658462$o1$g0$t1754658462$j60$l0$h0; _ga=GA1.1.1056423113.1754658463; _hjSessionUser_2651856=eyJpZCI6IjMyMWJhY2FjLTM0NDEtNTc2My1hNDhmLTU0ZGVjNzJmMTgwNSIsImNyZWF0ZWQiOjE3NTQ2NTg0NjMxODgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2651856=eyJpZCI6ImQ3YjdjNzhhLWZkZWEtNGIyMC05MzNlLWFlMGY5OTM1OGRjNyIsImMiOjE3NTQ2NTg0NjMxODksInMiOjEsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxfQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/fdic-logo.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/fdic-logo.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 916\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 23, 8-bit/color RGBA, non-interlaced","md5":"800553ff197a72440416efc73af23684","sha1":"dede91df387cb2af03b09ab56050ebd5648087c4","sha256":"4bf5ca21167bd44e7b547a5c908f0cb82a9420f0b4927ff1ded1232446f6f17e","sha512":"cd035dd766440261c46b345836e77719fde002d4102d96c2a52b7395f011826b2de89f094dd114b8ee32927500cb6f8f179726905370f19bc55131729c9e5bbe","ssdeep":"","tlshash":"e51180eb28a41a29c723df222052d6a43282730c0f55ea65e79298ab40a225821a028b","first_seen":"2023-05-29T23:35:48Z","last_seen":"2026-04-04T13:17:57.783209Z","times_seen":140,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest-file/pijs/pd.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest-file/pijs/pd.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js","fqdn":"script.hotjar.com","domain":"hotjar.com","tld":"com"},"ip":{"addr":"3.167.2.39","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hotjar.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 22 Apr 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:D4:01:7C:02:B6:29:EB:F2:9D:13:9E:7A:B8:C6:D7:A4:C2:B1:A4","sha256":"32:F9:E6:36:BA:8A:91:05:E3:B1:BC:FF:F8:0B:7A:40:92:09:66:45:59:35:ED:80:76:C4:64:B0:B8:E0:D9:D9"}}},"request":{"raw":"GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1\r\nHost: script.hotjar.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1879\r\ndate: Fri, 02 May 2025 05:50:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"e43a1d5a93a840022c2aefdbeb6580e0\"\r\nlast-modified: Tue, 29 Apr 2025 12:34:27 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-robots-tag: none\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: xMji7sqryskqKM-6Hp86hYkmmuNTMAFZf2BgCruSbCHM2d7vAN5XFw==\r\nage: 8493425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5523,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5258)","md5":"f819e6a24172e252f3319d35af359c38","sha1":"977464903d9b9a0f3dfe57e89c11c6163bdf5c16","sha256":"12027c36625dfbc639cf70056668ed9dd53781c1c4961e746d6fe6f1225a9e63","sha512":"b179662943e7eff7b937a61ff926261bac1495e474a1eb65dcb4c9232edac2262e984157173f373095c150a287c6a5570bf7c332b4cd5f2d04e4804f094237e5","ssdeep":"96:Q395qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:q5TdCpFqImxZ5NvAE/9PipDwEOddh","tlshash":"0bb1a7dcf990b067ca676031883f130a733a75425459c074b27a89e5acf86ded723f69","first_seen":"2025-05-21T01:08:04.685151Z","last_seen":"2026-03-24T11:35:44.957206Z","times_seen":325,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.1.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3cf9f9b056c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"fefc-18dc302ef70\"\r\nlast-modified: Mon, 19 Feb 2024 20:16:06 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62901)","md5":"7083c9ce7d1a1a7efdbd6c21e56ef68f","sha1":"a94d0df5371424d0c00e57b8cf6aa5d2404b72ba","sha256":"3cc526c4456816f958583d3d70c99c2fef5dcbae92e6f5c134b6993c8dc108a4","sha512":"e634eff4ae2ae4b4955b13cdb2ab51a54dd951a6048ce236a08e8193ea640c2abbe7e12936717feccfe9a4865cad7c5885f274237f08530207feb1b3ae43266a","ssdeep":"768:4lg9tyqHoPcYSzpen3JY74fq12KQcCh2GbjynzSJCcZa:4luT8olR73qg","tlshash":"b953d7c9f691b4e942e7b1f1407f960ef17aa824b45a99c0d16ad5d0bcb884e8137f3c","first_seen":"2024-10-21T23:44:43.993781Z","last_seen":"2026-01-31T20:08:09.182437Z","times_seen":9,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_Impress=1\u0026Q_CID=CR_6u0MmncjsLPdtpY\u0026Q_SIID=SI_01JDqG39AUPDXfw\u0026Q_ASID=AS_30008237\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026r=1754658463467","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"POST /WRSiteInterceptEngine/?Q_Impress=1\u0026Q_CID=CR_6u0MmncjsLPdtpY\u0026Q_SIID=SI_01JDqG39AUPDXfw\u0026Q_ASID=AS_30008237\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026r=1754658463467 HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 81\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://maika-redaction.com\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ntrace-id: f3db644fa99c564b\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 96bf3d04c9a856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e5c00062ce9ca8bd8668c90871d906c9","sha1":"59f541be5106245360d02d3ddb4c9bf0fa90baf7","sha256":"f47f21063dfdcbdeffed3d97689b45efae7a52401cd7fc5b8d07c42d2f232ab9","sha512":"e24c4c92aef616ea91af71d69694c8b914686c186c73c2bcf707925e96b2232bd2ccdd9e9dd27e150a3e143b506f45140bbc7d7f31df87c79cf4d867eaefb5a8","ssdeep":"","tlshash":"26900266d82019d805868002ac11246e1998004510402021908f945087484021746114","first_seen":"2023-04-06T16:01:17Z","last_seen":"2026-04-09T01:05:10.505621Z","times_seen":4972,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/css/bootstrap_custom.css","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/css/bootstrap_custom.css HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 14579\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105619,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (540), with CRLF line terminators","md5":"353b7448905c0f1298dee3c9e90631ca","sha1":"e14a48801e2fad8577fa1d658a8ddf7ecee85adb","sha256":"49650fcab47a18d13c5cd1695d95c5679f2610af77aaea816b0db65f046b1ad8","sha512":"3a0e77d2f7f5fb7f0a437a1b3ed9a6e483f7672217e51ae67d47aad8611af99fceceff920fb4f23c4c0e89560978a25addd5dfe948ab5eb67d14f31b4d80c6d5","ssdeep":"768:AXhr1KeBRr5YP8atO7uH7Oznzy+ycHZVx3b/rGqegu2id7twVvwXKeTzuzIFWDHW:Yrc4VvwXKeh0KjfiogLtjQ","tlshash":"2ea38348ea1235c7a533cb2877a38e43ff011023da5a8976bfdd56a04f785594622f8f","first_seen":"2024-10-21T23:44:43.836283Z","last_seen":"2026-01-31T20:08:09.205552Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/icons/lg/custserv.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/icons/lg/custserv.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/css/layout2.css\r\nCookie: _gcl_au=1.1.2004641207.1754658463\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: OVHcloud\r\nx-powered-by: PHP/7.4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"PHP:7.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"px.ads.linkedin.com/collect?v=2\u0026fmt=js\u0026pid=6159052%2C7175113\u0026time=1754658463256\u0026url=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026tm=gtmv2","fqdn":"px.ads.linkedin.com","domain":"linkedin.com","tld":"com"},"ip":{"addr":"150.171.22.12","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.linkedin.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 16 Mar 2025 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"EA:ED:61:47:7E:F0:E7:48:47:58:C7:BA:C8:F0:07:3B:88:95:A9:72","sha256":"75:5F:4C:98:A1:71:8E:9D:EF:EA:19:C3:E1:2D:C3:20:6D:97:97:F6:93:5C:E4:8E:6F:C5:EE:91:25:20:99:9D"}}},"request":{"raw":"GET /collect?v=2\u0026fmt=js\u0026pid=6159052%2C7175113\u0026time=1754658463256\u0026url=https%3A%2F%2Fmaika-redaction.com%2Farvest%2F\u0026tm=gtmv2 HTTP/1.1\r\nHost: px.ads.linkedin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: bcookie=\"v=2\u002664b01fb6-34d2-49c1-8c78-1da023a052c2\"; Domain=.linkedin.com; Expires=Sat, 08-Aug-2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nli_gc=MTswOzE3NTQ2NTg0NjM7MjswMjGijRWY3nw27LHdy1IyZErYVP29XNCOl1RcnLcltU7d3Q==; Domain=.linkedin.com; Expires=Wed, 04 Feb 2026 13:07:43 GMT; Path=/; Secure; SameSite=None\nlidc=\"b=TGST09:s=T:r=T:a=T:p=T:g=3089:u=1:x=1:i=1754658463:t=1754744863:v=2:sig=AQE-sNNtVIIlasi8yD64OPPqrrR4Yj90\"; Expires=Sat, 09 Aug 2025 13:07:43 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure\r\nlinkedin-action: 1\r\nx-li-fabric: prod-ltx1\r\nx-li-pop: afd-prod-ltx1-x\r\nx-li-proto: http/2\r\nx-li-uuid: AAY72kJolN3mw/yIIbIrFg==\r\nx-cache: CONFIG_NOCACHE\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-msedge-ref: Ref A: 1A7D903BF73048A5A84330D82C4452F8 Ref B: OSL30EDGE0108 Ref C: 2025-08-08T13:07:43Z\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/Prequalify.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/Prequalify.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 54948\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 234, 8-bit/color RGBA, non-interlaced","md5":"3b881393376a19434318fa51463ee398","sha1":"4fceff00efb18481c79821b7f3daf323cfe2431e","sha256":"5a2786c9431c351e8ad9aeb0d1751c442098836a7e54acd032307eb11546ca34","sha512":"95ec031987e89aa5f7a339f23a75f7ca5081ed1bab370cbc49b8997f49ddf53d315353d0c97990dbd2681a9553868c83ecb4455b4197044f581caf57b6e45d5a","ssdeep":"768:FKzErFOijgGa/2k5FU1v+g50zbVIwAJPRv7vx6XU+I3d0VmZwgqN3XL2RHdd9SmR:FKHi0/X5KhOnTwb6EOsZwguyR9dLRT","tlshash":"b433f19987279405fe628db4e44c1a1b65b5630a69c0dbcd2176d0827fc1fa223f839f","first_seen":"2024-05-25T03:47:28Z","last_seen":"2026-01-31T20:08:09.188137Z","times_seen":24,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/bootstrap_custom.min.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/bootstrap_custom.min.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4307\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8079), with CRLF line terminators","md5":"a2d738fc9039f713dac809642eb8784a","sha1":"cf913245a85a5782bb16cdd3f74f8be6971b6a9f","sha256":"7cb7d45abdb6a6b76a257b2065c376ebd1bdb616549796a226672c0efe26712f","sha512":"6fd4921723c25b6bcc5f980a248465882f5e7211f13a9f5f2d3c366605819e48da39356461dc1f4d555edc6d661d34af0fdf9bbcdf6ec942bec69f2b65a12cf8","ssdeep":"384:4RA/0rv3LG8YKWubYXWI+0Y+sVR22UrC7/LF9:4RA/0rv3LG8Eu0XS0+R2ozF9","tlshash":"13528646b361326083dbf2b1015f010db23aab7cea86915c3d64dae27c72c487527f7a","first_seen":"2024-10-21T23:44:43.853961Z","last_seen":"2026-01-31T20:08:09.198968Z","times_seen":10,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TGPDH6G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtm.js?id=GTM-TGPDH6G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nexpires: Fri, 08 Aug 2025 13:07:42 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Aug 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1341:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1341:0\r\nreport-to: {\"group\":\"ascgcycc:1341:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1341:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 164804\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":561182,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49987)","md5":"c8890e2218a9196c10f6cf306797b200","sha1":"cacbf3b6e6043b1db967f418f675e0e1c122eb32","sha256":"3bb9139577c36524d78e997c788705062beffe9202b2ba11124aea9e09971ef5","sha512":"56c4592b45a5caff7d5eb9c71d14653f2e7de56b3f416eff35915c8d4375dde88f74ef0f9ae48cf48198de2d279654e2564ec47b90547ada18844f476fc16e63","ssdeep":"6144:Dl0aW69Wf25cxT2X4dpLSAyev+OE5GT2PG6B4xwhSdZN:h052ATbZlQmwI","tlshash":"7ac408cdb385747ac3a6a575803f054a653e24f3b58ca850f099c8e42e7457e2263fbe","first_seen":"2025-08-08T13:08:10.10271Z","last_seen":"2025-08-08T13:08:10.10271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":85,"dns":0,"connect":8,"send":0,"wait":52,"receive":25,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.licdn.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Fri, 12 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"79:D6:4B:9C:B6:FE:66:4C:08:64:D7:B0:7C:05:D9:7F:B7:5B:41:CA","sha256":"E1:E1:F9:58:9B:F3:C3:BB:E2:CE:9E:C3:F9:DC:6F:82:A3:90:3E:F7:B6:2A:30:61:AB:47:C5:14:C7:58:89:05"}}},"request":{"raw":"GET /li.lms-analytics/insight.min.js HTTP/1.1\r\nHost: snap.licdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 05 Aug 2025 10:13:29 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 767\r\nx-cdn-proto: HTTP2\r\nx-content-type-options: nosniff\r\nx-cdn: AKAM\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1516)","md5":"9884b15a5a2019aa8caa3f9c65471dc8","sha1":"07dcfac9bb489e124420bf8b3aa92d5b1c443539","sha256":"9425520ff17098ace2d51bb026d8db9cef803ac1aca34f32a676f40e3ae90f01","sha512":"8171d49bd71653177f13b10c2f5a160b58b685057ec6ceaa874c46c75501b82dca6411ca6b9d39e95a8384233d25d6ddef3093f158efded28610ecc1a18c5f0a","ssdeep":"","tlshash":"383110a8324ab63b13813839692f6c80f03e375a383c08e9d45199d22d25a4bb09e774","first_seen":"2025-08-06T09:13:50.384538Z","last_seen":"2025-11-16T03:12:44.591229Z","times_seen":76,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":4,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /dxjsmodule/FeedbackButtonModule.js?Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BRANDID=arvest HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 96bf3d0428ac56c1-OSL\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"1a35c-1980f029fd8\"\r\nlast-modified: Tue, 15 Jul 2025 16:54:47 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 211573\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107356,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63257)","md5":"7d1e2f592556532590546d5a0efdea33","sha1":"70eb5939ba906b0dec772693300c068ac97062e2","sha256":"393e7ba69383b11440e5010e017d7b6ffd04c8dc379a74195e07baf3a0945fd1","sha512":"68277e3abcb920ec67fedf29aee2adf73b514de635d93689cf99e1e7718ec56844bcf681a25b3e15904db603bc2c99c34b7a506ec176a7401b092b1b530411d4","ssdeep":"1536:4gzeMUtn2dSWjDHYrX68dgdBYHAX1LTag2MfiWFE04tziCxJg3O4lYrWb30FjpnO:4IeMVjDHY28tHAsJtJ3H0gZta7","tlshash":"b1a31788b642b4ea47eb30f9503f460ab13a6428b10a95d5f9acd5d56bb8c4e4073f7c","first_seen":"2025-07-16T17:59:54.812789Z","last_seen":"2025-08-14T17:33:04.584605Z","times_seen":118,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/js/aob-search.js","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/js/aob-search.js HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2019\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9081,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"41aadafc0c79b10eb389ea2924865914","sha1":"b0370682143b2c443df24ca9aa9ee8e6d3f64df0","sha256":"e2dc701dd8b23048c0e3b2483583dda42b19f10f9b1c35ce2a60312742734d11","sha512":"f0f47d95fcacf22d9a367c0f6b89fcea9ad767a8013ae2705200ea6cd46b9947aa4275197496e31fceb323bc50578c3eb0cf91c75c0bd4d1ab37f4fcf4b9e816","ssdeep":"96:+7d54bx8WoeXjGOKeAqn8WFHpjG6vFHg+NSfFaPbzn:+34dpHtvFAAbzn","tlshash":"10126f55371d98c651a8422f443f9800dd2ce177a20d4462fcbeaf45fff990863d9ab6","first_seen":"2024-10-21T23:44:43.850643Z","last_seen":"2026-04-01T18:09:23.824482Z","times_seen":12,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202307.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 20:50:53 GMT","end":"Fri, 31 Oct 2025 21:50:50 GMT"},"fingerprint":{"sha1":"FF:32:5C:59:52:BE:FB:87:30:3C:92:2F:E9:22:F8:2C:0A:7B:95:A4","sha256":"6A:B0:43:BA:D0:F7:C8:16:F0:EB:73:D7:6E:2D:27:54:22:CF:D1:13:AE:C3:FC:25:12:42:C2:5C:30:56:47:85"}}},"request":{"raw":"GET /scripttemplates/202307.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 99815\r\ncf-ray: 96bf3cf9df695693-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: orDm7smwsr/pjTi/DOTSGQ==\r\nlast-modified: Wed, 02 Aug 2023 03:24:04 GMT\r\netag: 0x8DB9307EC3B2CDE\r\nx-ms-request-id: 741049e6-001e-002e-0303-58134d000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 38614\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":414625,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"0a3bf4c4852fc9d4e0c2cfff73f161d2","sha1":"1ee8b1e15b3f5544f92696745ae068f5c451d7d5","sha256":"71d07479f4b2b809e5769a352f4f55b84690289026ace7ed5395230002551a11","sha512":"838ca2b5ecfa64abdde59164c2157066076ddeae630c35b4b315d5d415d1c5ee1b711c25232722d246bf5101746203fb60cc62169b87779f9f684568130f6e54","ssdeep":"6144:Uvm4OU/xiO9qbYUo6ULWgWAG9wE7qAHHoaS/R8DwP33cA0s:wZ/xiO42WwE7qP/Rie","tlshash":"9994184a75a0753583e752b9c02b454eb63138adac5580acf01cc5f90bf9f861e93fab","first_seen":"2023-08-02T19:12:49Z","last_seen":"2026-04-08T05:51:01.956188Z","times_seen":1641,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":39,"receive":4,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRSiteInterceptEngine/Asset.php?Module=SI_01JDqG39AUPDXfw\u0026Version=67\u0026Q_ORIGIN=https://maika-redaction.com\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BrandTier=\u0026Q_ARCACHEVERSION=21\u0026Q_BRANDDC=iad1","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /WRSiteInterceptEngine/Asset.php?Module=SI_01JDqG39AUPDXfw\u0026Version=67\u0026Q_ORIGIN=https://maika-redaction.com\u0026Q_CLIENTVERSION=2.33.0\u0026Q_CLIENTTYPE=web\u0026Q_BrandTier=\u0026Q_ARCACHEVERSION=21\u0026Q_BRANDDC=iad1 HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://maika-redaction.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 96bf3d0428b056c1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=604800\r\ncontent-encoding: gzip\r\nedge-control: max-age=604800\r\netag: W/\"1371-hB1V+DbTWcUpoj9U9CYrCbOMhzc\"\r\nvary: Accept-Encoding\r\nx-request-id: 71772135-a7f3-45d2-9c3e-926b98f2e667\r\nx-transaction-id: d13e0864-6575-442d-8bb4-f9c0071a7a49\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 85336\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4977,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"11d6bf1088f51a1e5864a8d66d5706ba","sha1":"841d55f836d359c529a23f54f4262b09b38c8737","sha256":"c8ac3861345c28152c466fe5de0bda8cc2b186020d4bcecd48f17db710176fce","sha512":"3df1fd30fd0e5f064545b2918112025a5525cd7804c4dd2c68a4215ac1d804495f40c73b3fd9ed320107f18b6a6826ac9d4e9ae736728f5adae9425f8c0df292","ssdeep":"96:OSAJSkma1FjjN88I0Zpg8WTY5H2PlvriD:HdHa1FjjN88I0Zpg8WTY5H2PlvG","tlshash":"39a1721db502392cc0ab712cabb65735313929ac12441c087c4f8aac57ee6781be97fa","first_seen":"2025-06-01T13:04:51.203971Z","last_seen":"2026-03-26T14:12:13.420486Z","times_seen":30,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siteintercept.qualtrics.com/WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png","fqdn":"siteintercept.qualtrics.com","domain":"qualtrics.com","tld":"com"},"ip":{"addr":"104.17.208.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qualtrics.com","organization":"Qualtrics International Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Fri, 02 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:C9:A1:C5:70:5D:82:3F:EF:20:E9:12:CD:26:D9:C7:F8:83:68:D6","sha256":"C1:D2:10:3C:78:5A:7C:E1:89:F3:C5:E0:07:19:F4:CB:E2:8F:B2:E2:B2:FA:39:2B:DC:39:23:F7:F2:1F:F2:7D"}}},"request":{"raw":"GET /WRQualtricsShared/Graphics/siteintercept/wr-dialog-close-btn-black.png HTTP/1.1\r\nHost: siteintercept.qualtrics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 96bf3cf9f9b656c1-OSL\r\ncache-control: public, max-age=30\r\nlocation: /static/q-siteintercept/~/img/wr-dialog-close-btn-black.png\r\nx-request-id: 14acb23f-7506-427e-a1a3-eed1afee1689\r\nx-transaction-id: 1e710e7b-79bb-42c2-920f-37834e212301\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npermissions-policy: camera=(), geolocation=(), microphone=()\r\ncontent-security-policy-report-only: frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report\r\ncf-cache-status: HIT\r\nage: 14\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T01:38:06.881517Z","times_seen":13521868,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-GRH26TKW0W\u0026cid=1056423113.1754658463\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026z=1385132061","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:43.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:36:51 GMT","end":"Mon, 29 Sep 2025 08:36:50 GMT"},"fingerprint":{"sha1":"5F:6E:88:84:0D:03:06:C9:1C:FD:3B:27:60:0A:E4:F1:38:44:0C:17","sha256":"E7:9E:7F:BF:9C:B7:AD:C0:57:A6:D9:DE:DB:56:01:D6:5D:91:C7:10:F3:88:D7:BE:AE:36:96:71:3F:99:51:24"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-GRH26TKW0W\u0026cid=1056423113.1754658463\u0026gtm=45je5861v9180705104z8811537095za200zb811537095zd811537095\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026z=1385132061 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 08 Aug 2025 13:07:43 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-09T01:38:55.095622Z","times_seen":781077,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":89,"dns":0,"connect":24,"send":0,"wait":35,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maika-redaction.com/arvest/images/Credit_Card.png","fqdn":"maika-redaction.com","domain":"maika-redaction.com","tld":"com"},"ip":{"addr":"213.186.33.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maika-redaction.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Jun 2025 05:51:38 GMT","end":"Sat, 30 Aug 2025 05:51:37 GMT"},"fingerprint":{"sha1":"F1:7F:48:A5:9C:26:FE:58:25:82:31:48:E7:FF:7E:D2:94:B0:2C:FF","sha256":"30:30:7B:B9:5C:4B:1D:5C:1C:52:F1:98:AD:17:1D:DD:B7:39:85:EF:41:2D:34:E5:8A:9E:63:9B:F9:34:84:D2"}}},"request":{"raw":"GET /arvest/images/Credit_Card.png HTTP/1.1\r\nHost: maika-redaction.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/arvest/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 41733\r\nserver: OVHcloud\r\nlast-modified: Wed, 22 May 2024 15:17:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=900\r\nexpires: Fri, 08 Aug 2025 13:22:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 234, 8-bit/color RGBA, non-interlaced","md5":"7466c902a789792898c3ec030245b5b4","sha1":"b7351538f34bfca459f7df0f0c70d05aaeafff71","sha256":"f804babf0378097f340f8d1e6ec81e0909cf8f6e40c25f18ddc890f8cf6ddf1b","sha512":"e36cb2b70d513e934fccf53bcf968e10c587e46700473f66ba7a4c978a87a8c046b55eb27ac7daff6f48ac95e81a4c057cca5214d52d12d2cd4d1054f25766f6","ssdeep":"768:/dlzEjFOiuS17+1l7XoiK3LKRtE09Mi3OiAYUL1kiroVLmdlRP:1lZipJ+1ljoiK3cK0V8tLjgmh","tlshash":"e313f1f78a820857de44533476d0c8a3d9f1b38bb5d947874272ca131e82ba496ec773","first_seen":"2024-05-25T03:47:28Z","last_seen":"2026-01-31T20:08:09.220809Z","times_seen":24,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-08","alert":"Sinkholed","trigger":"maika-redaction.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-08","alert":"Phishing - Arvest Bank","trigger":"maika-redaction.com","verdict":"phishing","severity":"medium","comment":"Arvest Bank","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:41.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 20:50:53 GMT","end":"Fri, 31 Oct 2025 21:50:50 GMT"},"fingerprint":{"sha1":"FF:32:5C:59:52:BE:FB:87:30:3C:92:2F:E9:22:F8:2C:0A:7B:95:A4","sha256":"6A:B0:43:BA:D0:F7:C8:16:F0:EB:73:D7:6E:2D:27:54:22:CF:D1:13:AE:C3:FC:25:12:42:C2:5C:30:56:47:85"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Aug 2025 13:07:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Thu, 07 Aug 2025 19:32:52 GMT\r\nx-ms-request-id: 253f041b-501e-00be-47e6-078601000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 39273\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 96bf3cf9ef765693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-04-09T01:33:56.235101Z","times_seen":118221,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snap.licdn.com/li.lms-analytics/insight.beta.min.js","fqdn":"snap.licdn.com","domain":"licdn.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maika-redaction.com/arvest/","date":"2025-08-08T13:07:42.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.licdn.com","organization":"LinkedIn Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Fri, 12 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"79:D6:4B:9C:B6:FE:66:4C:08:64:D7:B0:7C:05:D9:7F:B7:5B:41:CA","sha256":"E1:E1:F9:58:9B:F3:C3:BB:E2:CE:9E:C3:F9:DC:6F:82:A3:90:3E:F7:B6:2A:30:61:AB:47:C5:14:C7:58:89:05"}}},"request":{"raw":"GET /li.lms-analytics/insight.beta.min.js HTTP/1.1\r\nHost: snap.licdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maika-redaction.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 05 Aug 2025 10:13:28 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 08 Aug 2025 13:07:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\ncontent-length: 17966\r\nquic-version: 0x00000001\r\nx-cdn-proto: HTTP3\r\nx-content-type-options: nosniff\r\nx-cdn: AKAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50615)","md5":"82d68d726db82c099d64929072ff5c7c","sha1":"e2decfcce41eb9b41179beb118057af83e3de17f","sha256":"40275adcd50ab16d5f98f8bb6680cf80c89484ad400cc117bf516ddbbaccf266","sha512":"afb9a351b79c397d9b4d901b0c16d4822bf2b6d9d90b2b09f7b58402effdf9ce1e66963ad9d0760e56b9d3cac00f65a7b91355939e207eb0aae5a7010ae18d43","ssdeep":"768:f8XGPoIqKIW3C2EndxOT9PzG47WUwc41ldh7vQpdxJYXC2TGVDrC9txNl8zlJ:f8XGcs9tzjqf7vafJY1TKC9txN6/","tlshash":"f033c5d872c3b02647a774a5447f114af23eae55a85c9860d012f8953cbca4fd27bebc","first_seen":"2025-08-08T08:41:07.676759Z","last_seen":"2025-08-08T18:30:33.064912Z","times_seen":38,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}