{"report_id":"58fefac0-b2f7-4ac2-9383-4eb6b0ed6c44","version":0,"status":"done","tags":[],"date":"2026-07-01T07:04:43Z","url":{"schema":"https","addr":"axicorviasavebk.com","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"title":"axicorviasavebk","dom":{"size":63465,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (415)","md5":"40e0108242cb1a2d212558385f5323f6","sha1":"ec4815984e13a7ccd8ca0d3b920629bcf18a702c","sha256":"7e199c9a4c4a312f53e4249b99f2f8639fe3a29f248e766b09b17b480019646c","sha512":"ff38b7fcdf3ecee6aa811a528feedc4d70e893febc43dbc1363104cd58da38cf232ed0443cfad8392a4f6776a346d45fd568f25d48083707dad5b1e63c5e0379","ssdeep":"768:IZOOOO0TdBbcbsblbOMOerbzHFTSKQOJx7IG/FkWCPlD:IZOOOOoYMOGtSKQ47ICCWCF","tlshash":"b2532b22a5f5123b01a380d27aa56f0bafe9e10bda1f065876bd4bd81fd3d82dc5711c","dom_hash":"domhashd30e9b5ebf49d67445d157e0a079714b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"axicorviasavebk.com","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T07:04:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"axicorviasavebk.com","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-06-27","domain_rank":0,"first_seen":"2026-07-01T07:00:09.77371Z","last_seen":"2026-07-01T07:00:09.77371Z","alert_count":49,"request_count":49,"received_data":1657103,"sent_data":60060,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-06-29T06:43:11.150529Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-06-25T20:58:53.992168Z","alert_count":0,"request_count":1,"received_data":23850,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/owl.carousel.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","size":61379,"data":"","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-07-01T07:04:49.855302Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"47763bd7f2dd1f4382d08390fd57543e","sha1":"02f9384db4fd1fc4fef099f30effdcf8b02ea405","sha256":"1cf5fc2e8152dd9de806c0f5cc4c3c8c643af4e766904af5351130f4803851b9","sha512":"77b376186666c380bccf3334c2ffb50b204ae71534294d2dfc65b9d4d12d1f961df14c14e6359a67b6d2c5d8325d7c6335b24af0a4f7b09d89aa28c0531de57d","ssdeep":"","tlshash":"f9c08c188032a078000a210c8ab92292322041e70e163d24b39d544a0f0aa4f43b929c","size":175,"data":"","first_seen":"2026-05-25T21:59:04.609021Z","last_seen":"2026-07-01T07:18:24.386649Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dabcb7c866bade5fee6f6a6e89886f7","sha1":"d974c31b160e248f439f9e46f72091bf6cf0c8e8","sha256":"9d5c4d1151d896532620efed784aed33822ebcc45034332abd5a7b967ac2b4e5","sha512":"ff49e1bc6e0648efb17bb2471e39a6d049e80dac585655b870ba2588a777266cfa37cd7a55b58f748a1463552bedd762ea66a65b3f240375ad5293da64193e87","ssdeep":"","tlshash":"e2f02dd979a704b4dd5bf03e4bba22a522658e0b2805e1123d5ea5225f44a41827dff8","size":630,"data":"","first_seen":"2026-06-09T08:18:36.748079Z","last_seen":"2026-07-01T07:04:49.868467Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bac68ffaeac66a0d7cd81022a192ea3","sha1":"af901c0d1c9de7760dfbc43cbb859dbeac1cb84e","sha256":"367f8d6049c8a83bf6b2ca055538e2f353de323f2853604847adc27e6d00e179","sha512":"f5569040f6a67c20e19d13f5ee8f1590d08a016bcc482c19483e19e326c931e095fd4fdd5e0dc4d4de4713bcf0c993b95ae6b3c1c3805b724b1a185416b2a677","ssdeep":"","tlshash":"82b01228615c7004702321b14c17a8003511bd0234055800fe0c18600f08548c507844","size":87,"data":"","first_seen":"2026-06-09T07:01:51.521112Z","last_seen":"2026-07-01T07:04:49.869157Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"258b4360fe7cedf8bd27b8eb0370850d","sha1":"24c8d7dcebb5d5870107c1e1a547b5609be66f85","sha256":"feef114a47a096cc289fe5ee1a858f51da7f7f503ab869e045479bb4aa6acafa","sha512":"223f68deeab90a4a0ccd7766a150abc15d88afecb0adf41602f5453c294366e8cf8f5e567b5f0edbf94429ccffa567dbf650655aa67d87c3687742353f7e5d80","ssdeep":"","tlshash":"bec012af11404972dfb212918b873350b53961ab1e0a57127490a601fe2de03c72caca","size":191,"data":"","first_seen":"2026-06-09T07:01:51.524413Z","last_seen":"2026-07-01T07:04:49.869884Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cdbf6234c932b0028655ef806500443","sha1":"0d1cf87c9ad0491f0d0d3699d50c68b7c84f86b4","sha256":"e1eea8ee5e1920227ee7b2acb8593f1c3f9ef085eaaeb22e2d9cebdea95fdad9","sha512":"55a86e2d849596a518208310980c7ac48a7185ff8053958b29c77cef617e87d2b41e34148609e603287bf2b541b232f9770772ea94c42508c3f1e2bf4b60970f","ssdeep":"","tlshash":"47d0a79336b5003c4ffe28a6a611d7c4362be3262d519068b93b2d148f54f88a2779c8","size":236,"data":"","first_seen":"2026-06-09T07:01:51.526545Z","last_seen":"2026-07-01T07:04:49.870583Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6a1e4a9d2e880b20a6d28ccedfb4aaf","sha1":"fa8f2f9e8fc9841d0ee85533e5af4e485115d8f2","sha256":"08e93744e9321ce89abaf2566cce2bb7015bc06cb1b14ec9625c22562a433614","sha512":"4d2b4bd6acdd6fbd5bccfe93ec9c282cc558ec850570ff4a854e40b48ae51a2b526b99a0508c8ad977ab067ebac01bade1445ca64bd7d5a0139e6800c29aded5","ssdeep":"","tlshash":"eae0a23c3c3441904b9200b4c1abea283e1a30604882c85788aa8ca8acb0fdebe05898","size":416,"data":"","first_seen":"2026-07-01T07:04:49.871217Z","last_seen":"2026-07-01T07:04:49.871217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/bootstrap.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","size":95320,"data":"","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-07-01T07:04:49.838389Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","size":33461,"data":"","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-07-01T07:04:49.853875Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.easing.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","size":4137,"data":"","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-07-01T07:04:49.854612Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","size":89810,"data":"","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-07-01T07:04:49.83929Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/wow.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","size":14974,"data":"","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-07-01T07:04:49.862629Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.countdown.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","size":7397,"data":"","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-07-01T07:04:49.863466Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","size":152478,"data":"","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-07-01T07:04:49.865674Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/popper.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","size":37178,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.853119Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/mixitup.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","size":121918,"data":"","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-07-01T07:04:49.866379Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-04.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.901Z","timestamp":1782889453901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-04.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14865\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14865,"size_decoded":15151,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"437071d3ca37bbb3f3d4814e6ef6029b","sha1":"480780d285aef220034f29cf7b4d0fd1bf28e197","sha256":"699521a2c3be4cc036eef7f6990221bd6555dfcae9274a5979a9b78eda7a8627","sha512":"74ce29b27a5462cc1f602dfa41f00ab327166d807b2ce462402f3289cb082a7b6949b5fca94080e990ddc41893c6e601a8ffcb4ae544ad8fb99b291154ce9e3a","ssdeep":"384:6ERMJn+M2l9hbK+QFgZb5K4+9+zzzuHBLtVvBZ6XuZ05qtnHdG:6Eic3h1Qcb5L+9SEBLtlBfZ05UnHI","tlshash":"5262d0bacd5e4efed485f1442b205627d27a5cb37560fabc4ca6d85f04734b6c0427a1","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.828349Z","times_seen":174,"resource_available":false,"data":null}},"time_used":13935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1825,"receive":12110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-06.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.903Z","timestamp":1782889453903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-06.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18102\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18102,"size_decoded":18388,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7620d1c169784f5c388bcd5df851e9c8","sha1":"8e4bc8160bd68d03b6b9f36dfa8aed0173ba6137","sha256":"f8dc6379062e3b9328a95a988b3b7109e267e22f47a6e52d63f971b7d025f3a4","sha512":"88ef144ffd75fca4a9d7ef1f06b24c903c07b939d7bc0360e27c511328b752372a5db0bee91553d6984f5a4874452816374c14ace81d4a9d3d2c50a38688c268","ssdeep":"384:jFf2VId+0frhaHXEjpDUJ3lEZ8iEXBcuugFp5mdkCLZ6A7tMWC:Rf2VId+UCEjhUP8EXBccr5mdkC3Jy","tlshash":"d582c0ad7339821e8355fbc1157b20eeaa5cdf86cb1a5084e9e7dbf26c02395408d187","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.830144Z","times_seen":176,"resource_available":false,"data":null}},"time_used":20806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1823,"receive":18983,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/img/innovate.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.373Z","timestamp":1782889457373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/img/innovate.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/temp/custom/base/css/customstyle.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44134\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44134,"size_decoded":44579,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x500, components 3","md5":"65e1281c13a4a6c5cbfc57eeb70eefb9","sha1":"17c12e43d713051456362a91d957e2717d879b2e","sha256":"7d4a6a11aef0d31d880c7190722fb0f6cb1aee94b178067be0e9a97bf2cbcf6d","sha512":"e999277328d1b1be235ca5fd4a2db4c46bcb25cc3d50bea6ed5802808dc56491c78d4f6da33860cdf8c33df7673149a36f6e4ffc1fc812c89d6e5600b4e5e048","ssdeep":"768:onRols/JgR2xyej2bCUJHEr3824pHXOyO922+YoKVNXvR1ugdhMsUQ7V7C:onRX/JgR2xygXtcXMbZ1ugdhBm","tlshash":"b713024b6b921051c8e5c232b9c24709f93c03da3a2bfe93d5016794d716feace605e1","first_seen":"2025-04-27T11:22:47.41813Z","last_seen":"2026-07-01T07:04:49.832106Z","times_seen":125,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.499Z","timestamp":1782889457499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 403\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":614,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bc0b4b3890e13654c6eb7fc4cf525cd2","sha1":"eee752db3e73680b774b026d87609513c80e0876","sha256":"3296634342e0790cc78d047470c0a2060d6296e252131c16f083d1aab28f731f","sha512":"08ad665899637538ac0711a4fed6dd0e77cfc25ebf4919223b9672f2e32d1b5bcd8b14955e8ab945a9990bd290484810ab42e54d133996d9be869e75f5a7173f","ssdeep":"","tlshash":"c91140bf48140a6e132082627114362dc0cfbf1b6f42b480e0b352a67ac0b82c4be499","first_seen":"2026-07-01T07:04:49.833393Z","last_seen":"2026-07-01T07:04:49.833393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/jquery.mb.YTPlayer.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.586Z","timestamp":1782889453586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/jquery.mb.YTPlayer.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5097\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10465,"size_decoded":5426,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048)","md5":"901273a083005ed8f05f19c235e1618e","sha1":"1c679b75452eb6fcd43e6d5a7c2bf5c1312529f3","sha256":"89122a24b64349cf4d1ae941cd23ca2a06460b807b732c3b2884869139fbcc25","sha512":"69470175bc1d4db318a8b96fcd215b73a3088d29f533484b82dfadcc14af85c034c8192b0ec8a1fc071a9d7cf0abe907dc3df453a4715a36ecbde4cb22717ea6","ssdeep":"192:y23C2pkgW7wRjcXpiOHdFqeVVVwJO7W8NUFbL0t2gvMgDY:z3CLH3FLqFHv","tlshash":"9022f9357eeb2b41651bc65827ba1bec2f181013124bccedbb957348cf5d69e48a0f88","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.836157Z","times_seen":163,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/responsive.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.593Z","timestamp":1782889453593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/responsive.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 698\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3516,"size_decoded":1026,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccf04542457e883d3bdbc2d98bf8fdbe","sha1":"8f5a67d5e52dde1e135ca1b781bb6c7d922cb251","sha256":"e7ed8dbc96e395c823b8a607158db76a236253ea8227ab5885646b62d17e41da","sha512":"59dc7870e4f6048f6e5bb0acfe877a2bc4bd142e92c84c8b57337840d4dd71fcb8cf59e3d766e464e020a125adc581017a353ec991b40350c6aa04361340aabd","ssdeep":"","tlshash":"fe71d94f2a4210094577737ae3a7a155fe2648b3d38ae1f1bd9c2210cf785994522f8d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.837438Z","times_seen":168,"resource_available":false,"data":null}},"time_used":1829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/bootstrap.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.868Z","timestamp":1782889453868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/bootstrap.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17027\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95320,"size_decoded":17371,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (513), with CRLF line terminators","md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-07-01T07:04:49.838389Z","times_seen":156,"resource_available":true,"data":null}},"time_used":3475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1858,"receive":1617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.872Z","timestamp":1782889453872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.mb.YTPlayer.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15576\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89810,"size_decoded":15920,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606), with CRLF line terminators","md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-07-01T07:04:49.83929Z","times_seen":153,"resource_available":true,"data":null}},"time_used":6675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2701,"receive":3974,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-02.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.898Z","timestamp":1782889453898,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/base/img/clients-logo-02.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/webfonts/fa-solid-900.woff2","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.435Z","timestamp":1782889457435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/temp/custom/base/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74348\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74348,"size_decoded":74615,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-07-01T07:04:49.841011Z","times_seen":5376,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/storage/app/public/photos/f992wtRwEAoxPzdHUmucuSBGTZyoF9VUacgnYHWd.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:31.934Z","timestamp":1782889471934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /storage/app/public/photos/f992wtRwEAoxPzdHUmucuSBGTZyoF9VUacgnYHWd.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jun 2026 15:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141673\r\ndate: Wed, 01 Jul 2026 07:04:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141673,"size_decoded":141941,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1376x768, components 3","md5":"3befb4d8f0e21d3e7525240b4680c446","sha1":"9a10f8f11cf5fa2094c0bbc412c51a64a27a843f","sha256":"6651a6786503d3f486f6db61fa6b3a82aa5a98a4292e57ac866e5435efea8d2a","sha512":"9504c72e11f6233b513560af6ecc022144fae8db2b804727fc27122ed4078119d84c3a372a2cba4458a851da1ea0a8961e2e4f68e356ed4b68f0f9ef6e7e8a5a","ssdeep":"3072:Llre7YAgJgDbLHTaQPy2g9VATzW4R31J6ei9WaCuScN25uK:9KgJgLHTy2mA/9Jz8Tc5b","tlshash":"4fd34c438d558797a06893e8bd434ead1f0a670cf8c23aff11624edb7e657620d8e12d","first_seen":"2026-07-01T07:04:49.841848Z","last_seen":"2026-07-01T07:04:49.841848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/themify-icons.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.578Z","timestamp":1782889453578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/themify-icons.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2748\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19425,"size_decoded":3077,"mime_type":"text/css","magic":"ASCII text, with very long lines (328), with CRLF line terminators","md5":"fba3cdd3ecf4d9b4355e13af6b632f13","sha1":"12f413adc203313fd0fbe1a000e77dc61edd873f","sha256":"3a02e0315d6259facfa5d69c2ff34559e80b802b92a5f57ab4a18538bfe43330","sha512":"81dcf645b09fc5151db59d55b23051a191d2d910745e5d6526f5a87b4a06b90bc2a5c8c8ba2f60ef832a0e9af158e8c5339284b39197084d96e683c75497a507","ssdeep":"192:EtlTgzkORrPbfc7awA+PsdkiKUxHYyObuFMqQY9dlY52egvDARVJmzplQJ/:4gzDPkCzTkYXRbMilQZ","tlshash":"9792d0f8906f14a65723da51e3436a16eb05b636db420c5cf293ee4c5ee3a21d1c2edc","first_seen":"2025-04-16T16:49:09.299742Z","last_seen":"2026-07-01T07:04:49.844116Z","times_seen":142,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.596Z","timestamp":1782889453596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 403\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":634,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bc0b4b3890e13654c6eb7fc4cf525cd2","sha1":"eee752db3e73680b774b026d87609513c80e0876","sha256":"3296634342e0790cc78d047470c0a2060d6296e252131c16f083d1aab28f731f","sha512":"08ad665899637538ac0711a4fed6dd0e77cfc25ebf4919223b9672f2e32d1b5bcd8b14955e8ab945a9990bd290484810ab42e54d133996d9be869e75f5a7173f","ssdeep":"","tlshash":"c91140bf48140a6e132082627114362dc0cfbf1b6f42b480e0b352a67ac0b82c4be499","first_seen":"2026-07-01T07:04:49.833393Z","last_seen":"2026-07-01T07:04:49.833393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2130,"receive":1618,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.862Z","timestamp":1782889453862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 403\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":634,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bc0b4b3890e13654c6eb7fc4cf525cd2","sha1":"eee752db3e73680b774b026d87609513c80e0876","sha256":"3296634342e0790cc78d047470c0a2060d6296e252131c16f083d1aab28f731f","sha512":"08ad665899637538ac0711a4fed6dd0e77cfc25ebf4919223b9672f2e32d1b5bcd8b14955e8ab945a9990bd290484810ab42e54d133996d9be869e75f5a7173f","ssdeep":"","tlshash":"c91140bf48140a6e132082627114362dc0cfbf1b6f42b480e0b352a67ac0b82c4be499","first_seen":"2026-07-01T07:04:49.833393Z","last_seen":"2026-07-01T07:04:49.833393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1864,"receive":1617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/avatars/2.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.894Z","timestamp":1782889453894,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/base/img/avatars/2.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-07.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.904Z","timestamp":1782889453904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-07.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3448\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3448,"size_decoded":3733,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19e897af73d97018482aa1e0f78cdcc","sha1":"76f2342bdb0a4cf9a595c6822c79a04aaedba6d7","sha256":"b927b2e10953b20c99e848b6b9b101db928bf73193a0ec6a72e75aebad08662b","sha512":"18f4c4095a26f3c3a8cd3894ec86f1532e1096a9202f67f9db32712195fa033f6b19316137e945a9f53fae5190ac84b2525ad832b1d528bc5dcaa913722a4e4a","ssdeep":"","tlshash":"51612d68d9414ad117dcb3d514f341e149219980cddaa5b56fd8f8570a022f671178e7","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.845168Z","times_seen":175,"resource_available":false,"data":null}},"time_used":21208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1822,"receive":19386,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.450Z","timestamp":1782889457450,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.629Z","timestamp":1782889457629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:17 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40485\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78584,"size_decoded":40795,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-07-01T10:04:53.153755Z","times_seen":1077,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T07:04:07.733Z","timestamp":1782889447733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; expires=Tue, 22-Sep-2026 15:04:13 GMT; Max-Age=7200000; path=/; samesite=lax; secure\naxicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D; expires=Tue, 22-Sep-2026 15:04:13 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 11455\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":66170,"size_decoded":12782,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (415)","md5":"c74eebce3b051c1460ccd8f0bbc8b184","sha1":"1edfa4b72f625407fef5e5860120f4f86ed14425","sha256":"f10c461324d1943b566d0b8a05708bc1479526b0014342e9f7b341ef96037620","sha512":"8f5e51e80e9a14ace84f3cb95819e09bdde6b2990998979480709e0a04f1472a50f4026937a365db9dc6dddc717d25972f24f1943e589054ea5ca909b044292f","ssdeep":"768:+wOOOO/TdBbcbsblbOMO6rbzHATMiKSJj/kE/FVcCPmdw:+wOOOOLYMOymMiKy/kwrcCaw","tlshash":"e7534f22a5f5113b01a380e27aa56f0bafe9e00bda1f061876bd4bd81fd3d82dd5715c","first_seen":"2026-07-01T07:04:49.847321Z","last_seen":"2026-07-01T07:04:49.847321Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5604,"timings":{"blocked":-1,"dns":4318,"connect":101,"send":0,"wait":849,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/style.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.591Z","timestamp":1782889453591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/style.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14782\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90535,"size_decoded":15112,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"ecb0ac78b6cb311082049439baa00710","sha1":"46952da0c64ad55980358270bb2b2f08b93a14bc","sha256":"9dde11e2b1c9e0d357a303138b9fb46d6aacdb10bfdbaf56172a4e8968fbe831","sha512":"47b490600e24db502f4c99019a6a1a401a6f320641925667ddc3946ac12bffe2ae872f270604b6b9b2333be79d1ec54fc0324de0e8fb9de1e390df3b19387d9d","ssdeep":"1536:ASKXDBVAlXHlXUzp/8bTWKeLlXTsp4Awhsr2hOAV:PyDBVVJ9l","tlshash":"de9356ac96021146a237df746be54318fb784023ca1705acbbcda2414ff677c86a6f9d","first_seen":"2025-04-16T16:49:09.313105Z","last_seen":"2026-07-01T07:04:49.849425Z","times_seen":135,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1428,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/static/base/img/slider-img-3.html","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.376Z","timestamp":1782889457376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/static/base/img/slider-img-3.html HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":786,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-01T07:20:35.99234Z","times_seen":41056,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:17.433Z","timestamp":1782889457433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:17 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74\r\ndate: Wed, 01 Jul 2026 07:04:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74,"size_decoded":337,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"0935d506ad5d03bb060a5ef62605775a","sha1":"80c6896910d1ddd9f5271f389958496b1994c1b5","sha256":"2f61affc60d3b130f492a2a8d125ed73d167af85cd669ee9d4d8c5c7d407828c","sha512":"794c8986cac3ee42a5cbe4e56288df09eb5e0adf68ce29de0acda563a59f357b2ff6a4da3a8c54b5d7ba7edb330a59712f277453bfcc38a22fe5f840ef78f00d","ssdeep":"","tlshash":"67a022fe832300000f2200e30202300ace0302f820c00bc08ca003afa8e0b03302a30c","first_seen":"2024-09-11T20:09:12Z","last_seen":"2026-07-01T07:04:49.851026Z","times_seen":161,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/all.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.579Z","timestamp":1782889453579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/all.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12356\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78221,"size_decoded":12686,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"05cb650082a3fc8aa618cb48208a79ca","sha1":"cc160cd30be0f9f99541a4763a6ce7d8cd001fa3","sha256":"dee2a403938d53a47b4ea62b38c5581aff1f943b85147fc7aad5f9e53d256fa9","sha512":"b7a3124ad5ccefeb9050f8c8de6f1dd37bf758214c413cea8871d32fee16ca5009c1aa2ee945bfabf6763f9b1cf51818a9ce7657fa0dad2fcfade6d53c9a26f7","ssdeep":"1536:299xhathLHFLwXhrjU2AWFS1L0pgUrtfmz:C9xhathLHFLwXhrjU2AWFqL0WUrRmz","tlshash":"1173167cd95f10924322dae197436242fb25763efe410c4cf2a1e78d9be1226a586fcd","first_seen":"2025-04-16T16:49:09.286329Z","last_seen":"2026-07-01T07:04:49.85174Z","times_seen":142,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.594Z","timestamp":1782889453594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 403\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":634,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bc0b4b3890e13654c6eb7fc4cf525cd2","sha1":"eee752db3e73680b774b026d87609513c80e0876","sha256":"3296634342e0790cc78d047470c0a2060d6296e252131c16f083d1aab28f731f","sha512":"08ad665899637538ac0711a4fed6dd0e77cfc25ebf4919223b9672f2e32d1b5bcd8b14955e8ab945a9990bd290484810ab42e54d133996d9be869e75f5a7173f","ssdeep":"","tlshash":"c91140bf48140a6e132082627114362dc0cfbf1b6f42b480e0b352a67ac0b82c4be499","first_seen":"2026-07-01T07:04:49.833393Z","last_seen":"2026-07-01T07:04:49.833393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2131,"receive":1618,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/customstyle.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.597Z","timestamp":1782889453597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/customstyle.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1541\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7188,"size_decoded":1870,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a1ae24bf6f813e147677647e762fc912","sha1":"5bf79ee2685fc94cfcdbd8011ac411f685e1a5e3","sha256":"daec1d9695fb37769643d97e5b9040a213ca6daeeecf9726033bdebe474d3d7d","sha512":"33626e32e5f7bb64699a23c39034824b6002c0f895beccdcc89f95edef83c9b74fb198d55122af619c3aa9412194a236ece85192ffeb11509a04df08e78981c6","ssdeep":"96:xkyRNTHQ1zl5+AQRRnbfdfc5SRPdRff8f5EW:xkUNTHQR2AGVbVUARPdRX8f+W","tlshash":"e8e19a1aea110602643ba376e7a3b35def6a4013c30195f87fcd72644fb56a88765f8c","first_seen":"2025-04-16T16:49:09.309316Z","last_seen":"2026-07-01T07:04:49.852419Z","times_seen":146,"resource_available":false,"data":null}},"time_used":3747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2129,"receive":1618,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/popper.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.866Z","timestamp":1782889453866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/popper.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8482\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37178,"size_decoded":8825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (639), with CRLF line terminators","md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.853119Z","times_seen":173,"resource_available":true,"data":null}},"time_used":3197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1860,"receive":1337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.869Z","timestamp":1782889453869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8200\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33461,"size_decoded":8543,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with CRLF line terminators","md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-07-01T07:04:49.853875Z","times_seen":221,"resource_available":true,"data":null}},"time_used":5820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2703,"receive":3117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.easing.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.871Z","timestamp":1782889453871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.easing.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 863\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4137,"size_decoded":1205,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-07-01T07:04:49.854612Z","times_seen":151,"resource_available":true,"data":null}},"time_used":3473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2701,"receive":772,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/owl.carousel.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.876Z","timestamp":1782889453876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/owl.carousel.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12473\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61379,"size_decoded":12817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (785), with CRLF line terminators","md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-07-01T07:04:49.855302Z","times_seen":200,"resource_available":true,"data":null}},"time_used":3769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2696,"receive":1073,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/avatars/3.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.893Z","timestamp":1782889453893,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/base/img/avatars/3.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/bootstrap.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.575Z","timestamp":1782889453575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/bootstrap.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23423\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213784,"size_decoded":23753,"mime_type":"text/css","magic":"ASCII text, with very long lines (566), with CRLF line terminators","md5":"1a811fd7a5e52578985135b39a1664f8","sha1":"81989657aa78b1470ba4cc82761c36f0f6db139c","sha256":"b91adb9cc84595f9b4e46f6cdc2674b40199b9d6cbb81e7685a36fd59d962b36","sha512":"169656155090225470dcbb3503d7123d81851e3a7c611a851f902ddb567ef0ff990ef3b0ac631bb2ca8534b271026460d78647835f282d72f84afdc52722fb2d","ssdeep":"1536:BQLz5JZGAN8eO9tgTrocYU7R8cMdd3jN0oE5aQFCHiv00EOR3rXP1bJG3xKJBIr1:mwE8ezn8G6uLawupgBregZrE","tlshash":"1724551ae95121065973cb7c53e17765ffba0167ca0186aa7ede73008ff97d08922e8c","first_seen":"2025-04-16T16:49:09.303518Z","last_seen":"2026-07-01T07:04:49.856047Z","times_seen":148,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":837,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/all.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.879Z","timestamp":1782889453879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/all.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428396\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/scripts.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.880Z","timestamp":1782889453880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/scripts.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3341\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15476,"size_decoded":3684,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.856615Z","times_seen":172,"resource_available":true,"data":null}},"time_used":5810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2693,"receive":3117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/storage/app/public/photos/8AlORQMIsNBgi4pmqmqbrYEDiUG0fs6vOfBomtvg.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.890Z","timestamp":1782889453890,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/app/public/photos/8AlORQMIsNBgi4pmqmqbrYEDiUG0fs6vOfBomtvg.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-01.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.897Z","timestamp":1782889453897,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/base/img/clients-logo-01.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-05.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.902Z","timestamp":1782889453902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-05.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13819\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13819,"size_decoded":14105,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"32b96d9461314a2b8a2a13b5ff2c4002","sha1":"7865e35459f48d3464fa6c7a5d6714f9049ef3ad","sha256":"039efeeffa143c48f38e94d15640321eedfac7d7308392a67c8873d5afc839bc","sha512":"40a13571ab0ed900d169f9c106346ec77936ee413b5f8f4ea17319e97fb0b1536f9b11096bd99c341103f07f2e1e032bcdf4979f2793bd98ffc9b4531f7e97c4","ssdeep":"384:pcwF2IfxHWgOUh0/iLRuTC4KkPpY7vz3I8A696Y5I:pcwxHWgOglRuTC4Kkm/nAa6Y5I","tlshash":"8252bf0e9115d54d2a0fe58225fa9387e6ed0d80d09b108bddc3d4de76361867e10b9f","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.857326Z","times_seen":174,"resource_available":false,"data":null}},"time_used":20239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1824,"receive":18415,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-08.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.905Z","timestamp":1782889453905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-08.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14038\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14038,"size_decoded":14324,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7d917afc12aa287c0e2d9dab0e0ef9ff","sha1":"bb76c571f887250487592a977a13ec2fa6ce8ae3","sha256":"bcd5bcb3fcdb29f85d0bb0435ced0cf4e4e1789e7c701663a1cfa626895eab79","sha512":"a96f73c9a4d6a7ba28c8f6eb1bc6f5fb9b4a75ec5f47d32c597b62f75f82ef0f42237af6b8bd12fafdee3bb394959ec5e276f5163705d53408546fee54a68fcd","ssdeep":"384:3HJdaqhRn7xglRDLF+nvlQgSB0E4mSEJgEOo:3p/FmR6tQ5yE4S/Oo","tlshash":"6252cf09289e2e101158ba475f5bd220185b0dbccd937d7c79dc91a6d3f8ef2a09c8f6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.858062Z","times_seen":178,"resource_available":false,"data":null}},"time_used":21402,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":1756,"receive":19598,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/magnific-popup.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.576Z","timestamp":1782889453576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/magnific-popup.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1688\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7859,"size_decoded":2017,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2aad777437b42bb818d737c73156ddb7","sha1":"6127d39b81eacab77cd834258e8f34747a793056","sha256":"44c0bc765e9c74b5e70366863a39b5db34f121c37b0b9e45ad2244c672820584","sha512":"f6eb432e3ee2ad220eb295f62c053090d8778e9fb74254e49aae248253d96bf3af18ebcafd1bda560a1e46ecf9d0c9d703ebad2debf2d2c5a2fbfc9b92eee0e2","ssdeep":"192:S+mS4tKnIQA5H2CqAEgmLioElcXC6Tikpc/gQMAGxW:dWROCz","tlshash":"7ff1fe59db112342c237dbb4dbe30719e71200639b0300abbfcd9a46affa5684661fd9","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.858752Z","times_seen":171,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/animate.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.581Z","timestamp":1782889453581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/animate.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4370\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83528,"size_decoded":4699,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e45ee68bfae20a52bb319e40c1b04d2","sha1":"7391a7bb4ef5a2cad2a4033a7b0af054955233cf","sha256":"1b57004d81d1c2c765ef74b9dd93a75de620cc1c6d4a9cc1c8ebbf2877721dc9","sha512":"922a48837620532fffba1107a3c7618bd559e8709e4ae9fb529b6d4fe85f3d24a6c3d5542501176fd7b420b4f0a04d9e6c093873360a1330a000ae22bf306d58","ssdeep":"768:i1k1R4W4J1I184Y4w4o4+VkVK4q4z/3K3F7o7T9:74W4t4Y4w4o4Y4q4z/3K3F7o7T9","tlshash":"6f83d86e2840114447330b76d3de4e68ea3da57318222dea73de598b8f76f6853c9e07","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.859431Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/owl.theme.default.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.589Z","timestamp":1782889453589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/owl.theme.default.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 413\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":741,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef9c02a9d33951f1ac6f547bfefdb72f","sha1":"53a61837620bdfebeab0325689e58c5d37b5d3a5","sha256":"b64ffcd5f35a7e4dfef1fede979637b6901018699c5e36b5c7ff88a2f472ab1f","sha512":"3a714d7084ddc37e4581571cdd75e8fc26e721d7ec7ece79b6f149b9745599a3c36b8668f4a55c6e5f0250ce63fc503f83ca10010081d63d086ae74fe76f4c71","ssdeep":"","tlshash":"7221abc4f216210f743386e01b688247fb5e243b0a4d09e8f5da9114cf7c904aa6ef6c","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.860154Z","times_seen":199,"resource_available":false,"data":null}},"time_used":1430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/wow.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.875Z","timestamp":1782889453875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/wow.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3141\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14974,"size_decoded":3484,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (482), with CRLF line terminators","md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-07-01T07:04:49.862629Z","times_seen":188,"resource_available":true,"data":null}},"time_used":3470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2698,"receive":772,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery.countdown.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.877Z","timestamp":1782889453877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.countdown.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2479\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7397,"size_decoded":2822,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (459), with CRLF line terminators","md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-07-01T07:04:49.863466Z","times_seen":152,"resource_available":true,"data":null}},"time_used":3478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2695,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/img/bg3.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.892Z","timestamp":1782889453892,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/img/bg3.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/clients-logo-03.png","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.900Z","timestamp":1782889453900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-03.png HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14568\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14568,"size_decoded":14854,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"8a8f38079225ce11ba10b8eae50775ab","sha1":"a2c13028e4e9e3c09af2ffba6d13186305590aee","sha256":"463110f47af141b30ef89a82da810081694ae34b40f6b9fcea044a8d90e85174","sha512":"b7d5717a876972373e1002a9bd5251b7301bcc27f1a99fa8dfbd27b7258ac76619222b53d4407bd775c975cafdbd968c5b4e54d0d9d7dfc90e1a474ed1883697","ssdeep":"384:3VbtTwSIEeChYgAmVRLV1ObcdQO+oYqCiZsUkS:3zTVeCCglVRLV1ObcdHyqCuNP","tlshash":"f262c0fbd42204815af5c1bd14e3da5fb9333a8893e732d030a7b55c1ed961402a9baa","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-07-01T07:04:49.864162Z","times_seen":175,"resource_available":false,"data":null}},"time_used":13478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1826,"receive":11652,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.573Z","timestamp":1782889453573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 403\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":935,"size_decoded":634,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bc0b4b3890e13654c6eb7fc4cf525cd2","sha1":"eee752db3e73680b774b026d87609513c80e0876","sha256":"3296634342e0790cc78d047470c0a2060d6296e252131c16f083d1aab28f731f","sha512":"08ad665899637538ac0711a4fed6dd0e77cfc25ebf4919223b9672f2e32d1b5bcd8b14955e8ab945a9990bd290484810ab42e54d133996d9be869e75f5a7173f","ssdeep":"","tlshash":"c91140bf48140a6e132082627114362dc0cfbf1b6f42b480e0b352a67ac0b82c4be499","first_seen":"2026-07-01T07:04:49.833393Z","last_seen":"2026-07-01T07:04:49.833393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.858Z","timestamp":1782889453858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 06 May 2026 19:42:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 01 Jul 2027 02:02:58 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PndkmtjtMLPkTq3sSK5qNngnjw0lYLuoBbv4fWaNE6HG972m8ge62ZL7X0QuC%2Fb4afaZ44YcJx%2BL9%2BbUtislrjoASg29GDAz4etnQiRfJ81dprcqELoPoDWwCzYgaZCmymTM9g%3D%3D\"}]}\r\nage: 18075\r\ncf-cache-status: HIT\r\netag: W/\"69fb99bb-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a1438e2f58e45ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7474,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-07-01T07:54:37.298121Z","times_seen":734,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":37,"connect":34,"send":0,"wait":40,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.860Z","timestamp":1782889453860,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.864Z","timestamp":1782889453864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35790\r\ndate: Wed, 01 Jul 2026 07:04:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152478,"size_decoded":36134,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (526), with CRLF line terminators","md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-07-01T07:04:49.865674Z","times_seen":183,"resource_available":true,"data":null}},"time_used":2708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1862,"receive":846,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/js/mixitup.min.js","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.874Z","timestamp":1782889453874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/js/mixitup.min.js HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22826\r\ndate: Wed, 01 Jul 2026 07:04:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121918,"size_decoded":23170,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (997), with CRLF line terminators","md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-07-01T07:04:49.866379Z","times_seen":174,"resource_available":true,"data":null}},"time_used":10140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2699,"receive":7441,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/img/bg2.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.891Z","timestamp":1782889453891,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/img/bg2.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/css/owl.carousel.min.css","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.587Z","timestamp":1782889453587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 15:03:03 GMT","end":"Fri, 25 Sep 2026 15:03:02 GMT"},"fingerprint":{"sha1":"D0:4B:9F:9B:1A:09:2C:E8:52:F1:07:C1:AC:93:6F:9F:1C:D2:B9:9A","sha256":"D1:A2:4D:B7:18:C9:87:DF:95:55:89:3B:90:E6:61:54:CF:B9:65:4B:2E:B4:68:00:5A:2C:C6:85:D6:A0:CB:FF"}}},"request":{"raw":"GET /temp/custom/base/css/owl.carousel.min.css HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:04:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1019\r\ndate: Wed, 01 Jul 2026 07:04:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4337,"size_decoded":1348,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9843ea449af1cd03ec3e44c854f42347","sha1":"4c0c46eedbb43465f866878d4081a3ca5f9e060a","sha256":"8a53e08937c56d0ca2c80ce4dd719cac4393f8f28aed062116850b1e26a08ee6","sha512":"e421174abce281cef8f4db552a7c1750d5f773035d99191ab8f75dd50ae00664098c07f849759a7ee8c78b79cd5ba33cf1625bc5c493738e5e57c4de882518eb","ssdeep":"96:3QgSZ+nXSV+8QmmcJeXhrUTJh39DyAAFdh0g0FarLvV7Kmiyb:QZ+nXQQzd2l/yP73vgnyb","tlshash":"949159e42226114f593b87a01bed8a56f87d84638c061104b6eb470a4ffea68911ff6e","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-07-01T07:04:49.867085Z","times_seen":167,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axicorviasavebk.com/temp/custom/base/img/avatars/4.jpg","fqdn":"axicorviasavebk.com","domain":"axicorviasavebk.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://axicorviasavebk.com/","date":"2026-07-01T07:04:13.896Z","timestamp":1782889453896,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/base/img/avatars/4.jpg HTTP/1.1\r\nHost: axicorviasavebk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://axicorviasavebk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IklLclluMnVLV01uS1VVM3pJUHhRdFE9PSIsInZhbHVlIjoiaWQwaWNVR1BCaWQwd21xK1FkYmFYSWtlMG00cC9vQSt5QWN1MFVmQkJ2UzFQdFkvVU1rWGJzK1RUeU5RVFZHZjdxOVI5U2FBV05EcXBhemVVNk81dzBDSkRVTStieHJGY256ejhNVTRpMzYwcnVGblR1UXJiZkZTdzJFa0oxdGsiLCJtYWMiOiI1ZTJkZDI5ZjYxNGZkYzAyYmNiODllZWIxNmRkNzg0ZTc0ZDFkNGI1OGVlMmZmY2Y0YThhNWVjYjcyZjlmNjdiIiwidGFnIjoiIn0%3D; axicorviasavebk_session=eyJpdiI6Im9wM2JnZ005anQ0clQ3UnRuUmJZUEE9PSIsInZhbHVlIjoiMG5CbmR0T09XMmVsSzZ2Y2llNmMvK1pzMHBZWHV4L015bUlQY3pWRVRhbkNCZEQ4Z2VqM3laWlZQL0JickRZSGo4akJsYmdYcU4rcmU3T3JpaDJTZ3ZvU1plUFdEQ1RiOGNPRGpSalBYYmtOREtGQ29PVVZ1K0dzWFVQSXd6M3giLCJtYWMiOiJhZTc5NjNlOWIzMzA5NjAzNDdkOWU5MjM3NDRiNmY0YThhMmEyNmY1Mjc1OGVmYWY4ZDQ1Yzc2YzdiMTQyYzFhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T10:18:58.66886Z","times_seen":16887239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"axicorviasavebk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}