{"report_id":"5b53c4f6-e04e-440d-9f33-0269e8169ebb","version":6,"status":"done","tags":[],"date":"2026-02-14T06:10:24Z","url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"172.67.208.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"title":"Lead Western | Welcome to Lead Western","dom":{"size":42881,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"3731fb1a07bd2c0fc7e1a3d3c46455fb","sha1":"93b1083985dd6308daf81d732cdd2cf8a655be8c","sha256":"ed943e784fc28641c92e0ec752effb22d48d8be3e699281da768e78f204f69b8","sha512":"d382c0b7d1ec8cc480199c028bd6868f2104dda5356f971de1aaa82bcd3091c6a58815999238b13ddd59e2e0d75d5454c2247416ef55c821a516337106e51cb3","ssdeep":"768:4jr8FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYW1:4jr8FYTbfsTO+LDCPKHshqa/XOl6r1","tlshash":"1c1395176780462c9c5392a8f399a54ea32df684ef6359eef7c63410c2d93ff088b456","dom_hash":"domhasha09e2b964037d2360f8d1ddedad10bc0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"172.67.208.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T06:10:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":2327,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-02-12T03:26:38.670504Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-11T20:05:56.47035Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":1,"received_data":63294,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-11T20:05:56.067957Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":529,"comment":"","tags":null,"fingerprints":null},{"fqdn":"leadwesternbnk.com","ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-02-13T14:24:46.912619Z","last_seen":"2026-02-13T14:24:46.912619Z","alert_count":88,"request_count":88,"received_data":4151508,"sent_data":104157,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"52.57.160.101","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-02-12T02:12:11.779343Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":607,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-02-12T02:12:11.763945Z","alert_count":0,"request_count":3,"received_data":323868,"sent_data":1377,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5bbbcc8e0a6e2187cacad180fa42443","sha1":"144148b4b72e9fed445f49f66b2fcbb7396f6c92","sha256":"282ecf1b8e813d44e4e1d473cafa60528e159fd3122000ca315d0e8dc4007b25","sha512":"5d4a8f718ac4b59706edeb45476cdfd122fe80fbbf3c4104364783215925598e939f03dd199d14d2f4da7999b8eccdd73ebc77ba0a9d1f6172a219b9703ac4cd","ssdeep":"","tlshash":"8371ec5972f310415ac7a1765fe346082135a20b28079d893befc9a58f9fa14f2c7aec","size":3748,"data":"","first_seen":"2026-02-13T14:24:52.532292Z","last_seen":"2026-02-14T06:10:28.675722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/jquery.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-13T17:29:05.24448Z","times_seen":168607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/parallax-scroll.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","size":8929,"data":"","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-06-12T19:59:02.386817Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/popper.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-06-13T17:47:54.407897Z","times_seen":11219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","size":1117,"data":"","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-06-12T21:58:31.196034Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/bootstrap.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60635,"data":"","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-06-13T16:10:23.11422Z","times_seen":3670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/parallaxie.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c15d576a085c7ee4e80de32ea9fc03d","sha1":"7cc3e0057f3682094c9bd20818725121656f9007","sha256":"7469042fa4aca04500e51f6f1d6ed03489f8b973942f3c9bf853af8ed4899ff6","sha512":"b0ea0c9ddbdad4e038d6fbdf4a12e16a91794cfec22f8b3361ebf19ee8e5121b0d53be2919c3805bc811185f4ae6ce76ee8c1aeb641e32a7973492fd67bb48f7","ssdeep":"","tlshash":"7d41ae846463520776ebe6f99fbf1100213ac517244df60abe2e63e85f9061cc5a3bf0","size":2097,"data":"","first_seen":"2023-03-26T05:57:00Z","last_seen":"2026-06-12T21:58:31.152673Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/odometer.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc259ded1a84fccde97eed25b0f36fd7","sha1":"951884d82a2ab311e2719ff96d429082b48c4053","sha256":"45cd87a552a2962ecab5f977c381df31f82adc173512b492cb4a0bd555b2c567","sha512":"a8f21bb09901d6d0f61941dac83cb874b3c132ec4f4f5e163523e1e35705080e57866042de05d3c20c2a63d156769f755513b9cc9f8cc4b75a797ef51eb7518e","ssdeep":"192:x2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:8vokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"fe42451163e1273d9707e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12145,"data":"","first_seen":"2023-03-11T22:43:23Z","last_seen":"2026-06-06T12:33:58.861573Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/ticker.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e2cc8fafebad8c9ff5dc21444eeccb7","sha1":"381f68c32380c443d8cb160c313583e98d5e01b6","sha256":"a6e82afa42631492fe185de34d7c259b2eaad1b3ea7b219907866ab254be5505","sha512":"3028b735efa319c8e1bbd80ee9a5c731721acc48d0d9d2734183d8422d3f90ffed23b9d144cf7a59f09f46b862df06e7466aa570cb4a0ca171982cc37ae10096","ssdeep":"1536:7Tv2hw5b9fDhtQFJiTtBaEzeGYrf/XDMFMmehOaJVG4FtzMuRioQzk:7TS2aKeZnG4Ftszk","tlshash":"dfe3f8e83992f651aab3126700ef2807733d1a1b280c4960a615fdde75b845eb13bfdd","size":144492,"data":"","first_seen":"2025-05-07T21:42:09.717373Z","last_seen":"2026-06-10T07:03:52.528089Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/wow.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T18:18:43.4966Z","times_seen":12891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/appear.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","size":1270,"data":"","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-06-12T21:58:31.202562Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/swiper-bundle.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2079dc89cc747e9737986b0fbb48aa92","sha1":"977fd3d027b8f2348270c8e564aa33d03c7f51c4","sha256":"5b511ebcc9d064aa644dd6c0edfcb3095954f19324fb10d9a14fa47d01ddef43","sha512":"430a6cc6d759462879e46694fc27b605aaa8cb6b44bfd1a5b63006f32b93cb693d947a8aed51c7a77c1659efb221360a665b13dc06828f8f59c4c60fa78ea225","ssdeep":"1536:IIJCfGRELR8NnIxLzGhd+IWzvolxUFl8k8+1LDXzv5gDQV9qDlXpf/arWcplXe8O:bJ5N+Lz2vyl8kRdV9S5XiTnXek07jl","tlshash":"a3d3f8896221b57646e316db93e4c621b3b50540b80ac8f470b94c9f597ec9813feffa","size":141190,"data":"","first_seen":"2023-08-18T10:12:20Z","last_seen":"2026-06-13T14:06:06.652238Z","times_seen":2068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/magnific-popup.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:30:08.629027Z","times_seen":66964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/main.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2811e29ee6eafd2ec619177f324a307c","sha1":"5b939008feb16da80446d0014b730103438e5165","sha256":"23c106445f15b32c7ee7bf61a16da3532fece42dde6310279e13ade9b70e1c98","sha512":"20805e983c072298f4f44cb598727ccf7546739fd1c329f7bae6f4ce80bc2a5cd7dd6559644381e1359ef2af8df6eab31b62424479ea27b33d09a4c779822e4a","ssdeep":"192:fo/9/ir572TZ1pCy+yzZ0L8Rmgzlhx5UBNe/SjHoRMg:fgXzxAgphx5eNe/S9g","tlshash":"1802110b7cb0247118b7e4be6b9fa104fa6510079d59ed31b4df02480f5a36ca1be6de","size":8302,"data":"","first_seen":"2026-02-13T14:24:52.520904Z","last_seen":"2026-02-14T06:10:28.668164Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49fe080012e3793cea05ce3bd0bcdb04","sha1":"3db9c469283d41e33e8620c2aa3e0d407107dd6a","sha256":"23907f4e0c87c66cb42a54738b76e23be1442434443ee8489a36f1977cc1153a","sha512":"f4d8ffbeacb74c9078ebf686268e08ab91ef3b3a03eacbb1f01faa26e82e3f321637d0f3b928a0ccab7230fc48db4f6acca14c4218f8c6ef2eecb978a89effcb","ssdeep":"","tlshash":"57f0dc3d2c3540b1475300b992f7f5387f5a30b18005d877b49e98a81ff0bdd2e01594","size":477,"data":"","first_seen":"2026-02-13T14:24:52.533042Z","last_seen":"2026-02-14T06:10:28.677925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283045,"data":"","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_map_mark.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_map_mark.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 272\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2FyTO5TiMBQc7KkKqfB9AlUQoo8cEvNSM9OwUpPaJeJpLRfZDmkMRTLAZOA2hV1tC99Cw0ROBRGpr8gD2MFjODL0SvKySgQuQC7wt8i0XhRtRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ac8dd4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cbdcfe8d72316850b09cb265988f44","sha1":"66ae5464a5cab836aac36a3ddcf12e3e8460e81d","sha256":"a03800aed36896e35b64612197773cefb16693754181990013ce888f2412effa","sha512":"701666c4e0e2289f1ba874a5415246f61fc988a3e60bb6be5b8a9b9ec8cd6c61a876b35088edb5363306309b27d921f882e42965494dc6728eb39bef7d439ad1","ssdeep":"","tlshash":"73f0ac3ba2d4b7b8d110cbacfb3b8090346f182a168222e18705b67152ad05f0c6ec98","first_seen":"2025-05-07T21:42:09.653712Z","last_seen":"2026-05-13T06:38:10.318249Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/app_store_bg_1.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/app_store_bg_1.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52054\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBt4K%2FxRHUs6ckApB7klWFPiMTdjUiYKOyRWD0zCx1H7lq70hqEL4A6sx5Y4TYmjvTiq6XjoKcZDsbbew7phWsDrjyLZrkyJyKWOtyaNJOri6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb774e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":52054,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 7680x1972, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a97e6929287f797e0c8744c478cae5a3","sha1":"9c3b4da53f8e3d7f5f0e5d64e244621d569a74d2","sha256":"7b716fb7d10c7dc646e8de8c77f0063c6316c065186f140eb6e497d6ae57cee3","sha512":"80d03b40d4b8c794a7f8ef81b3499d0cc51068c369bdd609e1b3b24ddca45de7bf1c5cf3ffde8d9d3403ed2eb33edbd80fda9d3450831701c2443e1f36c91885","ssdeep":"1536:ZfHff0W2uCeBWYumkA9IzWCyaXVRF098nRWguqCv:v2uCLYuv6CyonnggvCv","tlshash":"8433cf1f1f919c74c81938b5b2cedd81fbde1a3160d559f9c6304b100a2b9bafe5aa1c","first_seen":"2025-05-07T21:42:09.709371Z","last_seen":"2026-05-13T06:38:10.281981Z","times_seen":17,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/ob_feature_image_5.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/ob_feature_image_5.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74262\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fM2ypNm%2FoMBXall2eA1fl6JUwm%2BZY22xqOXyiCNUpjPXEBh%2FAA3V3jOxgohIGesq3V1tqkksayiz6045l9ZqEmsjMAxjy5VT9usKDESxCNeLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b54e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":74262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa89fb6400f656c94dda746b1a00c3d6","sha1":"ed09c3bb58d102d134299ee709898f2a126b4b19","sha256":"8bf7b2429d538f4a8622ecc4e6618b16052e8decc653c395d876618823ec391b","sha512":"cbbbf538ba54e13d2302057adb41ef06886de50254c0f1d20d9c5a3b06a3d0907b021135370144e6d7f8be44855651645ba0aa93773b8e76dfec0060b4bc1330","ssdeep":"1536:yGi7FR+REyNc053KB3e6eO7BWcpTEd5bDE3/HEzALW3Fy0jU:uK5u3ReKscqE3JO9U","tlshash":"7973016293b7a8a3fa4d723885b43b20e4774d259b14a7f325538191b0a31c67f79b0f","first_seen":"2025-05-07T21:42:09.69785Z","last_seen":"2026-05-13T06:38:10.2641Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3069,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/about_image_2.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/about_image_2.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16652\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXhyH3BsiL95IsHJz5DJnJhC%2FmVlw3aB22nMVmZXQjYduHqcadpZUmIQjMf6o37R%2Fgy%2BlNrPnbCD%2BVfNFqAkT8m5gJtCJIxSen5uGGAo89PYWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b94e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 728x1284, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c86124d9aad48e2e9c60205a6dfd1c4","sha1":"c58b5e7aa0d9258fd8404069870891ffba1f1fa7","sha256":"0828f80268a9fb337d68a303cf0dec23b285dcb6ca012f0d09f35fe6fc5c032c","sha512":"18c7aaab891415f1afbfec44482d3972fef72992db7ff1c8bcdd5d3691bfd9655fb108ee1d4cb543e12618393d29963ccbde0c30279fd14afc46a3921e16d175","ssdeep":"384:wJ+layEXp5jBW+Dm77FaJte18icr2cNy0p:gKA7VVm77EiKD3","tlshash":"9b72e1ce6f170588d0eb0256d1668d6bae7c0239b53f4faccd476c540608ee162ef798","first_seen":"2025-05-07T21:42:09.628037Z","last_seen":"2026-05-13T06:38:10.26241Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2192,"receive":854,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_pen.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_pen.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 634\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wijcpUQ%2BGHwnAN61%2BCes0BlGPv%2BVCIJyibTdhGUmMZX4nk%2BvBdaFGxVnFXzCxi5gSAByF8hZvTpU8Sy4dtl8Gj67I7xkZXF3ziCQ0oABqr7Ydw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8c44e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f84e8805000c529a3d2ea01938c2c01","sha1":"3c35ca93a63cacd20f02b271f98b0441fb28158f","sha256":"59fd87e37cd424b84c0c97a9e716e9e108ebd8d1557a6a1b90bdc126187a7c73","sha512":"77860c163e99879a218f41ab17b4460ffb49e20393f811692da81a0fe43d8bf44787619670c097cb8a9b408d9784c22d1d9e5bf58f986d977d5b88d882b252eb","ssdeep":"","tlshash":"84210fc461ad41ddf642eb7c89757454288b70e16b3084e0e3917c86e50229dfdcd9da","first_seen":"2025-05-07T21:42:09.747193Z","last_seen":"2026-05-13T06:38:10.331148Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_8.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_8.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4272\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlNj4fa814ZeHrAcJT%2Fe3i2SswRb7TBl%2BMRAUL6DiDK4Ok4Hpamisu0wztezQVb4q9GeHYyMMJjz48bcC7W8J%2BJKt2%2Brvgo72g%2FTAoXJOer4hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d34e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b30db5a160816fcf51b702247404441","sha1":"2987ed7da20a49a75ea8f5856f749c89b889cb26","sha256":"701d4624cc2ebba2af0f8c28d9f5161e987c001c47abcccba83acb40df61b161","sha512":"2d36082629941beb6d465d68f5976de42727f6638b3b00ae0186298e7818ff3b3eeec871b6c50a73778ee87aa1c4a6074c4d71455bb736347ae8a839474b3bc3","ssdeep":"96:6aC+YLivu5cRVc4N+XKjONGE0K61HuumvI0Y0LNPvMdyl:ADLeu5c7cFXKiNgHuJvE0LNj","tlshash":"91914ba80783c9b0f2ac1bf715d4d9b237accb8da31b93a4437208df885de4594512e8","first_seen":"2025-05-07T21:42:09.642757Z","last_seen":"2026-05-13T06:38:10.35523Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3060,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/bootstrap.min.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/bootstrap.min.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 28332\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVzDSlKUsnulP76vdwbTbn%2FjseW55rUkAHMq13xb1P%2BnHHTavr28%2BmihRWrdlEjZaxJuDXDqgVqtVA85BMH0BlY4Rvph%2FOHwwhzNXYv%2FaPwJzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a68914e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":232815,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"e58507970abae6f3b168b6d25925503e","sha1":"05380230ae255b4f2f245e2d78f895d534b28142","sha256":"0002513a06430763a562d8a5b707efc376f91b52937ec8672c9fb3ea7fc625d2","sha512":"acbc2236c3a88c6e4656435c9862747487fc3227e8d6111fdd90cf9dd7448f155ba99b0945beaa25ead76c3e4744b377e0330546a5bde07efd305a9d05653477","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77n9P3EV98IsYRElV6V6pz600I41r:RnIw98fEV986I6V6pz600I41r","tlshash":"313482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-10-06T03:49:27.363562Z","last_seen":"2026-05-08T09:13:09.366603Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1313,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_email.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_email.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 255\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJCjHzN2vGmEIzoqJRE9UUlnxPTbnTAGHW0gi6Tikl0%2FHMu4QfGuJLxILEcJ2iCBNfo2R2gb2MOUt5x4zygeMLi9j2H%2B%2FKSKX85YrBBjaFvj%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ac8d94e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdb556028e05dc41ce32b52ca173aaa6","sha1":"e40d7331b598ee127cdbad2c429e7d3d6dd2161c","sha256":"e2fd18806368f59e6c3aebde286f81783f8414737f345380fa802a07e5c97a25","sha512":"84a3c2b4963056eb9ca2849273a7b3e40ba52b77720a8793ad103d1e7b7b95e1da563159b6ad86795b03eaa16efcd3df6ed6d9bdbe974f3e9cfd6d0017ebf0c9","ssdeep":"","tlshash":"d90145ba23448d3c71360714f3b07139a0672523868d3710d831143ad59a5debe7fdd8","first_seen":"2025-05-07T21:42:09.634607Z","last_seen":"2026-05-13T06:38:10.349094Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"52.57.160.101","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:14.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leadwesternbnk.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /fK1qmKRwIegk2bm8jjLNg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 14 Feb 2026 06:10:14 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ijY3Ud8EdHWbndV/qEAg8Q6WDOs=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":119,"connect":139,"send":0,"wait":22,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_5.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_5.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1402\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnvTz1u8MWgt1NLwU%2FHVmi0oJWfFG5%2BYtxxWO4Dq63ct%2FGNPTBsH%2BRcVLQxPgyARSrwc353DBMwanUC92Ly8wX%2FWKsKj4yGA91gnzYz9GClKVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a88a24e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76e17b720ed9d42b5a621cda41461e10","sha1":"3a3a3c2fda88883ea984ac74e58b01d89c63634f","sha256":"11cfa3fd292100c7009e09a616b101bd9039b671ee53cf281bf0935dc18b2544","sha512":"24eb7a59361d52f5314531b4f3465cf5c41a2394876dd846283463a3b6ed6ea57a068c0aa424beafe07ec84afbfc61e29226d56d65d12e482416921d54ac9a2f","ssdeep":"","tlshash":"0321e9b4cb658a20f01a6d4ac077002217f649037b5fed7c0688d93d88972b89565cd9","first_seen":"2025-05-07T21:42:09.673769Z","last_seen":"2026-05-13T06:38:10.302497Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_7.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_7.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1658\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20c8GWBcY09xLRXGjpwzQi0l3WL77xcWhHT9Pf20LlIO8jiAiIlxV6wXrXIMRGPEFTB9gROvzepELaIG2mrbD6yYD1Us7YxLgSzfc5Z772jhEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a88a44e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"538f98255b41b70e3e960ddfbafbf445","sha1":"ce7b025a42a65a105ab0a0a0a75c84c5f12dfa9f","sha256":"89669c369c21770d12595f45bae32aa4f080d62ed43d19fa5d125f5ebe869927","sha512":"724e13495b194f04809be82b15f41122bf50b171eea540cccfd274322f08dcd938a4ba100efb3f2c9fd683e7b87c75e3d60979e3e9a70f2a0685936350dced3e","ssdeep":"","tlshash":"88313a35be808f575109169a0f263ad9b07cdc2d18ade95247dc74dbcf28800dba5cdd","first_seen":"2025-05-07T21:42:09.675032Z","last_seen":"2026-05-13T06:38:10.274002Z","times_seen":21,"resource_available":false,"data":null}},"time_used":3017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3017,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/popper.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/popper.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7120\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01t0ehT7ohUqkNDGIZBM%2BygI3EVX5ACIZtMoFOkrgvFOHpHRiJLgiSClbIzLAzzpXlqEu74McQZGHrkEuTZ%2BHA%2FqzeLO2XouaVVJGKX5kyIG7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ad8e04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20122,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-06-13T17:47:54.407897Z","times_seen":11219,"resource_available":true,"data":null}},"time_used":3091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3051,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/storage/app/public/photos/I6LxD6TdFofKwHHTEtMRGIIKpm9H9lsNcXujNbgS.png","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:14.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /storage/app/public/photos/I6LxD6TdFofKwHHTEtMRGIIKpm9H9lsNcXujNbgS.png HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 19519\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:14 GMT\r\nlast-modified: Sun, 18 Jan 2026 14:14:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncn3TyXBZ01osEc7lFHo%2FldBilgvp6GdxvwoUYQwhIm71SXJ06Uonnp%2FKIHzEbLfDqBMTd%2FkbONsGevW1E5h2bFGmYSiB0dCKF0qpx2UW1S4pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cda66b70c694e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 164, 8-bit/color RGBA, non-interlaced","md5":"e348d3056adb2b3983047e47c4fbc507","sha1":"d60bd9aad21569bcc08a0b0f0f794316778d7580","sha256":"e8a183296308ac7f315629d69c9ecd829d9a3cb1c5e37156d4a8d77fde8563da","sha512":"e2bb11fe79479c457cf6417dcfa3756b8c3160b8db28dea7a83947f8208cb4e93c27f9a470f94ad26c62ef785dd78540d3ea9fd46676aa66cca5d657306f13fe","ssdeep":"384:W9sE4wY+YZV+080tFwwN4NcTPprHqXAm4kLP02Z60DcUx5ox8gYq:W9NbWg0DNYgro3Lw2Z/DcGoGk","tlshash":"2092e1fc949fa0b7e7b8456dc9420284e2336721f82b8cfa17de0b88e406d115ff5695","first_seen":"2026-02-13T14:24:52.467847Z","last_seen":"2026-02-14T06:10:28.566634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":376,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/storage/app/public/photos/cy9eyalT8HGMNQNCnlGviV0xftJ610Wp6h1DOLFI.png","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /storage/app/public/photos/cy9eyalT8HGMNQNCnlGviV0xftJ610Wp6h1DOLFI.png HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 19519\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Sun, 18 Jan 2026 14:14:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKPYyLoUmoOYQsnYT7PG69NJy0ZYy2AVxDcl%2FUt95VNINU4jcq6IM5hKDFfgc7BnFVpX4ys1i2reWMswjMMZP3SRC6QMxITwDfANHYI%2FzuynCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a789a4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 164, 8-bit/color RGBA, non-interlaced","md5":"e348d3056adb2b3983047e47c4fbc507","sha1":"d60bd9aad21569bcc08a0b0f0f794316778d7580","sha256":"e8a183296308ac7f315629d69c9ecd829d9a3cb1c5e37156d4a8d77fde8563da","sha512":"e2bb11fe79479c457cf6417dcfa3756b8c3160b8db28dea7a83947f8208cb4e93c27f9a470f94ad26c62ef785dd78540d3ea9fd46676aa66cca5d657306f13fe","ssdeep":"384:W9sE4wY+YZV+080tFwwN4NcTPprHqXAm4kLP02Z60DcUx5ox8gYq:W9NbWg0DNYgro3Lw2Z/DcGoGk","tlshash":"2092e1fc949fa0b7e7b8456dc9420284e2336721f82b8cfa17de0b88e406d115ff5695","first_seen":"2026-02-13T14:24:52.467847Z","last_seen":"2026-02-14T06:10:28.566634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1306,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_star_3.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_star_3.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 328\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qevkY%2FbttHguq8HrAYW6CauxIxg2OB138p2D73dpB9CrF7VbfyiTaXdQjDAaO0P4fZwcYNTU5AYRf%2B6mX%2FGC%2BvYzfn86bQcbbOV%2FhIBXaedBBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98a74e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32e2fd3a7ca690b00565ba1b37f0bec8","sha1":"865c272da340f01d3a05410cc926e3ccbe1b9979","sha256":"70247e50cee3d2343876e1e1ae52cbe9377b0ae23005fac36e16c1f76e0dd087","sha512":"fbca46800b9481565764f7239b25d7822495511b76c3021ec34f643f0b4bf677f2f862f159133e7ae667f4fdf90be3953dd6713bc9b490b36c76226a2ba981a1","ssdeep":"","tlshash":"38016d6cdfa9c58944c843a8e321e4b529c1bcb77f045b13d4407ea46843559deaff49","first_seen":"2025-05-07T21:42:09.662112Z","last_seen":"2026-05-13T06:38:10.313821Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/fonts/fa-brands-400.ttf","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/fonts/fa-brands-400.ttf HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/templ/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 110188\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7Wwe380U6wgJp8LRtkPQZRC1%2Fzv0cYDUZMnm38CxC8Dhp0aIpMI8fwfXZGPDEe64pz4F6YN9Cjkt7Pd5mmrKf2M%2FKxhwRHmMj6%2FO4Y8FbnsoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66b06b834e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":189028,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"0b45080596248c38ea184dfa9ca78e27","sha1":"76c456042ac096c5d27a6319621ad7bb29df65c3","sha256":"fd05e2bbb94a32e7635244660c101c9bee5e4795dc566fc3a8782469436b0f59","sha512":"f4bc317b5ceb8c22f626661fb2b10d28d4a59be279fbbd4ca1b68a46b5d785a8ac0f6cda4360de0c8abbb26e8d6654a1fe47f5f4d0bc106262ba5086045e9b6c","ssdeep":"3072:MywFqLuZJ6+E02aqPrBGVh5hiUnV2Zf4OhJntJZDwm+s2X7z/:e2kJ6+E02aqPFI1Sf4OBJZD0smn/","tlshash":"71046c8273ecdd8ed4346ebc88d21b9791eab11ceb180b31fece589dd479dd808056a5","first_seen":"2024-01-17T19:03:36Z","last_seen":"2026-06-10T07:03:52.597863Z","times_seen":104,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":478,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/hero_shape_1.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/hero_shape_1.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 742\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4J%2FgRENpxOt7o8AHq6HPLbZvT1vhnPCnZHNQzkjsOENVRXy9g5nYJ6Q3WnSG4KwurfWzsL9OtO57cI%2Flz1PDkMavQtnqVXjm2nGDVAEoC%2FYCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a889b4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2404,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccd721323e5e6dd658445ec36652768e","sha1":"1ae155a2ed27b2914a62472f9315974253fb900a","sha256":"a85ad5f4e331635d7673d01d53924104f208b2c1f1d577740f15e13a499179da","sha512":"6e3424556b96da5bbe9ac5032605b906c3076e90341a6267e2faea51fc0c71d714d74e4be97adbfb23b11c926a18cf0e16604c68074cb652c8be529c5d66e4be","ssdeep":"","tlshash":"ca4154fdf0b45c9a66c58279ffda5493202650fa800453acd47e7a323057ed2e92ebe4","first_seen":"2025-05-07T21:42:09.729145Z","last_seen":"2026-05-13T06:38:10.278017Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1966,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_10.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_10.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 928\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmmQC9jrlleOSHc65vnFrWQ5iWKO7q9fK3YlpoWTp81ov3lKBO55KPVTzCT8F%2B8rKSt%2BQjOF9OeJUDkM23OW3FJhKXiO5F8wd%2BpRV%2BcLiR6mZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8c84e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c7d9f1f7ee66fb82cf80d4567f1b0df","sha1":"ace72af24c8569afbfe5495ac7f31641b575fbeb","sha256":"f75338f9ebc8f32df6ac3cdb68c470900ba3ad023e6adb7407f6425e7b8ac924","sha512":"96e2a89cbfcd1f6aca8584006b831d9149efb0b4daf09f45f5d7b2ee853fcada7d37da4d12f7fb726bb18e06b74c647ca131485e7957291e4733c3d5ece9db39","ssdeep":"","tlshash":"7c118460c0a7323398c292a1c335c77e846643fe732e53cb62db607a0be454180ba6a9","first_seen":"2025-05-07T21:42:09.689148Z","last_seen":"2026-05-13T06:38:10.354651Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/parallaxie.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/parallaxie.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 641\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo8%2BNBb1N%2F5iGAWpZ8XK7VIDsFtpIjP5R3U0yBOn%2FGzUIrLHgW950CU4YGYZZDu3saLzOXPKn4QeDOvLZoGYnHhqKtaxWYgL0JJUabtLOtPo5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ae8e54e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5c15d576a085c7ee4e80de32ea9fc03d","sha1":"7cc3e0057f3682094c9bd20818725121656f9007","sha256":"7469042fa4aca04500e51f6f1d6ed03489f8b973942f3c9bf853af8ed4899ff6","sha512":"b0ea0c9ddbdad4e038d6fbdf4a12e16a91794cfec22f8b3361ebf19ee8e5121b0d53be2919c3805bc811185f4ae6ce76ee8c1aeb641e32a7973492fd67bb48f7","ssdeep":"","tlshash":"7d41ae846463520776ebe6f99fbf1100213ac517244df60abe2e63e85f9061cc5a3bf0","first_seen":"2023-03-26T05:57:00Z","last_seen":"2026-06-12T21:58:31.152673Z","times_seen":108,"resource_available":true,"data":null}},"time_used":3290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_4.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_4.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4338\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3vX9rvJuyuxPAblRMuL%2FdTqpAHDAlusbL12rs%2F9K6W1ZI8qqrFjVCxGeiBw4ES%2B28onjssf1joE%2Fdo%2BYXY9ohnCjmB%2FvSD2q5%2BapydzwVbWyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a88a04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1f8652ae37fa489b21282a1e73f0851","sha1":"1af015d73946202e7e24b428fb9a9123f5f4b774","sha256":"304720e6275a3f13f4b657f5754db3e58b89a38025473ca768dabba997a90dc0","sha512":"00497676b9fd4ca4a7441dcc74f3ce5d394167e81cd59714396eb7559d68f1b4c1fbc7ad536ea7630e209dc1ad03a16659a25fc2e191dc6325f1948101688605","ssdeep":"96:9mJkE7LgxQeGu7Ly7TMqX4Esw5gcEnJ53tp/+d+FZroeSxEfvHPwQi+/:QkcLgEHMW8wScEb//+4ZEmvHw+/","tlshash":"90918dbc85859c617d7c6fb1e8d8138b4546b23542c1a850b9b62863bd117fc840e51b","first_seen":"2025-05-07T21:42:09.696779Z","last_seen":"2026-05-13T06:38:10.263567Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_8.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_8.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2844\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZVj2uw9FW11SIkaTA1EjNS0j3PS8EHhL8jA8UFejkFl%2B%2BLEeaM7sGmZUyNqPeGJtvbxTCeBHt239IAefqV%2Fw3NrQKNKo24TmdnufP3Yt%2BcJkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98a54e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"333e804fdfcc3d1a381e0138673ab0f7","sha1":"25f482a4e9db1709502badb4780bb45d7fba6654","sha256":"bac076c0bd2b3f93daedf7a67fc1f2ac64446978680cd9632d3c9f185258d103","sha512":"329955a6a340153e88a547f3001b0bbd4364a0ca4f610c21ec0b39fff62d21126ccf0e2d65bb5203b885042a55354c8504e932569c950b9b5ac99c5568cbd31a","ssdeep":"","tlshash":"13514b37be29c46248ae1ea12608462d83bffa5e3092ec940c40e3d9de0311c8b2754a","first_seen":"2025-05-07T21:42:09.626447Z","last_seen":"2026-05-13T06:38:10.305664Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2611,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/avatar_image_4.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/avatar_image_4.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4032\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFG8m6JZhsbuSsG0JEpXzMh73w5LjayyeRrQCmX%2FZY%2FQys1Ivq7obO1R2ZOjplEBwaphoMPRsz%2Fy57BCYWOUltuY0eBDXdo56bluRdkFRDb0iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8ba4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 172x176, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"017b70e6d2fd4405ba7fe350df27950e","sha1":"0676a9a87d214e15b5563a01f16aaaf0597a5da9","sha256":"bd5e2b6acb89a77000bf05e7524fd6c7a1b847ac206db2b962332301255de2c3","sha512":"fe8d5660de4ca07d924139f3dbef8ee54c7848ddc94f73b30b19ea62bc4dae6280176b5387f0814030af284fa84a3c8ed5b1b8a9219bed25d1bf38f4ee83c9f7","ssdeep":"","tlshash":"c4815dc801021a42797a155d48da0af07a87db1fe00a755b7f9dacae1fb0f740fe5752","first_seen":"2025-05-07T21:42:09.738168Z","last_seen":"2026-05-21T20:30:40.032303Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/jquery.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/jquery.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29739\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5OKk04%2B%2FWVGgpF%2FXzYEwvkq%2BfuVzurJzPyPXC47w0ltbdAYesMsP25A%2BcCSsqhvFDAInr3JI6Kokf9wT04qhI1G9nB7Ei7yMfNyCSq1gJEh7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ad8df4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-13T17:29:05.24448Z","times_seen":168607,"resource_available":true,"data":null}},"time_used":3148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2993,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 06:58:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXibN3QWqw5dpVxz3vuo6T7oFdykEH36RjOW%2F73Yx1wGpxGXW2eN%2FWR4O2BQ0fqaJrZDJUEDu7Fn9L3pcq99QB0aAjr4w9jKLx3dC2knhOZWuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 06:10:09 GMT\r\ncf-ray: 9cda669ad8de4e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/ob_feature_image_2.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/ob_feature_image_2.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24662\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjeUGyw3KtbYslt3oi7HYGHF8fV%2BNvTN8zHWo2XIHJJo01UltlFJa0vYBPW8EGbEukuXSLMU3GDZLDAdqFJ9MzMddf7WCsSOE4de9BTLj%2BtQug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98ae4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"632f0cdb8e470d812faa04eb380b72bd","sha1":"894dead645d88a050a7591bfcdfb8bf904311242","sha256":"686155d519a0743d4902c29426f313550002eb2c6210927193944802d2d9bcb9","sha512":"c7d57805731de399ea2c881ee4a1778a53fcb14375f9837746abdea0380bd5422c18b33beb74e3533299af6a7c37a8c5d71a5d272f4e8de56591d543e69c8260","ssdeep":"384:dYilLPGkSnpCdQy90FRX1EYqAiE1CRoHQhMBuItx9szjF1kXkEkFRBRHSwu:jOkka99SJzikCRFmekXv4Rywu","tlshash":"4bb2bfd9206d601eb6929ffe56e1638822b37430a67d07e17e71b6633e019e5b78c2c4","first_seen":"2025-05-07T21:42:09.730741Z","last_seen":"2026-05-13T06:38:10.353631Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2736,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/ob_feature_image_4.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/ob_feature_image_4.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 150526\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otpUJMWAaeRc9DpBnM%2F8s6OIGsloQgrZQxesfIcHNlxJxbPjlOKrjndg0zf5SgvjmfQkCC9Pm1WLNIvOCnUVaojTeXv7CytFSDzHn9agYc43pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b24e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a9b3f315bb8958a3356275c7baea861","sha1":"dcd7876f6b16385caa9e95b58bd608975a5feb9a","sha256":"ba02e32e4193e177bb56e4521210580ef2a77428a91ebe6447c72d1656638edc","sha512":"2ca79547df96dd1b26cd77e9c89151ecc28fab484444cd19101087dc8fd2804b71cf6a1d34171d464129766d603b03ddba86c2d5e8e6fed66af1d2cc1a76bd61","ssdeep":"3072:RqSag3ci7R/lajV73UiEivGU90upXp4prmz1pTi8aSSwuPM3Z:RqNJiR/+tKY90oi3SSwaM3Z","tlshash":"2de3130723f7c87f3f213645cfb47b30c1b962e99637a503a5a1ac8957618d56a302ed","first_seen":"2025-05-07T21:42:09.646069Z","last_seen":"2026-05-13T06:38:10.344174Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3367,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:12.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 06:10:12 GMT\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"53febd1c7538061997231870f5c7c820","sha1":"48e8d3ae94114e5604d5721b6fcbfb7b34c9faae","sha256":"fa250da7727ec8c7fdf1e237845210bfa3c46b9301d2eae60ce8c11e1c06ef20","sha512":"c5a624baf633cc7a11b6d0f54df65a6dcb9879c2d583c184ce7aadd9eac322262af822da9fcd880f59f8c39d28d27cd2283fd56a2e52926d78e9f03d3eb938a8","ssdeep":"","tlshash":"f031fe81083bb054a79329c122ce7d32df0fa1d064446c74bafe2898fc66c6e5371b4d","first_seen":"2025-09-12T17:42:30.88715Z","last_seen":"2026-06-06T05:26:13.594057Z","times_seen":106,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":92,"dns":1,"connect":18,"send":0,"wait":34,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:14.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leadwesternbnk.com/\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJCgH3GgIAAAwBuUwKEwH3BQAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: e2f7542063c5cb81c6119069e58d580c\r\nx-77-cache: HIT\r\nx-77-age: 538\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":55,"dns":29,"connect":7,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/style.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/style.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 27624\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7Uuf4Vpgwq9jtu%2BRwYAB0eRfsWood3GCIKj5YS5CYMzbqODOPwI8KTDN9BO9m0D92GBff3se3Pxw6iQt16M392CDJ0uFPJxFyobPMhHKR4LBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a78994e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":179193,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"75f220a0c320973ccfb1e3299a385893","sha1":"c9c414e1b746945a85ef80e8f895225ecfe608c1","sha256":"2a76ec9278f1087ab0315152100fd668adcd461ed05cb330b966397a36c2ea1c","sha512":"88644a43c9f3c3b5bb2d30a634d1bd9d6a1c934bd5c04e95b3ed2c98f6411e8b89e476c9cdbfc2d68cd72874428277542ff42bc136e2e79d0dd39504cabc3529","ssdeep":"1536:6caPtffeIPvniMVL/YTQiiGRl8rnDKzocBddbuMEQHGEiSyFUzck1MQxZPlOPuwb:6+DRlxzDkEju","tlshash":"6604324796b251853917b5286febaf4573646003d30dcdf4bada610cdf883e862a27ce","first_seen":"2026-02-13T14:24:52.503884Z","last_seen":"2026-02-14T06:10:28.580353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2221,"receive":858,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_chart_2.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_chart_2.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 533\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFk1O0bO9OISklcHy7FrNg4ryk4YEK2AgK7G8hPBD99T3r9kSdjW1lyCFUctAh4gqNoQkSui6iXYzcuMLM5eiXmhmWX6uOSs%2BNQWN2W2v7akzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98ad4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b39b64695e4978196f9a5965c04e3162","sha1":"5df68e8e07f72cb1ad8ef89d53200235ab8096ed","sha256":"9f4c962d33599e333743174a9eff41e6b0d0bbec21200b4d35f36a7725b1899e","sha512":"a8a3cb19fcaa61f869c1f250167423387dc088cd326349a9aeae31245e765f0690852d07492f6f9196c680f05598a2fb768534f8deeb7348460a6387b9744aba","ssdeep":"","tlshash":"7d21685d9feb84e5da4a1794a002ede6c99b19b63e32dc48c5c91ae092925fd40d9c40","first_seen":"2025-05-07T21:42:09.650346Z","last_seen":"2026-05-13T06:38:10.330529Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1952,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Sat, 14 Feb 2026 06:14:49 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3FwAAAAwBuUwKCQH3AQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123a0082f31c5119069ed8f8a2b\r\nx-77-cache: HIT\r\nx-77-age: 23\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":52,"dns":29,"connect":7,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T06:09:55.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 14:10:09 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nleadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 14:10:09 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdTTsuiergjJ97x03P%2BJ%2BfZ%2B0bVOrgY1r3rFHdUKJGRQD0d%2F7MEuf7a0Pvk8DWNFs0i8ewPSAsEoF2Tz6Ld0HlmjJl5BLJVTXCJrjsPXG48TUQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cda66413e38c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":101449,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (329), with CRLF, LF line terminators","md5":"133f47ecbbf9be3dc51e60feeba2155a","sha1":"7df62e4b946ebb6c9a2f3253d30210e56d1b4d67","sha256":"2ad29b6767761c758d284b4bf064dbaed870af1605560afc0d7db57dd2a8742a","sha512":"1ef0d0d3535da1ee05c6772781e158d7a62ff66adaa521059c4fa7ab05b6339ba97589aeccd2a1c3076b0310342c23126337b288c0bc9aedf74b3554e509ed0d","ssdeep":"768:uq2ORdtu+Eptib5U+rkFuHgBrkFuHgeXJkqQ+YWYuiJDdu59F3DNQgn3cfdxnCap:lRdtuz7F3vvddkdocbJh","tlshash":"9da30b7960d162630173e1d26b216b4efed18107cb0b8682b2fd2b87afb3f51d967509","first_seen":"2026-02-14T06:10:28.584477Z","last_seen":"2026-02-14T06:10:28.584477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14172,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":14089,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_global_search.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_global_search.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 967\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INQW6aCG01BVtXknMGi5Z3IQpF1QN3k%2FfB3%2Bdm%2Bruc0zBCibMjtMxgZbDdgYOKotkXZdVKL01WdND1Vm0%2FtRReOJnnN7k7FIt%2B94VnBP3OmLlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98af4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44aba4786bc8e3d44a3f3a16164fd86b","sha1":"5aa0824b675fbc6ac0a50870fa6bdc354c5cd905","sha256":"14805d07c35f61c34b053dae7576346948a045140bc290852669f6d744a8f25c","sha512":"adf5577a50865610b77e77c88023457d2ad5e379b2710b4e02cf3cfa07df9d6ceb4f20aaf838e41d865c174279d9171ccca913198de174702a0f34ba3f52d67f","ssdeep":"","tlshash":"1951f1e57fff8084a48253e095a7baa2e26727fa1d3adc4047e45b24a8c04de9c5cd02","first_seen":"2025-05-07T21:42:09.640374Z","last_seen":"2026-05-13T06:38:10.359506Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/transactions_card_image.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/transactions_card_image.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25972\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czbQ08GRRNaK%2BUSgZHcDxQLz4As%2B3eWX5gxtWSiP3ZRzIGbK7fpU2gv8Xb5f1BhWNBvSNz7mHKsncAZblWb03GX4I6kzeC5re%2B%2BlJQaRolJ2gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8c04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97ca38b88d0d71038104f516a93b98c1","sha1":"281a366ac06a96a7871190eae6b3b0437e77893d","sha256":"9d3b242a63aa8ef5dbcc6a766d02e7dc69fb7be398763840a4dcb66b7272d740","sha512":"190f415fbbc2d41afea0a3e60a889167a40a7016502438df91341e03961287717f1a273de0db4cf460af49b1bb607a07dbbf53f6001207aca49844d918a6602e","ssdeep":"768:SfgNuPFFNAQmoopC1cEPKW3FIaFIVP6ZalJ4yX:SYXtfXmKy58CZgX","tlshash":"63c2e120dfe141a66a341e7221aeef99610fe85c1f9105db9d2a4c1a383cd1d277c7e3","first_seen":"2025-05-07T21:42:09.647202Z","last_seen":"2026-05-13T06:38:10.327597Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2043,"receive":1542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_10.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_10.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3628\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kZoaM4zuzqxPh8Bb93PPcOqAbacZzj9uuKpuk1EqvCgFTtJ76WG3hC2a83tLuSQY2mhfoSBovCssoCHj9jHtkbx8kyBLRcnpFzm2QVlbuPjwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d54e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"475deb46465616ad31a59c9f1a868311","sha1":"e9e46e7622c2fd76da88e41fdf2ae4ed8205a4ae","sha256":"635a7567bd9959172f9895a77573d36c7eae64e41894197dc621d13609ad623a","sha512":"fe146ae2b514368def104dd2d2aa4dc82aad1d1212d6f247edeb4b0fab0c6183951fc0c95af00031a8b4dc0f51aeea8a46d6371ee84e15966b2bf9dc2ab6a2d2","ssdeep":"","tlshash":"cb715d306b9598f8e07d3aff1fc201963a8cc7469f2fbddc910718acc5a295152110e7","first_seen":"2025-05-07T21:42:09.633648Z","last_seen":"2026-05-13T06:38:10.27144Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/animate.min.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/animate.min.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 4257\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRPKQlf%2BeQ%2F9QX8BDLh3LC2mlasOW8w3kd7Sjhj8ME2dGMPsKOT%2BdhT4CUjBR34WsIB%2FUt3ck8C3ubxcvVMFJifll2Ji60R7iDPWikstiZODdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a78944e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62018), with no line terminators","md5":"c10921850b5ce9db03a5052ceb45e639","sha1":"064e95bd98143f4983ed3c9d26512687cb52dbad","sha256":"7f5ea25d7b20c2b3b7ca083776104d5e24c5fed557a30a483348e96dbf2ea783","sha512":"a5c0b954095aa8639748e1cbfeaf9c8e8f271e7375e27e80bb60e5845a405a7579b3f0130c0a377da906398e336492ae81ecf4b987c6d5f43c036a992d766086","ssdeep":"192:4xHSW35HeHGFg52jBW9hMoLrWn9jX5SEMSEZC+xY+MvD:KHeHMy2j2hMoLrWnBXmC+xY+MvD","tlshash":"a153d89a5ca0214857224915d7ce9fa89a3cf67324b14cfe73912c8fcb45bac13dd62b","first_seen":"2025-05-07T21:42:09.692959Z","last_seen":"2026-06-06T05:56:29.944351Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1433,"receive":544,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/fontawesome.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/fontawesome.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 98733\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqRJaHCIcFtfD1zQsvslNhSsxwwQlvZt%2FPZGTLipDEQSBn9KFjPSomJFMjBYQuURMAmt%2BgEQjjYFF4qPxWVhwkvHursDa8w5m6btjpcDRQ%2FcoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a68924e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647978,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"c107625054ca79f0cd23012ea7e69fe2","sha1":"ab08d284a5c717ae7326362572262c25f8d9e337","sha256":"e3de29d403cc66d4d82ba26b1e1ea98dd6eb15e98b7eb0f708aaba54012b4e81","sha512":"a77a4a7d6c8bb096e45c5865addd455f2f5496aff5eba9596e256414f280c86a4eaa833b7224a607bef5d6b4739dacb2eeb47be0e10809de3d777bc847855aef","ssdeep":"3072:R/B7WqlpQhVEtwjl4BeuHnk7GIhUf4uUbTbW07voSbp2NxCudEpkVXTY9IBZCqEC:jgRRX6VDY9IKqkEX","tlshash":"fbd483e850fd3898834ab1de1503f160fb7d736e98474d4992e56dde69f2b088082bde","first_seen":"2025-11-11T17:27:15.584304Z","last_seen":"2026-05-21T20:30:40.117098Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1437,"receive":1598,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/card.png","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/card.png HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 168686\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5ZlTPuFm%2FIecZbWe3AzSGarIvH%2BIM2L6dwO%2B5nVjP7sTP%2FARS0l3MUOXEY5wrJU6nOTvAy2bMB6veIoXccLMAyaCvkV71szSUpT77LlxcPqiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a889d4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 584, 8-bit/color RGBA, non-interlaced","md5":"c534c83d6889d94e8d148651194d0ec4","sha1":"f5e9ab4e3074161266638acf48a572e9fb969e91","sha256":"6574edc0d5f2eea91252f0e1e546b7beced2a7f6bc7b3ef9f5ea46e187059025","sha512":"19dfb47e08d93913b8cb9cf16bed698c2d7f209a3637ee552aadd53c1d10b25baf23f1ceb54b8c055965e6a457645303c0d87ca79d960b3c911f0154bd7c4d2a","ssdeep":"3072:P3qj5fa60ce/D91buKwzPTUcxumJ8t1daOSAVUDaoH0FmbHCa2K1aLXP/Sna5HzY:v45WHR5wTwcjJ88OS5RH0Ty1aL//0Cuj","tlshash":"c3f312754e46f23a6fb36a7be39a9cb11300d193d53908c8f0baf89591ac7648d994cc","first_seen":"2025-05-07T21:42:09.723299Z","last_seen":"2026-05-13T06:38:10.296004Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2069,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_6.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_6.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2700\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5F0FFUvOYjoKxbQqW0asWPLMJqCm7EBSpWYABWH57AXXTmR%2BnSCyilEDLy9Dwc0ZTfQ5bpfviYn0dzftbsZs6k74tIjkwHQVvKEr%2BbdIMkkKfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a88a34e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88dcd5d8b5336ae57f06883d1e2d0733","sha1":"4685b8ce739baf6fac59d18f1c566b1a025043b5","sha256":"c3ea8a590caa4c42658b57d5a1f3942c3c7b26baf62ffc7904ba300bf2a1bd51","sha512":"23b9e40913a8dfbc4a07bde7aa2bd6d09423f5adf059c830bfb83a2d16ef3d23ca26f04b2fce8ac28653095690457e1e5f763e26fd67fb072ea1f0437cfbcf95","ssdeep":"","tlshash":"14516c12c19a7a54cd21a926140e1796832c318e4f288032d71f2e2a1aa82335abb5e1","first_seen":"2025-05-07T21:42:09.656478Z","last_seen":"2026-05-13T06:38:10.261801Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/avatar_image_5.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/avatar_image_5.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4354\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5y%2BoYDMWVms6zdT8wZZ3sMc8rD%2F%2FwMluKjoLdtdUb%2B%2FScr%2FF7IrHWHplcPxZYPmHJ0A4jA3ab8SnIEM%2B3ef8an%2FXItsaNrrI9Cj0NIcRfIr2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8bb4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4354,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 172x176, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a918730c41c88ade7dcdbd532a81285","sha1":"82b16e464e9385a38ff02f7494088c3e2c9ef784","sha256":"51cb56c5b96e0165e9e950cf3a926240ea076089a5b1f5724d055d9016210c8d","sha512":"25ab7e55552e4ad8dc826bfac2734d2a8edcbcfca1da8c6f9eef88882bb77d7611290063cf026fc43db2d5733e372cfee063533301677101485f9f156132ec33","ssdeep":"96:E2R7kvFcHn0ByEDP8WDf/snZoEuxn7Hj8Vn3vDtzVR5MN72AXSsIrL1Ti:xRmDBy2PBDf/snOEc7Hj8V3v5zVRe7LV","tlshash":"5d917d83d65179f6b2e4a38293b91994277578a01211ac3ce38d7f7b2345bd9b720218","first_seen":"2025-05-07T21:42:09.703071Z","last_seen":"2026-05-21T20:30:40.152836Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2914,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/ticker.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/ticker.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 44777\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IE2rVyWvFTcmmNKxV6TzPST6E1VLySbiVzj32MtKHKTuykE0%2FXZn38%2Fiqk9%2BcKj5SQEZ8aJrdfSHjo0avUJHcLkGuXSA7GMBF55ixwN2P9wuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669b08ef4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":144492,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65253)","md5":"9e2cc8fafebad8c9ff5dc21444eeccb7","sha1":"381f68c32380c443d8cb160c313583e98d5e01b6","sha256":"a6e82afa42631492fe185de34d7c259b2eaad1b3ea7b219907866ab254be5505","sha512":"3028b735efa319c8e1bbd80ee9a5c731721acc48d0d9d2734183d8422d3f90ffed23b9d144cf7a59f09f46b862df06e7466aa570cb4a0ca171982cc37ae10096","ssdeep":"1536:7Tv2hw5b9fDhtQFJiTtBaEzeGYrf/XDMFMmehOaJVG4FtzMuRioQzk:7TS2aKeZnG4Ftszk","tlshash":"dfe3f8e83992f651aab3126700ef2807733d1a1b280c4960a615fdde75b845eb13bfdd","first_seen":"2025-05-07T21:42:09.717373Z","last_seen":"2026-06-10T07:03:52.528089Z","times_seen":32,"resource_available":true,"data":null}},"time_used":3147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2973,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/about_image_3.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/about_image_3.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34282\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgkeab4m9NxplDWt3Unvb6k42WoLu8YBHVu%2FdigG5%2FVRpFyG9H3TLHqY4jrh%2Bdv4tfoADYueH0pS3o%2Fe5FbVY6LxcuEvhynIsdrRWIF5%2FokCgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8bd4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1284, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27fcf4f17815f9ccaf05ef7684e48e53","sha1":"4682faedda368b52df66b9792064a3fbf5a2451a","sha256":"8693b72cc8216003cb0a9e4b7fb4bfa08359d81a6c2808efd67811ad66af4fa7","sha512":"13ea89a781758c40d8131055311e5950549bb7c67827d29756c4edb9e83f77fc3deb7cc6fced2a679af821345aefa35f745b140b06b1d596719eee006b650161","ssdeep":"768:Yy3gkfH6cvWIcwCM95tNL9pDgRTSNmE9DHxpVOKJem8XIpqtG:UkfH6UtRNL9yegE9DRpVMrIiG","tlshash":"2bf2f1cd62002a10ebc529d387f757e870d75e24c778fa9cca4979e88636eb0f85488d","first_seen":"2025-05-07T21:42:09.676336Z","last_seen":"2026-05-13T13:53:45.890104Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2606,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/wow.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/wow.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2572\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JS%2BMm7lKVbGEykStjsWkIirJqeYhmYDHUF2kE%2BSfs4%2BHMeYX7trmoFrde6YcUFC5l1MLHVlb5w%2FFZSB06mISV8DtGCkYxrWljxIOxqj5TEZJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669af8e84e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T18:18:43.4966Z","times_seen":12891,"resource_available":true,"data":null}},"time_used":3022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/odometer.min.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/odometer.min.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 409\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWxgBEmsp9tN1z2%2FerKGPO1eYSYQ%2FigqL4%2BFzPDPla4p4EoVo%2BQMC4CXPjDdW0h4l7KR14%2BkkT5arWBfHciw4TqDVTbvtBoklliVNYn9mtXceg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a78984e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3322,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3322), with no line terminators","md5":"118873996cbbf7b1ff839ea78e6f8a6e","sha1":"f9648d7019bbe4e571cef69d34c3359e426e01c7","sha256":"6187a45d59805c9dcb970e0c4428e9f685202b6af87749bb0fa0aaec6840403b","sha512":"45200d1b41a544d9ed108cf5147eab5eb62044a4c2969c405695fd52d69e8d9f8e49874de4c1cf1021ee3f87d5a7c77de2e9cb606720e8a76fd9d6b347bdb959","ssdeep":"","tlshash":"546126291f60132863367406b6d91761fefcf9616223e59db31aa44bce03db9c399b07","first_seen":"2025-05-07T21:42:09.694284Z","last_seen":"2026-06-12T21:58:31.175689Z","times_seen":118,"resource_available":false,"data":null}},"time_used":2087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2086,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_2.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_2.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3346\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6oZSyumX3MEAR1hQOkyBYsrlyYC0lQ4ddTYRkngV2%2FTLdcUiORmBqZRaCdF%2Bu8VChgj4EBiFDWtVG3uCXBQcZ1q4nfN2yiQj6IhfosMmUAfJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8cb4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bad09e925ca37039758daa0d285c11cb","sha1":"f04b1aec390b53b98f392f26a7cca4856e32a638","sha256":"1eecff7dca9226a700eac6dba4136974eb42022749f616e82398009944162288","sha512":"f37bf9723e84c7f1c0b35889412fd41314d1b3d3a6b7468a429fb3b8d2f17918d1988635cdcff4b1f4307fd9869ccd2017200453d34eee719ff92d5d210c108c","ssdeep":"","tlshash":"f9615ca90a866cf2453161bce771d1f55223fad005b3a974d20ecdf2c5cb3d1ea56401","first_seen":"2025-05-07T21:42:09.739552Z","last_seen":"2026-05-13T06:38:10.308507Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_4.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_4.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2660\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbL7xFYMIkQf4oAYV%2FmeMwnLQ9%2Fx7DJ1XGtzlecppsx3IoUYbndlXjh%2F2nc8gtE3kfm82Y7ZgI%2Fx5XSg1qXdwhX40Ug%2F2yn%2FiLL6lOXOTniuZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8cd4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16aecdcf38b1e75ebec451be94ece4c3","sha1":"ebed3f950a0ceb23dbf4d3589bdb8756e6646dc8","sha256":"d70f39b7baa552d7e72ad5237dc3025f4082c5633015f9258acd6f89c27c7bbf","sha512":"f0d98fdb994693407645f63a26fdf5fe5c38b9ae40c27bf2744f2b7a6e202425bbc7f5f1eadc52656e0e28ae9a33325dccfd074ad72c0d3ef43965400915c53a","ssdeep":"","tlshash":"96515cf0d6496f9997490b6c9a6a77ef252376d1800ef637096d9c7c400b414a3bed00","first_seen":"2025-05-07T21:42:09.69042Z","last_seen":"2026-05-13T06:38:10.270732Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3069,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:14.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-DPeQuegu.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-451a5\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3pBEiAAwBuUwKEwH3DwAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb54123311f2837c6119069efcca202\r\nx-77-cache: HIT\r\nx-77-age: 2232740\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/about_video_image_1.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/about_video_image_1.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 182416\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=puW%2Fa2oiCXtu%2BTOhTDuutMEi1bvw9gvzjDWWEE8mJVNoboO7w5vjbiHZs1atq5YquU1aqRi%2Fd31kLsTVVlT%2BH4o92riAGiDOfw1cEui1a8c8xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8bf4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":182416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 5160x2496, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c61d3e1a5d07311b76283336d33dfe9","sha1":"a75e34d501fde08b00e0445827a6165d4f45ac4f","sha256":"9d4f70bdc1b963eed439c6330d25b72c73825f5a7a0852d8ff5f03f4062a6620","sha512":"b5c33cd63dbdfdc615072977ff5c61e5c80381b2c4d3f4ad226954b9fad28920c7e0d00f788e6dfc877506b08e3de0767df6b79bbc4bc018e2cb441ac0c42d75","ssdeep":"3072:Nn36gXZrrPUV6E2KDLqLoYw+OVhR3nKTAQSWShGO7tgfou1nu:N35dqV2K0oYw++hRaaGpo4nu","tlshash":"a804128858b24e88082fafd510c765cdbfda12b19cf15eb11858e3197a0a635f8b76c9","first_seen":"2025-05-07T21:42:09.629178Z","last_seen":"2026-05-13T06:38:10.321438Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3085,"receive":804,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/magnific-popup.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/magnific-popup.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7043\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msGfTYh%2FEdaaDYIWqt5eOaNGoFa%2FhPsNdGeuS5ErZ8ASn9MTgLLfxiQBNIZLWcQADNdAE1SSOfeN1lYzsZoFLj%2BoijU5cvXqmJDjIqHILP3MWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669af8eb4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:30:08.629027Z","times_seen":66964,"resource_available":true,"data":null}},"time_used":3169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2978,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/hero_pattern.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/hero_pattern.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 475\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggweOh21Hh2MTtsHhWIUwDvzoNAqk7c85q5u%2FD98yAeC4pvLjY9nxeJDRTqGZJeQTSPqMpxvZ3ublJRSzKstLpGVVWdk843TlEfsU%2BeH5BYL2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afdb6e4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"005c68018a6c9fc5d0dceda3efb87c2c","sha1":"717cc98479f4c54b259c0c470078612e54f348b4","sha256":"92a904f917c2919b850bc1096422c8f0630d0289f54a2c547f70fbbf528bb9aa","sha512":"71a9741a04df0612551b6a163677015b2be9577ad9e6146dffe0f5b659b0f785972bcb1091681a433749de0eae912b23fb641a8aace918fbd729a41997b48afe","ssdeep":"96:BS/mxNQQlnoN36ZwyuuJVFI8nQ4P3Rde5SWJmcLn07rEdKm0KPhfE2nhyTFFbbDT:b","tlshash":"24f1b954738899689b442f6d631095e8a563f4b1ee6e3304cf82796f392d4d9ec3e0ce","first_seen":"2025-05-07T21:42:09.655038Z","last_seen":"2026-05-13T06:38:10.340745Z","times_seen":17,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_bitcoin.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_bitcoin.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 523\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MR4LuO%2F3z7pvAELkr2Fh0dcqxN9N8OCqokYyE5pVMuueDIupwZjW3EvIXYErfKEZCkZkdVGbOtphj3KLZ0OREdbWefA%2F9KIgnp9KUP9jsYlgpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b44e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43e9cca8202afd53b69e4ddf7c9b5e38","sha1":"d0b7b2c10949c53f28ee8b97027a4a50103cb8ff","sha256":"a88aab648649b3943991bb3a997a9221d52c16ea3a020e5801e53f6284115e42","sha512":"007c266087f05391646fe4c2c50bfb69c043b6cef710f51c860c200b58c624d87348e0cacbc92261f0bdd34491b9853f46c6ca4f0a5a2df4c396eb8bb873cd41","ssdeep":"","tlshash":"c121f0f1d5f22050d6320782826ab22ae1a7217c2e778cc4895533b9b451c1eeddccd8","first_seen":"2025-05-07T21:42:09.746133Z","last_seen":"2026-05-13T06:38:10.289081Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_3.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_3.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2086\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlOve1Ccks3yqS5oRB62UK59i%2FmwVKZZiErDkj9qyl0kTZnfmpTHiAFn7c%2Bk%2BtzZlzWAv%2BfGcfNDT%2Bxbetv36zWHLq6cOeGpnoZN88qMzgdiXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a889f4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef18c41685d9a119eda95fb467fcead0","sha1":"228b68f09228efe9b3c327e80a8d0bacf615ecc8","sha256":"15998feff2e010aaca61347d9c99af387cf30a78d5138f0227a968406f5a554c","sha512":"5465fa44f16ac041a0f4fabd0fd81506c30385a43d09af8b2c89b12526019f4de2b7b7a83b69c9cb4eaca4711fadfaa96582c4d834f1e4b8e37de4ad4c1d5bc6","ssdeep":"","tlshash":"5241fa48e3143fa8bdfb4e00257e2a6d6a7fb1a97f55832685d870404543ad35becf06","first_seen":"2025-05-07T21:42:09.74503Z","last_seen":"2026-05-13T06:38:10.283787Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_color_swatch.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_color_swatch.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 651\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLAfMkCVnj2GJyDwCih8zkSrmFe3m0YQpuIrNqRhf0xnNiV34ig3%2BFRW5qBlOcHfnDcwdRDk4VcEN0JlLJ5ztM9NPBRaGqfa%2FildLK2NZioVNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98b14e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b6a440fc9c3787703ab0c1c10e2e177","sha1":"79f5cc4b0af3f010e6edfebb8bd99b870f91b6cf","sha256":"fab4fe5c10c8249b316bc516fbb7195180413e23c0ebfdbca5e1c038033a90bd","sha512":"eae3b911e46a9407837c2a143b57cfbb763f476afd4a5685e71db3813d6c74b031694daff61f48db8d2036b14b169cc5ef3f49c2affa94e349087e564cbb75da","ssdeep":"","tlshash":"d131af7cfbfba1d4b112a752a6f57432b72693f81416c91047aacd70c0a544ddd39888","first_seen":"2025-05-07T21:42:09.641776Z","last_seen":"2026-05-13T06:38:10.341937Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_dollar_3.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_dollar_3.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 602\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQ9RjOzN2d3E4lH%2F59UnuKwSBbcrh93ec1%2F%2BBVaQbrMYoVEBsC7SKfDhh1b282svGLKZW29qiFZcekFHo6gYP7nlCIURTSTciA5s0XwqQxJARw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b74e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90698736309ca1555ac0b8721bbeb5ee","sha1":"5e07eee465b0f7f514287bed35d922970f3e433d","sha256":"49286a6c5bf729a1708c587e8fbebd6cc2b4a0a9b11570c0ddb9ef468db296ce","sha512":"29cdc1805e55181ae744f7fb1153edf9567834c6eefceaae72a13009f45f555e7de1db09f46abff631e90025856318ecc6aec8e876d367b5649cb387bab7479c","ssdeep":"","tlshash":"4921abebd0d930f0f4324bb0f567ac70799b71bd3b964fc003c0aaa9764195e65c5824","first_seen":"2025-05-07T21:42:09.666379Z","last_seen":"2026-05-13T06:38:10.301379Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/shape_circle_3.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/shape_circle_3.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77sjz%2FOpGyvf%2FvAFe3EAHb6W6vQR0S0LxjOac%2BSuN%2BCE8PyFkJwjbojKc%2FIADdXD07EPSzchHN5YKAk2RiS4cuwUGpdFUjtWZ6WxhIOMg2KHPg%3D%3D\"}]}\r\ncf-ray: 9cda669aa8c14e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e899922bcc8cb437ebf047366823ed14","sha1":"df0c0c5f53d8f56efb5ad069eba391f614e9d6ec","sha256":"fb0c6d4da8f2434e700b3128f82504f7dbc30057b6d545053ac5a816bc96bbbe","sha512":"6f3464d157d26458d6b0c7ad3563d8968051e5afdd0ad130bea27245041d035aad682822ba1de74bb34aba4a3512b6d7c5cb51b1a8a9d54c192ae678bea1a36c","ssdeep":"","tlshash":"80c0803c60cee508c3144514e27d65e548a7c1d58adc015d95515515f2004d634c03fc","first_seen":"2025-05-07T21:42:09.699919Z","last_seen":"2026-05-13T06:38:10.264641Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_web_design.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_web_design.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 826\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owHo25Y1u%2Bww33lhShqFrH2p5%2BVk3rzVjYScDx5XMKIpm1AxXP0IoIqXG0rbieIfzblB6dpAbahxOHyIAN5Asxm7jR566%2F6B99MA0AHGWQ0Tow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8c64e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2201,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00d6354b4b1d907d6c6f963669aef22f","sha1":"896bcdb44383b735752a03ba3ac929dbcf87d8ca","sha256":"4c247012a19995cc56a785f186684b47692b463f041564556429c6799c13a055","sha512":"9c8b82260af442be8698b7abc39825a942490575e3e72dd52e397641e039f8790c53e0be28d5f1303e290688d781339f89e9ab6c8a58e3b2dc1c3c688e0991f2","ssdeep":"","tlshash":"df4143e5236984807101fb3e871e957478b328f2e77c84e2c3e1b990fa1510e1d2d8d7","first_seen":"2025-05-07T21:42:09.712425Z","last_seen":"2026-05-13T06:38:10.281384Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/shape_circle_2.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/shape_circle_2.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uO7CosdvCASxO0EaW9k9pyQsUnWySN3teLjEZXYL2MQYfEuavrLXHUTnXpDV551ddTdhCVRcFEwPOEZYPdUQ19VeT4nDma9QqfcxJvhJUnubYw%3D%3D\"}]}\r\ncf-ray: 9cda669a98a84e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57b4891e4c6dd19d021222e3bb8b4517","sha1":"289951a7670aa32dafb6710138f20f11210f576d","sha256":"c403893823930c3fc12c785bc891033825e5a3683a00b401c1286e4e34482c18","sha512":"59ee9229fcbfe2b05a7ba49fde817489fda9f7a0f7c85e0408fe6342a5d3489cee2d42fbcabb48c95cacae983ffbda8281c9b30d40bb8b95e9a803414a607179","ssdeep":"","tlshash":"fbc08c36742ca82cc100c81810bf2067135a60a9034801e4cb902840b01059bb81b2bc","first_seen":"2025-05-07T21:42:09.701954Z","last_seen":"2026-05-13T06:38:10.270135Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2926,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/about_image_1.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/about_image_1.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51784\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yx3JE%2FOojUSN01Ca%2BEBKoCJnETHIboePn6AqGTij8o8GTI7hdTLPMDRmz5SUt2nv1tK%2FuwtHXleM9ZQiKibeHVcsvI9D4wgxq95QxKI1SP4d5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b84e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1284, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b15df94eb95f78b86614ea9b38e671c7","sha1":"d102c5ccaf7b3d6c5b3490460d17d504b40b2e07","sha256":"5500f4e7ad1f3fff2910ef61f542d1093cac266a051b14f211d9be35858e797f","sha512":"d775ec1934efcca1247c37fa037df1cb091631e6d1e45b4815e8e0ef9590c02680cb6ddd57094315cef7704ae3d047578fa99a82586029274a95549b5ba8427e","ssdeep":"768:r2oZwFiyoTFBXkq2ma0sbuQiJguqweItEmPK6sOjbOI7B6fhHp5vytmq0vCZYy44:r23FDoTeWs5iJFEWK6TbOI7BOJp00F5w","tlshash":"5a3302c0d4ebb6a1f7ce189d9148eb3e10a69e216607305e833fd14c34face54976e06","first_seen":"2025-05-07T21:42:09.687384Z","last_seen":"2026-05-13T13:53:45.751748Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3025,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/odometer.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/odometer.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3693\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o19a%2BoIIUgmp8FHR5Q7bIUq4tteJPCKqELBezU1%2BCVY%2BOWgo52ng%2FEW7V9OS8WnPczP4AtZUBllgzHEed1C%2F3B7PBBufVsRVI2%2BXOJ8ps%2FPtIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669b08ee4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12145,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122)","md5":"dc259ded1a84fccde97eed25b0f36fd7","sha1":"951884d82a2ab311e2719ff96d429082b48c4053","sha256":"45cd87a552a2962ecab5f977c381df31f82adc173512b492cb4a0bd555b2c567","sha512":"a8f21bb09901d6d0f61941dac83cb874b3c132ec4f4f5e163523e1e35705080e57866042de05d3c20c2a63d156769f755513b9cc9f8cc4b75a797ef51eb7518e","ssdeep":"192:x2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:8vokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"fe42451163e1273d9707e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-11T22:43:23Z","last_seen":"2026-06-06T12:33:58.861573Z","times_seen":190,"resource_available":true,"data":null}},"time_used":3088,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3088,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/funfact_bg_2.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/funfact_bg_2.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 367\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfJWEI%2FHAodWik7KCpIwNzMZKpDnXlXGhiNcYdMxC6ifcobkhPz8gYfEsbfMNMGL1XJQ96sioAUaE0fM9vVu7hlr3lnGCZWMntTPGEObPVumpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb724e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a883531db44ab9af125fcef5aa1b6945","sha1":"66080da73a490e98654ca2aebe7ab69e7cd20606","sha256":"1bcd90bd0f1de157a31b2077d4bf3d7fc610865a7ec763838aadba0c1f623f59","sha512":"fbad9d405e090992a761e9964b845a74003922c2566853403c8b88c1f8c68da6d0376654d16a9962b5261d11d5df5ca58d8de343d62d8ae5259b47e932789cac","ssdeep":"","tlshash":"f211c235fa6fdc26e734c14ceb16f8503156d1d2e3d6426086c1bf0aa0288c63b253f9","first_seen":"2025-05-07T21:42:09.680049Z","last_seen":"2026-05-13T06:38:10.331766Z","times_seen":17,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_5.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_5.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6178\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnmhmjQsO4aUN31UCcCNPteAneL5CkGhmaTvY2uj%2Fs8R0sJD1R%2BMBTaaM02v4fLYBIV%2B0cx1o448hDJ2%2Bv10gRdf8P%2BZPPVCJzD9z5ftMD7BOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"327e16a643d892fe498d3059d0c0a782","sha1":"3d6b15edf8d59bf02898b5b83be53aff1257904b","sha256":"6512f9cf5c26a24484e1c1aca778e7a6ef170b0c50f9fb4ee9c005896358282d","sha512":"0caac829176dfdd528a6aba273be46cababe56dfe070388c35b0503d0fa459704f9670ad1c615bf1410d5497cb2fd30d6a2823398f81b1c25036184feba423a0","ssdeep":"96:ku6MlcvLvAg/MogdxQgiRjKpt565zRTJGBm+VSfZDKK8rMfPMLNQHv/7wMZ3XPpq:6bAgEogKNkt52EmZDyrMiQHvTyrPeFM","tlshash":"fbd1afd2b62f3b902f645e5ec842feaf34c234d2904e9f4a6d6c68e4c147426633e301","first_seen":"2025-05-07T21:42:09.652165Z","last_seen":"2026-05-13T06:38:10.289644Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2088,"receive":974,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/funfact_bg_1.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/funfact_bg_1.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 364\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2M4jfOfK%2BCHuLfBlIJGv75ILySgYKi07MrkdRVM3TgbKutLieihyd%2BuVPdQ6Gtkm5ncvv9aDzY2wKqvPT8b%2BG1lyrBKvSlc4zZVJO3DEFirFkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb714e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2edab05fd57d3e6cad46dfac41a83a33","sha1":"9824b3e1a939f57925953892b4b8baa0a514b5fe","sha256":"561fd40aa6ca36e3c64bd91f50f417e9c1897302700231ad98d6623fa6677394","sha512":"f4727c1c68b7f9df03519f40a4300a81827de435ac14308fa7197a2af8514591c5113eb50dfbffcfa4311bbdce42101393c647a2f74292b97f50bcbccbb363c6","ssdeep":"","tlshash":"d311af75f59fdc2ae734c58cea26d850215fc1e2d3e6426082d1bf0ea0289c53a243e9","first_seen":"2025-05-07T21:42:09.649326Z","last_seen":"2026-05-13T06:38:10.350214Z","times_seen":17,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/funfact_bg_3.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/funfact_bg_3.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 354\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cW4O0iID%2FbgdsTSJR0R8xMSu3uhCMoivX8pWLO%2Bvi6cYTAYj9JsN0OKBXq6147397zwA9PiTh5GIC9WhKFbUbpu4Q3ILMtEFRkwmZjchF6Zfhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb754e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2346670169073884cb26624e0cd68dd5","sha1":"734e74b194e8b8790896d94f8775fd93afaa5987","sha256":"0fddacfd00dbeba70b7546babe17aa46daa2afd47d60e61341b46633fd129904","sha512":"68012d52a9c37cf0f976a266187a32158d77747085ede4193da95ccf4069d6dc68bacf8b0158ddaaa723f3727e5781fe8e052380b790aba5a96eff263e832ccf","ssdeep":"","tlshash":"0f11af35f46edc26d724c15cda1af4643156e2e2d3d9416083c1ff17a02c8c63a293e9","first_seen":"2025-05-07T21:42:09.718889Z","last_seen":"2026-05-13T06:38:10.268028Z","times_seen":17,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/fonts/suisseIntl-medium.ttf","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/fonts/suisseIntl-medium.ttf HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/templ/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 72978\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpQ6FB%2FwP04Jp0%2BAFjaDRHie%2B9q7KDBAjyY5oTMU7mdXsa39YAgS2G003Efjzf%2BXtMGYnRmtQktjV%2BTt0H%2BmYM%2FAzbAwKE4i7EjTTJ%2B4KkkJFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66b02b7d4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":197228,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 36 names, Macintosh","md5":"c446362802681bacaacbad0f39bfc1a5","sha1":"23ad2eb7a1d3a82f81948bd1e171ba885293da80","sha256":"c00054107c6d9385d4631f35276cabbb4309e392b84e732a4e4c1bbcf1f0f743","sha512":"3abb676944c7fd167bb53fb02d6f81dcda4e021b530371278dddb65c99ca0d219e21419ca096e870633fd2ce4b7980f96d34744e05936c45f9fe1fa5756211ce","ssdeep":"3072:aPesPX4HdKu5qYzXn4LwH7iSPsJ0e+YvRKrPAPJa8w0PWPuW7PPrOT+WUn/N5mlK:aPvPXi3HO2CJaow1N5mtuYOxder+","tlshash":"96147c4ff783eb18da521e35a3a4d3665b72f9359b7f834fe0210b64e49b0c04c99299","first_seen":"2024-01-21T20:05:43Z","last_seen":"2026-06-13T08:02:03.880817Z","times_seen":91,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:14 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"696dff7f-7b0\"\r\nexpires: Mon, 19 Jan 2026 10:02:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3IAAAAAwBuUwKCQH3AQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb54123311f2837c61190698be84600\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f3d4385bf1f53862c2dc167f484da76","sha1":"d8e9223208068d2ae39a78ec3081efbd7c77b0db","sha256":"04e59729f1fee45b1a187e06a173a6a56c8652ce93fa6e08f7393f99ca2e60c4","sha512":"f34befc3262a83623a0067045ae26514e73ea58736ac4fc008b5a331544b3190dbeb2eaaf3a12913efcd6eeedfd80497ce1c0f58c0ba360dcffbf240849642d9","ssdeep":"","tlshash":"fd415783c4f80d531b9c622bb89449114d50c3c7e88a3d5d36ad8a7f2f4ceb910e6b6d","first_seen":"2026-01-19T10:30:28.095864Z","last_seen":"2026-02-17T07:12:59.724571Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":63,"dns":35,"connect":8,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_star_4.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_star_4.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 322\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4B6Q76BFWt4OTLLYF3h2IQmmGjn1HA7mQsDNcIOSmCq9B1Vi9DBe4O7VvK82dNwulzMlHg2v9tqFZ6V2UtFxES%2BNW5OCJ381bL4e8HPq6N0gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98a64e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8715e26412d78c5e3690802c8a493e2d","sha1":"ae01105400dfccb36fb1c320e48c859faab195c7","sha256":"f9d845f9041751a6b6c66f5623b77de0684e0b69dd259f05d3f5bfd5c396e23c","sha512":"236eba84534ad3ed221b48585085dde253f07358fac74bf9cac79064fa3f2353bce7d86e7a6875099e022b1301ade0706fd62b3d3a62d75707f2b165733558fe","ssdeep":"","tlshash":"350124ccc7b082dd94a6d7a49370e47270c154b5710bcb5f98d46e35ab0218e9eee68e","first_seen":"2025-05-07T21:42:09.710914Z","last_seen":"2026-05-13T06:38:10.351339Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3006,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_9.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_9.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1738\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4UkQM4C6Af1CfnlpliEwOtKuHJ%2FvrEtGf328RWw5X5u6IzPsRS2MlveAR7gpXKX%2Bo4nZIwItGsWMS66kXrv0EW4cQaZpUKzRNBFXo1lG9J4hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8c74e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea50505f51edb2636f622864f7bc387c","sha1":"166a9eb0ef92d573f4fc88db04a24410ae062e88","sha256":"bac8dd731cad804ca1e025cb39e566c1b25758af41b545ee3729606535588652","sha512":"65504c1e002a0c1cd5934dec830408aaa9adf5e29e151c121827be2df8490d1e44a23c01a6cd32d08947bd60ae5768de49f978e32155da7fe05dd22921f080fd","ssdeep":"","tlshash":"9431fd2ca854cdadd58a392d7086bc05679f068507ecc519d6f413241318ad175d7b9f","first_seen":"2025-05-07T21:42:09.630592Z","last_seen":"2026-05-13T06:38:10.306796Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/shape_line.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/shape_line.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0uQAYXoyYV1r7nK5EUIKQmm2o%2FKk7Pf3SFauk9HlyvWEP5I7i2ZlSzJHtBxSPTy9NR05vVwbS6bqTfq1%2BYeQBe4SlWwmcPB4UJVVptL%2Bd740A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb734e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3825,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5caf3cc87e9fa642c9d678bbb9a6b327","sha1":"a670760c3f87f3e6c9086e466a213992f301e4d4","sha256":"ec0f0c9df901d68bd20199e21238facfecd6b91e8d1aaa20bb28f17003aeb961","sha512":"d9b2ce2597d87f9db7e301a1872a971aff9f4d59740b568ba9615eb88afb8654afba62e004afb9b3b973e57dc8a8898d22fedc089086ab9f85fb9a88cc8ab34a","ssdeep":"","tlshash":"e981181afb65d83bc349d28c8a04d4612615c2c3d9dad290d3e0bf2fe0265c26d2e3ed","first_seen":"2025-05-07T21:42:09.636906Z","last_seen":"2026-05-13T06:38:10.361715Z","times_seen":14,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/bootstrap-dropdown-ml-hack.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 379\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ogKY6y5JwBaDCgcelY9MGKhFAnPUzfyJNwgATiGx%2BVXdQzYQoRy%2BYz24pBF4bpV51sjU6ttSAertagS97mxF4TDbdbZTzbsP2rMTG1WwdRKO8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ae8e34e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1117), with no line terminators","md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-06-12T21:58:31.196034Z","times_seen":115,"resource_available":true,"data":null}},"time_used":3237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/swiper-bundle.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/swiper-bundle.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 37852\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2erSCT754bN%2FD9tAa3lmFwUQuyuZQ9Z6Y8ZiKmlv4bENDATIEP%2FVjuT3dPpWeqSPMaUPKt5seK2ogrdnKRyS4hDId8nXxfeQMQtBD5eDbg%2B%2FCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ae8e44e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":141190,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"2079dc89cc747e9737986b0fbb48aa92","sha1":"977fd3d027b8f2348270c8e564aa33d03c7f51c4","sha256":"5b511ebcc9d064aa644dd6c0edfcb3095954f19324fb10d9a14fa47d01ddef43","sha512":"430a6cc6d759462879e46694fc27b605aaa8cb6b44bfd1a5b63006f32b93cb693d947a8aed51c7a77c1659efb221360a665b13dc06828f8f59c4c60fa78ea225","ssdeep":"1536:IIJCfGRELR8NnIxLzGhd+IWzvolxUFl8k8+1LDXzv5gDQV9qDlXpf/arWcplXe8O:bJ5N+Lz2vyl8kRdV9S5XiTnXek07jl","tlshash":"a3d3f8896221b57646e316db93e4c621b3b50540b80ac8f470b94c9f597ec9813feffa","first_seen":"2023-08-18T10:12:20Z","last_seen":"2026-06-13T14:06:06.652238Z","times_seen":2068,"resource_available":true,"data":null}},"time_used":3773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2985,"receive":788,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/hero_bg_noise.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/hero_bg_noise.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6290\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hqptk4LRtB3hqOQyQSzgBqlJFsi%2BP%2FWjSdhYyCxGT2rtgpmgvGdo4MjcvBBFI7%2B4K4bHuPhT5JHCoIlvprr9EW80c5Ewgu6LzX6elc%2BzFuAxrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afdb6d4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1159, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa0c6450a25cd88c2da41e5f030377ae","sha1":"e1ca581c403ca319e74ca54d7e40f4f155ded320","sha256":"bab5ea7f348bd02bb3f68f7068d47e2fc732c5fc18dcd27a919624fa87f87f80","sha512":"07d15605197ec1de2be6831e88afa9a29f3079191d9a475d9ce03a4fb9331d71c5ad619b729733337f3959e7080e37399a31355a7c7d51dec8e61437f223a4c7","ssdeep":"192:8+dDhDzpXsgk6RbCbT/nt0QInq16aB1Hyq2u:zdrrk61M/nuLqIaLH","tlshash":"c4d19dfe5206c384253c6b6c74f89e57b29fda443b632d1c48afe2ec4c348286232591","first_seen":"2025-05-07T21:42:09.657818Z","last_seen":"2026-05-13T13:53:45.872859Z","times_seen":20,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_wallet.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_wallet.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 578\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbjEMpo4ZfxTJ%2BptP0Rh6XodERy%2FwIWs7Bfv0EImliIR1jJWLZQvpLz86fEh5uCHk%2BlRLKKPCL7FevqreQGTviDjE5t7XK0TpVwQjY3o5NAhSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98aa4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c615619df5036bf2f7f022105334b54b","sha1":"4e37f573efdeab06ba08547cbbfd0de4b13891a9","sha256":"801446f754b96231959726c1bf1d6f5499ab92cd43e0766aec993d4c0501d0a4","sha512":"367c563efa5852d376ad5f341181d264e456c54806c8162e105b6fdd1fc8465df5b588c44656a6618c960ed6146c513dd2f9f680f77c678f589a086422a790fc","ssdeep":"","tlshash":"2e218fbdfffeb160e1115341b1f2f43c765793ad2463cc5241560d58c8e986eada8988","first_seen":"2025-05-07T21:42:09.66359Z","last_seen":"2026-05-13T06:38:10.315437Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3003,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_maximize.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_maximize.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 524\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hw1FjDDfWbFfMYB8q796cp7L7z4O%2FVTxuZgy3WqoFErT6ZYeBOLvG%2FGKlM2HpiGcT7qlD1Qq7wANi6fHmZMF2wJ9QVynatE6aevqtbJN13AyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8b64e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cb31070999fdc5dabf45d80ecb90a68","sha1":"d535f116cd07adda357c10b00897de7c47eeebd6","sha256":"63aa671a29fc03b78ffac4e5237c0ecc4449bcb1364e85aa5a343ad22e057473","sha512":"a6836edb576f02277f7e7f88aa28992024792ba2cba23aa7efd95a257131afa8b55439e218bceca2c4358a6850bf226ab0b81f245eb216f38f18f6e7321d05a1","ssdeep":"","tlshash":"9a21c7b7f3f967c0ab5f83236ae0713e405b536863139c645494fba8e8a545d9b48cc0","first_seen":"2025-05-07T21:42:09.631493Z","last_seen":"2026-05-13T06:38:10.337667Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 02:55:40 GMT\r\nexpires: Sun, 14 Feb 2027 02:55:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 11673\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-06-13T17:21:25.4711Z","times_seen":19700,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":87,"dns":1,"connect":15,"send":0,"wait":16,"receive":25,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/hero_hand_image.png","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/hero_hand_image.png HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 196082\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5fhNho%2F2MDJ5%2FBi6Sw%2BmGXkoXC%2BFzvsfKlrpV%2BE8iaiMJXTB5GIkqNWzlk5VDM%2FINFpOxwy1DJwOTCflNXS59FvlMWNA46yF%2F3YI648WSZebw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a889c4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":196082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 799 x 514, 8-bit/color RGBA, non-interlaced","md5":"83925c8b47d780f67e831e0a742102ca","sha1":"a6d1e2b4ad88a933fcba6c9127e9d28e7349f787","sha256":"925f859e700e6869597f2624f10437b6138724d5c6d899044c4e14417446afa5","sha512":"71574eadaf0f0355d5f5c1ac8986802d74008652c74e80cfefdb51ead438cb98d874469d23b59e94af8d5057157d9fa95eb2ddea36908cd9e66cfdc7dd85f143","ssdeep":"3072:nDSQC7JiQmaAi32J5h2eDaJAWEjraPbGuaHdg4Cdwv8oQdUxhRQTxCbjGrwP7Wuh:DS3JZ2iGpeCjuquY6wbQS2TAbowzWtc","tlshash":"e714127650c62b0a62f83ff558e870536373d28a8273ad9d3c79e47fe27a977901041a","first_seen":"2025-05-07T21:42:09.639346Z","last_seen":"2026-05-13T06:38:10.279476Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2212,"receive":1023,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/ob_feature_image_1.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/ob_feature_image_1.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 202000\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6AJU%2BusKqSiHVfB4ySQYsfmFK8LOf%2Ba7qsFP4%2F5MQG%2FD5bBWlkct0V9Vq94o01gD9w78U14ndMYyG05HI%2BVoGSSB5dAm0dPAa%2Bu4yqRDX6ZtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98ac4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":202000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c970c60bd56343608281353e24ef26e","sha1":"cf3c3ffd020aa19391c1c78725197034adf20570","sha256":"10c6cacb63c2fadce6262ce7e0280074a2c474736c3e98580460077ff671031b","sha512":"7c9e9831d861923fe92ea7132144bee464d9a48b6c8954723c76c9ce7096c56de5b2cf91d111992788c6560aa0e1788497f8846a1dc2c5416487d2a599cd587d","ssdeep":"6144:PBQvwqiU0YHYvUSaES9vg5LrDNkHO9aHIcM:PBGgUoS9vOXCQAc","tlshash":"4c1412c33f7686dfb0f1361444d9ba678ca7f4a16158f7bfb34025aa22937162dd0892","first_seen":"2025-05-07T21:42:09.686Z","last_seen":"2026-05-13T06:38:10.352271Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2633,"receive":1191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_6.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_6.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4390\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYczv2Dz02%2FeWVgefKpRBcG0XKRsihhL%2FTyWGIY%2BBZlVxFcDPsmg3rKDPYYyvy46D7JpfUTNTM76N%2BDTRac2v7f9j4WTQNWxq3RsjR%2FCjckFeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d14e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a812550e43cc0bc4383a942fe9d1151","sha1":"85f77d1464ed1d12977fb7cd1cdcfd965aea55ba","sha256":"283e042dc0974dc5b32adfcb1fbb3888ee96d2de36e9cb3ce530a141fcbb3586","sha512":"d31c143cf0fb06275763a6c7f774355357ba1cc0c8a718ec49cd93a66759c272fa94d94bcce57d85b6e40dcfec2230d4cdd977eb8ef4623e1acba2fd139417c5","ssdeep":"96:s6MlcvLvAg/MogdxQgiyIhiP1RL21Qr9D4HYz7+L26P9awJyRvOpRG1R:DbAgEogK2IgPL2Sr98He+ZPPAB","tlshash":"6b918ee6eb8e279866864474da0120db66176efbcc49c92a0f2d089c4141834fa7ed1a","first_seen":"2025-05-07T21:42:09.713862Z","last_seen":"2026-05-13T06:38:10.299577Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3075,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_7.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_7.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3024\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPeipZlqL0q5ZoBEVSYpq2ETlBmC4KuZ4weJty3nPULOJ3jISBJFi3BvFfiIL8ZMk7pVO4Q2q8nKFyWPYMRNoRXOvFYJlcXUOKh6AGkOMj3kHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d24e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52634acef475322e7ff4fc0ebfc9788c","sha1":"bdf682e3b3cfe177a555b800deed3a7d1d8a298f","sha256":"b20af9a5b84eb094cffe3f61a56abfa43830662a1e1e72c87582a9a4c9d17614","sha512":"e75e20d7d155f0b3067de75cf19bf7c38340772512dd770432aedc0a11aca0a9453ebad4baa05fd73033f8d588c345e7e1a33e1bf24fa545c0c390b143e7382f","ssdeep":"","tlshash":"eb512bbf1ece4872e62df7c443b16b44e5400965263918f0d58eb85d51bdafd39a2d03","first_seen":"2025-05-07T21:42:09.632514Z","last_seen":"2026-05-13T06:38:10.265181Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2901,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/swiper-bundle.min.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/swiper-bundle.min.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 4503\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aURHMzmWJKw0L2M7TzvMUsK%2B53OFULaRwsm%2BtKT25%2FrBa0iVQnJP1uAB%2FtHWmb8eTVbLHegyoZkLoV7FTqTyCpf%2Ba%2FVZ6bVmVnSSAwB8uss8oQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a78954e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18196)","md5":"74b31db03a042c64f77edceba210db30","sha1":"f05b897efa0b54d585f7336eb2606c0d1725e83e","sha256":"54a4ce161e2b6ff959bbd464b72cbabe683bf4a4eefe416b3938125852c998e5","sha512":"b3a921325e460d2d476d0e7f4b02f5c3331ac8fc075cf8caa013799075130ea2843e4906c846562b21f6950dd83b6ab7771b9e1b7ac4d0d1e345ac0c1ddd9bea","ssdeep":"192:wYmUJbiKneSJTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKlAYfg5faeesedOJxX/P4:wpUbeSJndKW+Sa0ni24tnWf14cfQ","tlshash":"ec8256a45350182753274f374b71cbb9e97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2023-08-18T10:12:21Z","last_seen":"2026-06-12T21:58:31.18555Z","times_seen":2168,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1452,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/ob_feature_image_3.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/ob_feature_image_3.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 165202\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izXiDJ4AIPDvPdwYcvOQtcP8S3SUur8qOphmQY%2F%2BVmzlni3cBHuJDJx7YH2Shl1E%2BnA0TcNy%2B%2FqaA759gzFNXQC5rGiGxTTLCEORd%2BgVjLoKew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a98b04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":165202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d766323a76f1a923d91c913931a0c752","sha1":"a0e2a3e95d91b33aea9e95e729a3895ea85312a4","sha256":"64583a97a0d95409d79c17ce9737f8d3f971c386561df0af56b30747020e9809","sha512":"d549e4bb2567fccd28c2987e78c4dca6db53df98602de8419e86625f297521a5fd21b980c88093cb9b888e46dceb2825c991ef8ecf4a0b2ec58b2c5e587a5efb","ssdeep":"3072:yeZMwwUVEg4TTZ7drHb25udYjutNwJY5+AU31uOGKWUZ2uPIjxjEe+Bx3VjSaBa6:yaMwwUVp4T7CudiMNw6nU31u+WUPQyeo","tlshash":"72f3128edad3df2ddc28535f8bb9bde3e0d588711d38b2580844498747add41b3ea4a8","first_seen":"2025-05-07T21:42:09.664928Z","last_seen":"2026-05-13T06:38:10.342945Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2736,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_1.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_1.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3084\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBbnBnuL8o%2FB9ed57SSJdRmfq5YCJSE5U8hAaak%2BP%2FgC108WxQGSjLB2ZxIXGvMfMmWTbCVpA3PWrat5oHGlYbWkhvGa4mTVwB8Wcoif0I7%2Fjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8ca4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3084,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6c8e1e9448a3f101a758d4d28d0bca8","sha1":"ec233c91418d125ce67ee8a1b9263a7e338f27e1","sha256":"7eb008e9af589008c1802d1b10e5f1926e25d686f1971726a2b18be5c6874902","sha512":"e26f87cf4b28577ac0847b30a4dad7e52f31e87f37c271220f2fbc7d1729bd3c2057b12ac5ce84bc6c86423ac1c5147961072423962e12543eb6b24065d14a5d","ssdeep":"","tlshash":"d8512b41c75011a1d8e07e60daa07599f1aa9bf4d5b92c117b149b82ad40fc5906e3c7","first_seen":"2025-05-07T21:42:09.725224Z","last_seen":"2026-05-13T06:38:10.292653Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/avatar_image_2.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/avatar_image_2.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5766\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FBQPuYqiYejiIsad%2FG1WxhK6%2FRQGX8F4mkLLBEfq%2BHO%2FMQthBwpBMpwibH2ZvikUwyDI4KzReH9y%2BWcIncZqcrOy%2FzW6xbeXQpUpA2b4b1CnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8c94e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b012f48cbfd0e89224d3cd3c00746f0","sha1":"78e49df48707e2434bc64e9d7897c41452153e85","sha256":"bc342cd4e5253cf341b3865e53800f03d95cc1f2b48514251f07158435881592","sha512":"ff97756588c620d1b4b8409cb7e7ec05f09d37be5e7e5562a98ad1e0ae474e3ccedde2d244258b02743540f2bb257807f1a0e027e8f8324ee4ed725467e88501","ssdeep":"96:ngWAH/so5XpekBf5UrFsQEJVDuAW/6VCF9recSTfy9GIw+pzeoMuRgFo0T4HB:ngWA0o5Xp82QgD1zVCne5fy9GpwzeoMe","tlshash":"a8c18f805882e6a9367558bc6d11c264f87b9e0e2c2510a15fc01bff17fedb17d1422b","first_seen":"2025-05-07T21:42:09.734884Z","last_seen":"2026-05-13T06:38:10.335061Z","times_seen":21,"resource_available":false,"data":null}},"time_used":3079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3052,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/icon_calling_5.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/icon_calling_5.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 716\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ozj8yAYwhAGmo%2Bm6OV2VfYC3t49Q7MJ2msnx4p0hOptCo%2B8dCo5Fuds%2FitGx4U2jY31XpEWzeZP8NgmWvoVwDxK5jB8T7UlSgYk1ipUts%2FmJEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ac8da4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763926b830455d655230acb91386d1f4","sha1":"e214da0c1870c18351c362045c45ff83c62c008e","sha256":"515679a1978e12d3ef89e3eea737365c40e6e1aa463f34d36e3a834aedc83775","sha512":"a62a830c8aea96f88f63fcba901331eb9804d521794d32c94f772bf5934b213d51eeeb2a7002a5cda8a5cb0c5167b187731e1ed809fa570cc4d17c0decfb2683","ssdeep":"","tlshash":"04315dd94f9564b8a54147d0e9269170ba6b783f3f4bc350c520dbb0b206c9dc5face4","first_seen":"2025-05-07T21:42:09.715984Z","last_seen":"2026-05-13T06:38:10.284907Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3058,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/funfact_bg_4.svg","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/funfact_bg_4.svg HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 369\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsSt7szPATA3483Fatk9t16%2FCGgZWI7Yjlu1YpIaL61P%2FQXtURJzOT1%2F5%2B%2FDUL6qp3sEqOOLj8koLvmq8Q4ev7mVYj5CzY3mGDuMDmIGkgj6yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66afeb764e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1006,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22bfcde24c89c6e18e765b925d1b7c84","sha1":"074715df58099bc13a1466ce6efc82ea8f859bc9","sha256":"bd51d51755fed93b1684c9c7e9c151d10d3c18bb64c3b9b2fef790f202b90429","sha512":"8deea839158c8266be5e2684c0eb9116fdc3690e6970ffb63f8b2ff09b5ae3576bf257ba08d0771214186ee24b23780ba4f94b1d0bab317b194753b92e35b606","ssdeep":"","tlshash":"7711ef35f56fec22d334814ceb1af450205ae2d2d7d5426083c1bf2b68284c63a253f9","first_seen":"2025-05-07T21:42:09.736698Z","last_seen":"2026-05-13T06:38:10.26304Z","times_seen":17,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-B-OLLYpG.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:14.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-B-OLLYpG.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:14 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-9183\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3pBEiAAwBuUwKCQH3DwAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb54123311f2837c6119069e8e0b702\r\nx-77-cache: HIT\r\nx-77-age: 2232740\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37250)","md5":"2052cfca49186988b2bd90a4a812a795","sha1":"8c31463bec24745479731221d847ec0a6d2b8337","sha256":"f4257f5a00c3ca86166edd00fb26cd15e4051aaf442a8660c9f33570da08b8d0","sha512":"39072c2ed68b9170d5ce9f6449fc2a456b9cebb79749724e65b55d111fd9482fd5e07cb0dee42e9a4810f39fd4bd2c7bbdac9c786afc1be6b259429853c49770","ssdeep":"768:E8C94TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E8W4TcCWYtdXjuPF4t2Z","tlshash":"b1f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-01-19T10:30:28.096588Z","last_seen":"2026-02-17T07:12:59.719508Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_3.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_3.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4644\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5H6da8RoC9NzriMPTxpn8QRyNnimaYR2A1Ieb%2FMS3og%2FbrKcOn4x2V%2FSO1t%2FfwU%2BYL%2FdfZ9pOoYqh%2BzpRF%2BhAyCvdD638hFsTUMpYHdHbtcj5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8cc4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e6ced327094132e2d1ec041b5e04b9f","sha1":"e0980e2e8ae466f2992fb511aba47a72f60f1950","sha256":"18ecde41d0ab404e12ea01f4eebf51ee7e0e4ca9964e5165d7b7ac5937860859","sha512":"e97ada6e7c80feabda758e51204678ec03f81ed5857fedbe3f93ec2619e8a4ef3138953b19fa6240f5a5b09be03774cee4f0beb4a95bbdf0bb2c9a8589c6c4ba","ssdeep":"96:sg/fPF+uA23PUcslTVF+GanQTgzeN8F+iFav0Qh240UL8+WKP:sg/HA4PUPj3aQTgqN8F+BI4r8+WY","tlshash":"6da17e6a361894f7cbea266eb6f918b003a95305f110ce462349557b273f448f40139f","first_seen":"2025-05-07T21:42:09.704241Z","last_seen":"2026-05-13T06:38:10.309617Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2719,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/avatar_image_6.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/avatar_image_6.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2614\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43M9Gu1GkqKPbfdYnIlAAVuCtfDbNkvcYCd8Kk2oXvRYLs7T4IeGvyvmD7aXWeGGtv%2BB6dfTcG1aAHEjTrCKl4ZR0VmEq85QGxWrrynoLrRpMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669aa8bc4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 172x176, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b22f4f061f9a7a8dd96db197a6bbafbe","sha1":"ecd2bd4c602a76e0c9d54e807666e5bd09a93bd1","sha256":"ea53bcfd331e9f5b7e812fc97ea47361eef5f4f6c5525bdfc11dc1008aea611c","sha512":"df5b68ccfafe8869960f78c577b20bd1747415c27977041444f59a1206b67ed3f00965b40d861e98219542b4be7ac928fa8c0e4f42e8e7112b5026acb59ed21a","ssdeep":"","tlshash":"6651293b44ffc5b1f27424146ca37246461aa6b8df9318acd1720f6073b1627d27b1a8","first_seen":"2025-05-07T21:42:09.733Z","last_seen":"2026-05-21T20:30:40.065449Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/integrated_logo_9.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/integrated_logo_9.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9928\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zc9qNya6qMktYtIUqQ%2F%2B5wMZ177Ry5Qe9jQtoWQNbgJeNLoChMRF%2B%2BvabioA7%2BTNH2UxvNBOat0pj7krBGqOgoJn3YvLosvfLJx%2Fu80fRCzekw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ab8d44e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63eadb879c9c50a714357853ce13c3a9","sha1":"b917ada2fd72e9a9efbad7e59995027b331f2853","sha256":"ab55cdc7fbdc8932152ad4923b86e7d7ccc93c66a17a537930f88163f9c8de5f","sha512":"5e26fa4aad084f58caaf09844351237132b0ed5716e6ed5b04ac72f160041482fbcdf1603498d6de540df8b5262239baa603162a303016abfcc443f5706e3ec1","ssdeep":"192:VIXZ7UBEdf9Z0ngkF5QZO3wbIg3pILwxU6vscAJltlAzjofe17zI3s:mh/dFZ0nuO3eR3pIs9VCrlA3sWXQs","tlshash":"0222c10b8a6710f9d63cbf479055f5f37bfc22a83c4a921646c708486b39842dc62db4","first_seen":"2025-05-07T21:42:09.726911Z","last_seen":"2026-05-13T06:38:10.34639Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3349,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/bootstrap.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/bootstrap.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15984\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xN7R5fIO7glrk04dNSEUuP0eQXGQkR3WeN9aRSHQDZ8Cpjw0WjBe%2FJWmjNlorgZ%2B8zXCw%2Fzbwfxo8OkGSrQBQL494JRoaHSRXmdnt2GiRnaMpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669ae8e24e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60356)","md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-06-13T16:10:23.11422Z","times_seen":3670,"resource_available":true,"data":null}},"time_used":3547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3316,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/ae0d170a586333d2ac2dbac6f49142b5a4e74259.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/ae0d170a586333d2ac2dbac6f49142b5a4e74259.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://leadwesternbnk.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":82,"dns":11,"connect":21,"send":0,"wait":24,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/parallax-scroll.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/parallax-scroll.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1829\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryGk2IGyJ%2BjMKXKWu%2BjEEzJQf1ZqssnzA3NL%2BrvujqOfwnHTSxwtE67mQqR97M6SJ2O9YNjUyMMWDH3zOGc8Wx6iR%2FXWTeslyIJiJl1up8z08g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669af8e64e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8929,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-06-12T19:59:02.386817Z","times_seen":462,"resource_available":true,"data":null}},"time_used":3069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3069,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/main.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/main.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1828\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTj32drzcBU8amCYrdaNRsPq3%2B%2FFqyfmjbnz8OrZmgDBFbIp9z3dTHYzliYH5RdksRNCoCuBmJKpeLYGhi0mYmrt9d4IiHFX8Wp7BrpJR23M1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669b08f04e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8302,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2811e29ee6eafd2ec619177f324a307c","sha1":"5b939008feb16da80446d0014b730103438e5165","sha256":"23c106445f15b32c7ee7bf61a16da3532fece42dde6310279e13ade9b70e1c98","sha512":"20805e983c072298f4f44cb598727ccf7546739fd1c329f7bae6f4ce80bc2a5cd7dd6559644381e1359ef2af8df6eab31b62424479ea27b33d09a4c779822e4a","ssdeep":"192:fo/9/ir572TZ1pCy+yzZ0L8Rmgzlhx5UBNe/SjHoRMg:fgXzxAgphx5eNe/S9g","tlshash":"1802110b7cb0247118b7e4be6b9fa104fa6510079d59ed31b4df02480f5a36ca1be6de","first_seen":"2026-02-13T14:24:52.520904Z","last_seen":"2026-02-14T06:10:28.668164Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/css/magnific-popup.min.css","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/css/magnific-popup.min.css HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 1452\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:10 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Xxr%2BW5tIv%2BT1ocBkbI%2B%2F3XlFsjbiUl3iCOI2ny1CwiPQ0kpXexxobUPsrPadGzLBdFMuRjko8LWODMVmEdZ9x8z1K9BrdRcjEjeFqg%2Bb77Inw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cda669a78964e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5658), with no line terminators","md5":"fa7b637b2e4db9da796d3743adb3be10","sha1":"fcee93aed608e27cb7fea3241826f77718da302f","sha256":"5bbb2011bb8aeb248b452130bf35325e2f2d66801922f46a4d81883f2fd15f1c","sha512":"8d2fd47014a1a89b226185d67a646a179e1dfb739040b6fc17c9f17fb5768b487ff4ced6832bca817ce1c123b02379280d6f352a0032c85781e63e1156c87ffc","ssdeep":"96:1+ASvI4RSTNbnPbtqtMaHMoB4hoFaZkV2CnYk:1+Fw4RSTNbPbtqt/ckaZkjnYk","tlshash":"0ec165d17b513129de26edaab1939b191327512bf30310efdbd36809c7cf488066b6ca","first_seen":"2023-05-03T11:45:41Z","last_seen":"2026-06-06T05:56:29.987502Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/client_logo_2.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/client_logo_2.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1712\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:11 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjGGFnFvIvur52f7J1WjzToAO7YipxxccBoIvPt3rSdDgL%2FQqJguYgm%2BlJTYvVwnP5N7G3V%2B6aznMfZcIgJTXFUxfkXda4lBQYmuPsM4t0bvhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669a889e4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ad9d63bf200d2cc06bf8fda4ad18c55","sha1":"2f5541e442721016a6c0288e536b5daf40334808","sha256":"c30e52749c504528c671e4a341576e969605f9727b7b9540ab37da9bcfd69afb","sha512":"4488660542db7e475445cdd47a9660764f58f943850376c8ef7d0ec64bf246ea862ea6ad1e0a714a49e247f18739c3647575a5a72d30f7dec3ea2a71a32f1107","ssdeep":"","tlshash":"1a311a973e162a643c81178efb3e25840366a46b4204c649772e7d0af56b0f0d2e2f53","first_seen":"2025-05-07T21:42:09.672241Z","last_seen":"2026-05-13T06:38:10.292019Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2066,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/images/mobile_app_image.webp","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/images/mobile_app_image.webp HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 225708\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:12 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vov4cS7JZ1KM5QKo8PafIAhXpqzF9rV4Rm7ENQ%2B3ZF2crpDh1D8l%2BSVCKiBwXfgZzsibZCXYhoKhx8Q1izzC5VRBqq894RDgjhGr7g30G6VepQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda669ac8d74e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":225708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c72f4d59dde04dfc1c884471fd9f16e4","sha1":"fcbb5071de849f127a629ca4df50142c741a7733","sha256":"8fc88197f1aaf8e24d8dfe73513f33417a0ca736a3267aa5325d9dfb74838e69","sha512":"3e753e5231b23742e72f17b2ad5046c46da0ad4f879cf5fa3ea195b912666a4d2f0dc3ee37ad4966493843ec2674317e4aca0f8c958f9c03fc5b4134c3019b79","ssdeep":"6144:zgcwFOiPyyxAQMtXdcSQ4hUPg2Wrs6Fp1dij1DbP4YY/dy:zaFlPSeSTGPgqWnojV4BU","tlshash":"c824139367dbfa08eb16e4e5363302fa9c03dd3474b466afa256d42f14a0b4a717b40d","first_seen":"2025-05-07T21:42:09.64822Z","last_seen":"2026-05-13T06:38:10.360455Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3069,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/js/appear.min.js","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:09.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/js/appear.min.js HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 550\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muNnCloAgl4kqhryJjxegtRUTcGmkkkp0g1d0qr0A5y%2FGdqY5chC1PMwyhy%2FbOqDxF1OnQ%2BUtKbm6vYhYxA%2F3a5l7sVPW96FBb5S%2FFTOUj5ojA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cda669b08ed4e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1270), with no line terminators","md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-06-12T21:58:31.202562Z","times_seen":175,"resource_available":true,"data":null}},"time_used":3060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadwesternbnk.com/templ/fonts/suisseIntl-semibold.ttf","fqdn":"leadwesternbnk.com","domain":"leadwesternbnk.com","tld":"com"},"ip":{"addr":"104.21.23.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leadwesternbnk.com/","date":"2026-02-14T06:10:13.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leadwesternbnk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 13:36:30 GMT","end":"Sat, 18 Apr 2026 14:32:55 GMT"},"fingerprint":{"sha1":"69:F3:AE:FC:8A:23:48:5E:5C:4B:C8:73:CA:04:C5:D7:C1:B0:57:2C","sha256":"36:55:CF:1F:88:A7:C4:8F:1D:49:4C:57:94:3F:B9:DA:70:BF:3C:79:D9:58:77:5F:1C:6E:B4:09:4A:AB:BE:E1"}}},"request":{"raw":"GET /templ/fonts/suisseIntl-semibold.ttf HTTP/1.1\r\nHost: leadwesternbnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leadwesternbnk.com/templ/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZablNTblc1SXhETlkySzFXTkQwOGc9PSIsInZhbHVlIjoiWEpueG1SUHlxM0JxYlduckhhQ29TVGdFc0JtQVZEcXQvY0hUeHMrT0MzZmNKS1M3R2ZTLzd3UkN6Zll0bUVZeGJoNUFkQy9DUnZCUTZqZWdpLzlveUltVlRMYmpUMXF5a3ErNitGcGpOZ0R0RFE0VUo2Vmk3TzBiTG1PbExMcDEiLCJtYWMiOiI3NTdkOTQ4ZjYyM2FhM2Y3Njg5NmYwMWQ1YzdiMDZmMmI4NTc5MWJkM2ViNmE5NzJhZjY5MmFiYzdlYmVmMTM0IiwidGFnIjoiIn0%3D; leadwesternbnk_session=eyJpdiI6IlFSQTNUVG93dDF6RXU5eVBhUjdwU1E9PSIsInZhbHVlIjoiVDFUTDFLWmsyNER2aUlqd2FQTEZUZVEzVXk0SEpUTEFQazZjTHVtalBkdXRRMVc3S3B3UmhrUGdvLzQxY05VbjFFMDg2ZG1vVEpXZ2E4SFc5SzFmeStzNnovSE9DeHFveDVWdlE3ZHA1OWdrdHQ1M2U3TFBrUVUvRTVmRkU3dXkiLCJtYWMiOiI5NWFkNjI3MjI2ODFhNjVmYWJjZjJjYTc4ZGRhODI0NjkwZjQzMzlmOGNhMjVmMzljOWRiYzYxMzIwMzE2Y2E3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 06:10:13 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 73909\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 06:10:13 GMT\r\nlast-modified: Fri, 02 May 2025 01:48:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwC5X4Oy7Ltp%2BYFQe67OSydQGeegmgbzSinj6I4yxhAFnkqz77rBmR7izAG899o1aKIcAN8rlv1NYoOvluqsITcYubFqmkpwpgMAR3dQO4zKZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cda66b00b794e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":195764,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 36 names, Macintosh","md5":"653d9381828e9577fb1e417dc047f89d","sha1":"b0c0a808666d0ba7b3dea88b1cb07e73b6eb6810","sha256":"1cce2fe13c274d12397940464fff60083c30cfb4f41bb6c543bf7e578015f469","sha512":"bb40a945c4277fc7705f2da206ed9a18b4beb34cbd1c5959ddb09d4ca2c6ebd263fa0354e0de69ce86d09440c03dbbd2fc0af9197afd7bbd00d49811aca55dd1","ssdeep":"3072:uiAbACKTGXptwStcDwFcKgu6WC8ZQP6B3NlV5YD/5BL/syAB5FkKdzAIdsZ3HwCY:uXAN0O9Kz/d3beOcq/","tlshash":"cc145c0ff783da15d9124f39ea65b3776ba2f839ae2f430ff5594728e89a1d04c94108","first_seen":"2023-07-18T06:39:12Z","last_seen":"2026-06-13T08:02:03.849218Z","times_seen":117,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"leadwesternbnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}