{"report_id":"69901538-dad5-4e90-87b5-6e46bb2fc32d","version":6,"status":"done","tags":[],"date":"2026-02-14T02:26:37Z","url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"title":"First Citizens SB - Dedicated to innovating, simplifying, and humanizing digital banking.","dom":{"size":983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (982), with no line terminators","md5":"495386829b6c291aafe144e1c580926b","sha1":"fa0f9bd9ba1772c2ba88711b1aee23d0b3e1fb08","sha256":"498eb3e87e2fe940cac413ff000311d4db689bd23c3098cc6458f0dc13d652d0","sha512":"9ff2180f2b40192f8706726645c2e29dcb8cf0abd064454947c88a470dc30c74461cdf358ff34b0469b85d7aee8f24074ea5c57826a7b93bcd96b31ab0a90695","ssdeep":"","tlshash":"5a1121729084241e8362d188e0e1773ea3c3c40dcaa1cca2ba6825b2f1c4b36985b5fc","dom_hash":"domhashdda2f72fae377190c818cc3070d0de92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:26:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":12775,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-11T20:05:56.47035Z","alert_count":0,"request_count":1,"received_data":18555,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"firstcitizenssb.com","ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-02-13T14:27:19.852823Z","last_seen":"2026-02-13T14:27:19.852823Z","alert_count":61,"request_count":61,"received_data":2175015,"sent_data":72547,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":5,"received_data":5126,"sent_data":2459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-02-09T05:15:27.940011Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":912,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-02-09T07:15:42.209177Z","alert_count":0,"request_count":2,"received_data":83976,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-08T22:29:54.459767Z","alert_count":0,"request_count":6,"received_data":69790,"sent_data":3207,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":154362,"sent_data":2087,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-08T22:46:54.368985Z","alert_count":0,"request_count":1,"received_data":70232,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-02-09T04:37:21.399004Z","alert_count":0,"request_count":6,"received_data":388720,"sent_data":3128,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"35.159.44.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-11T20:05:56.067957Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":531,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/aos.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T20:01:50.800786Z","times_seen":9629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T19:38:41.266202Z","times_seen":11855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/main.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","size":5498,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/fancybox.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","size":68446,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/contact-form-script.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","size":895,"data":"","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","size":5360,"data":"","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.appear.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","size":1198,"data":"","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","size":144259,"data":"","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AAgG/d=1/rs=AN8SPfpYUifknm5HXpc3sN6FXwwldLo-5Q/m=el_conf","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e05653e31fab3d22b310c0e00ea273","sha1":"262007d4397449e871762c7be844504b04369578","sha256":"b66a6ee1fec79a04f975b74b47a664469208e526929f828265833e8f40b3713d","sha512":"4541fb4a0813290eb839ff0ff35e8a41cc47d8f6417a6b7e67220d7f45480547831710bfe70de78b7024858c49bbca18477fd6c38be81fcd570d0c51c7cc7b70","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNezi6wNWnq:Xf+e9J3jHvK4UEgziGq","tlshash":"1883b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","size":81657,"data":"","first_seen":"2026-02-14T02:26:41.56253Z","last_seen":"2026-02-14T02:46:10.103263Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","size":381830,"data":"","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#215","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-06-08T05:58:59.336825Z","times_seen":36916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9b11b356da2d3045adb261e958fd12f","sha1":"984ee38a2225af7e16ea1168ddfe4798f15c0917","sha256":"a0a0039cc6603e6bbfee7b76429739c88071e094bad25ac6c252453b7fa8b66a","sha512":"d04e7d126272bfdaeae0cb442a73ea1620c0a1ac6c1d837ec87a338b9c9e21f25e960e9ccec26c277d8c77bdfc90e41aba780a3f95490861ed8979519372c185","ssdeep":"","tlshash":"a9e0f83c3c3040940bea00b8c1bbf23c3d1a30708481c80b88aac87d6cf1fcabe019a4","size":418,"data":"","first_seen":"2026-02-13T14:27:25.567345Z","last_seen":"2026-02-14T02:26:41.611303Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/odometer.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T07:20:31.611307Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/form-validator.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4162a48bbd8905706671176ff124286e","sha1":"fbb7bfb5d345ac4f2a75c47e55e53a886efa5254","sha256":"e5427006119399d6a70928fe7eef9e417f6b813880cbb5fdbba7459cf5824d7a","sha512":"e1e33e56ad565d0e8baccae4c9be558e9979871cf47bee19c295a3a30cf6ceba5eab15a6ab3c86f555807ccff8a0c0614d8eac5fbbce8be6bb2126ffeb4f22c2","ssdeep":"","tlshash":"d45141a2605ca01b4513d5d0f8a23eeef4de0058c77169d07e2c29efeaeacb7049716d","size":3011,"data":"","first_seen":"2026-02-02T21:45:19.706501Z","last_seen":"2026-02-17T18:56:58.991697Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"058598ce909fc01e1fc57b849fdf6576","sha1":"95c616e6208f005330ae5a314ec584728032433d","sha256":"d6a0952f10542ed6de9679f340d1fcb92efae6d63348da7d0f1a7fbad06e5f20","sha512":"5fa73ac5a3d6ed9f78e85eb2bd1c36c0a0c86557e2e5bcd58bbe42e86c41e68293773af7416b1f2d615bdb1446f6a0823ff340342554827290cd81d9349166cf","ssdeep":"","tlshash":"50f0dcb30138a81982829620e6d8e93ee253d6044668aca6732800b5f1d825ac0dfafc","size":470,"data":"","first_seen":"2026-02-02T23:27:32.28143Z","last_seen":"2026-02-17T20:25:27.215736Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f885019d60d2815eac5fed1805b39d0b","sha1":"5ea8fd60c08c4f6ab3fbeafb081133d2edc65eac","sha256":"b2aeebcbe621533b413aacb6683663cb5b1336c53ff72ba2e97e5fd428c6bc20","sha512":"ea540c50e85737aeb8bef9ce37c5a9539312d51d13119a8e954c539304dc118313a3d7f76e805891f11b156d2a2eb07c16794a1d2325014e952e146344cbbf0f","ssdeep":"","tlshash":"0af0dcb30134a81982829620eadce93ee243c6058658aca6732800b5f1d825ac0dfafc","size":470,"data":"","first_seen":"2026-02-02T23:27:32.285716Z","last_seen":"2026-02-17T17:25:39.065257Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/fancybox.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/fancybox.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20810\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68446,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5903cd4e4bdc6c28ece32e469b887a8a","sha1":"825baf2b74a47eccb7b3f439fe58da710b84a2c4","sha256":"c563abe9b3e16a2461415597e352e306678e093e2078d6f3b9618d902b1ad2c7","sha512":"9562ef7d089c8ebd39a3978cdac3266643a4a184ebb122598b9991b8c9dbbcd61e4aae736bc2e1a84ce6edd97d6f671fb366ebc802b9a8170cc82d510ffbd3b9","ssdeep":"1536:FUtGulsqqQzeFuouppK0WFVnsQrNz7M4HJ3t5oSKN1fQq58cTJ7PBTf:cGasqqQzeFuoubK0WrNz7M4pd8qq58cH","tlshash":"0663f89fb610702582bb0594a30f560ed1377116f10284fa78bcd4d55ae4fc922ebbfa","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.181628Z","times_seen":996,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205297\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":51,"dns":1,"connect":13,"send":0,"wait":29,"receive":12,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/shape-3.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-3.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1124\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 55, 8-bit colormap, non-interlaced","md5":"8cee0389372162c0a2352b2613c13570","sha1":"57a2a9b090d7b09bb3dee3290e1007ec71b4e663","sha256":"f731de19b6012dff0f19cfbda37e62c01c40e8e29280203a92d4a2f0643229a4","sha512":"dc4891e78970e3e68a4cbdbb1bef3028f16f8b8796a352042c49805dda59a9cb8247ccaa8c018daebfbecd8367fad0c62adebd077b209b21f6f21aa6f6e90fce","ssdeep":"","tlshash":"d421128a5f39de3950ecc6688314c513499cb1bfe38a309baa424685f67040d00d6b83","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.158145Z","times_seen":813,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/eu.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/eu.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 868\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"b8bcad392a1d7f64622798d6e0059920","sha1":"b41ed94de447df832b59e53abe23fdd52e179523","sha256":"ce61c4677c93bfdd6c804e6100859ab906fe93c565cce3a368686b15c68d49a2","sha512":"f0da32809a628ed6b09c01d456b3b313600853a7641246a30079204fb0ca43c2d4610e0b2aa64fd4e472dc92c775f865d3316c982cc941850a46cb1f92e1a124","ssdeep":"","tlshash":"ec11561a5f64c6acd08806afa09438b4f47540461d257a17dc4e346499ffb6c6d36381","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.175907Z","times_seen":797,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/contact-form-script.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 425\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":895,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (895), with no line terminators","md5":"250bc40cc9bf0311ff49a31cb3fdd96f","sha1":"75b049495fd4ad8f8dba66abef363b74fa50b326","sha256":"01f88dcee3ea695865770808ba43f18d9b0a0db51696c39d69ea2a607c108e78","sha512":"7ba4df3992f99eb5cf3fc7ac3e4977218b0fe6d57912885197931701943e4a0d33d36971b70b656090d84bce351fccee973727bff9d85294c9dcc7d1c5350487","ssdeep":"","tlshash":"1811d012341429d9033b2bf9700e3602b3711a34c9bde91520b0b9cdbf78d9836a3316","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.186648Z","times_seen":959,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/hero/hero-shape-6.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-6.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1934\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 97, 8-bit colormap, non-interlaced","md5":"f83b8c90bfd681efd73d4819b6d12b7a","sha1":"443a851b10b6d2b331b4fa05f6ec6bfcb8482d5b","sha256":"35f443944fc4ae8a47098e39823bc5d967f9d440dac39971d5b3f0858f185f8d","sha512":"2a13e0f0e85cdd5b8c14c84dce56950c6e3071b5a39fa380aca3aa8f509745f8f1cc23df22038338c29d523107135d3530db173fb08cbea9a7579b950fcdc3c5","ssdeep":"","tlshash":"d8413b62c4063c7bfa4468b5d612088fe4b9c62a079502353bec71e17b6606c993057c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.174423Z","times_seen":781,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\ncf-ray: 9cd91eac3f64c272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230165-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 39867\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rt3pwcM2ICAJ8ZVGeGim6s9Ye7HDn4DlALU45gsVA%2B4SvTTxttlHiK4rZ01nag4BGSX1W4SC2L5msUigF%2BVK%2BShzt8phAgeww5VA1IwbQ7Ss8dZ3y7lKkFrI4iLw9aDbgsw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.030Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/fonts/flaticon63cc63cc.ttf?cefae1a4bb47c2f93f732cd251c9c01e HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/temp/custom/assets/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:18 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20165\r\ndate: Sat, 14 Feb 2026 02:26:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34936,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"ca8030904ed567a42f1dca62d90c5043","sha1":"c1f31d849c90b8815bb080068aa45aeea24e3d63","sha256":"506d72967add3dbedaaff32751d8d2dd5ae16e42771043148bc3c5d54515d8db","sha512":"bafd57abf0ba2e26a4583aa9d8ed75ed3f22c22add2b36d3c61d3239f36b1b2e429eff02c045c7b849458877cce6d50bd7d25a587f9561b4e334d853e08ede5e","ssdeep":"768:D0UbwR62v2kfJw1ssaJnqmfzOhXsoRvr1tksU:DFbwRF+kfydaJqmfrObk5","tlshash":"b0f27bbf735f4e3ed3233abf9cc865224ae1a90815a379836d8d690dc9160c42ef0259","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.180116Z","times_seen":865,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nage: 2666420\r\nx-served-by: cache-lga21963-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 88878\r\nx-timer: S1771035977.492370,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-06-08T18:39:48.878418Z","times_seen":79014,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":40,"dns":1,"connect":26,"send":0,"wait":26,"receive":6,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/testimonials/client-1.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-1.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29011\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29011,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4658267f97ddc4e728a30e1b34f3dc91","sha1":"803b36fb2ad050ade535685b5f3ac92a32a87598","sha256":"6d8b362584cdc3dfc95309e4af19147517ae92c27d28e602c212ac92913e3f0c","sha512":"883a1f2574964f274f6f0daed68f7c8f8c9194a3a0f320f56629874800146c33941d683ce5216632651af18f7937452ec937b988d2142a2a96e686f7ccb01993","ssdeep":"768:2NeLTkSwjEri/BzR+qGPiOcSni777QMa3tAofJ3:SgoZEriBGPiOmwMa3yol","tlshash":"29d2f18841e749819021c3f2107af51d678a695c6d2b031b91d93c72ccafff64f5ea78","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.196427Z","times_seen":826,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/hero/hero-img-2.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-2.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142460\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x600, components 3","md5":"90b948945ee7a4fec9c30343ca95f019","sha1":"f95143740991349816225ba5afccbd5232f8ac8d","sha256":"5f531109f4933e8b3156823d17b99a177fb75de338e44f7c03035902c97a510f","sha512":"ce42794246995ceca531329c2ac2b993799f69b0acf205f84a721fd4c3811d7b9e77b2a77e503a61980756493c8018376325f29e8b9f1e92a944b281bbd840fc","ssdeep":"3072:6GljmlEjc289s4Qzg7WL/uvKQVlK8X+OSCxW0JlDw5WRV:3slQtl4ugKLmlvpSH5WRV","tlshash":"6fd312337e37e19d9884ba67c8a753f9b32a7734e6ea0946d02c0db4d94f12b5b14806","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.16701Z","times_seen":768,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/shape-2.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-2.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 519\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 50, 8-bit colormap, non-interlaced","md5":"0ebb76b1d4f0c812b15c580a9d4f31c6","sha1":"39976fc87dff1ac0b6f0ba6a75324a318e0aefbf","sha256":"5c7e35d5c7a4a76e878b644d412a529023fa9719915f1849b8cab2dda9ad56ae","sha512":"402cd9d6fc95b1ef4473fe11e14037b972cd32b01b7343501a722fc90fca919c8132b4de15b5b2b34f31cfcf4d53c90ce9cfbadfa3d8377a93734cd37b4aa5aa","ssdeep":"","tlshash":"86f00e82ebbced78a51286aa47314821823a73082011304aa833b0389af978ac5d39c3","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184584Z","times_seen":803,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/uk.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/uk.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2254\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"1bd9dc32aa8ede4f19cd64e835d80597","sha1":"2d0586473fae3a4e3ada5c9b22dac6774c62efff","sha256":"1a81d14aa39b355e2fdb76619ae06df4de572f55904cd63b584546af42fd025c","sha512":"034f69c608575c364eec64ff64c2440c2125526ede4dfeec140eaaddc9253b04c03681cfb62435b1bf4cd027a9886305913fca97c54d85872269a59f087aed6f","ssdeep":"","tlshash":"d14129f1310cdb68c89686ef50e010c1a9e6aa4709080357aa3fa492a638872905b99e","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183587Z","times_seen":795,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 108675\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:32:37 GMT\r\nexpires: Thu, 11 Feb 2027 20:32:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 00:10:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 194021\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":381830,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":111,"dns":38,"connect":28,"send":0,"wait":30,"receive":67,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/down-arrow.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/down-arrow.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 438\r\ndate: Sat, 14 Feb 2026 02:26:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"6f1f1acf5c62fcda73ee05662c8182ae","sha1":"e09fc52fa587eb882b2f31f4e6380c820e5078b1","sha256":"777bfb6de1e8019c69bfcf4a6a4113b04ac9ff635ab57457686820830b68a6e5","sha512":"84d1fe9adb2b18c8f3aa3154c6fb59e285c8a55b08d24b5d99abf8d8f904d6cb2046dcbdc3cb6114baa5ec21f8bef1b149a1d3f3d2baf97ea2b71593e2343a71","ssdeep":"","tlshash":"fef023f7535250a8dfb14570696d00f4dc37202d9d02910646094eef65d1090c8c7802","first_seen":"2025-04-23T10:50:27.724108Z","last_seen":"2026-06-07T20:31:52.540314Z","times_seen":144,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/flaticon.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1149\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5680), with no line terminators","md5":"09bfb87f4fc89fa772195da8afa1489f","sha1":"88ee2649f1e1b1e8048a0f8fb8ee750a16f339ea","sha256":"53f7eaccc5cabff8999753b23d2e2aab91a4fa445707494f4ce0d0af103fa211","sha512":"37dba85918d11177c8c46601bcd6651181afdddf0659ca24bd31213d8482e647faf0a0b25a532b316ce4fd80c9474c3ea0ad575cc98f378d5cf13634f87a512c","ssdeep":"48:s8HaHKHAEGQ4GDb3aHF1bmZmr2mHkw+JbO+TnVBGa045LDyeXoiXA:pHaHKHAEGQtQb6cF+JbO+LzTXG","tlshash":"dcc10fa4e46a10c47732ce0bafe9b218e698b128cdc19d15f11f4e1cbdf1b554386eb9","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-08T16:32:30.178116Z","times_seen":772,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/testimonials/client-3.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-3.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38351\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"0b0594273fe1b0c138afaec55d626365","sha1":"42fbe28cd4401ff7905592ef8aed7e257de18c41","sha256":"ae7da33946d2beb7729ca295821719219230adec8515594ddc697edb228df028","sha512":"f4af1f08a8c8337f2710e438a7c9dbf02486ab24f9ce916d4b21305bb1ab5c64a88562608bfc67880fc3ab870e591a3b5f5c7b021da4e228201f5459303e456d","ssdeep":"768:efjnuv39PX16ZmtIET7ST7XNzGU4jtku6pzL+iePBObysNY7z:QjK3lXamtHOoPt34iObysNYf","tlshash":"dc03f2a4bb4f1c2ae6535488548d87de950bff4c396f36812ce845636c1b3279c1d19f","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.162486Z","times_seen":813,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/about/about-img-5.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-5.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141805\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 480x650, components 3","md5":"5e2a9a8715ef44bfcc4419c54e7d9906","sha1":"9534d84ea5d0a143bfc6ed695f7d9aab4058f9c5","sha256":"1cf2e1d7c174d3155616e66fbe49a1f0458de06c643cca6c9d1a056ce526aae5","sha512":"1f4b821f50e90980d14e89a77682166006ba52bd5dfc709f1ee8ae305ae3973c6406c321fbba66d236c6a1f8991303299444e90dfe49cb35e70abea1f8d220de","ssdeep":"3072:lQfm2Kp4kslg26ZJkyBAvzHibrkW4o8newrZ7B/IokyJran4MhYkx2:l8yxsq2eryb6odnew97B/Van4IFM","tlshash":"ffd313b89c6aedc74804813b3f1b42aae9fc95c2f1c76a113356b955c8f4061db7703a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.159723Z","times_seen":786,"resource_available":false,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/about/about-img-6.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/about/about-img-6.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100901\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 320x400, components 3","md5":"f7ba0df7243cef46807ff8d03bc34777","sha1":"0afd7d2058543a89f2f84742fad305ab8283f7aa","sha256":"0bbd00e0128ce44e69e51fa7167c7e68f73f6d08c6d27f2723c5a85379b8f7de","sha512":"318befb2561d1471fbf0f6d3766dd5f0d8bcf2ce051b479ce64712e92be2251e609434537067cae7bb6b5563df41cfe7a3ce6f39a8bae960283c351f1986dd3c","ssdeep":"1536:JTV9Ij1UhMHAHn2zOEJUmOkm/r2EP80x2Ad1e6SzavRvCpMoPBgFwJrEQxQ:Jx9I+hwAH2zPqfkUr2ELrejs4pr89","tlshash":"cda3124f8c73fc60e61fa612882ce1bc26b6860df862827c44d0d715f63b76b7976045","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.183102Z","times_seen":798,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/japan.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/japan.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 676\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"d6d8f49eb74c68abd38daee5abdd0846","sha1":"59da5e99ad295277d09a2a1e0d14ebaa04ac75c9","sha256":"775b622f42ac6d8adad96c7648ccc994c542ee70cd400e77ca9cce9d4b8ee03d","sha512":"f93fbfc102bfad1b05f118085f424210180c96c5dd483c81db46a44a1d8de9b35a9d019c9ba917fad18022061134c14797b6c7975792608d446468c673441006","ssdeep":"","tlshash":"6c01fe73383ae4650cef0acfb27d6502a4a646011b22fb487b4634ed64dcc4969b32c0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185126Z","times_seen":795,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-3.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-3.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 462\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 22, 8-bit colormap, non-interlaced","md5":"93371548ccbe732f0d4da146e655a847","sha1":"713328fc5b2ba4605d234f8fc6a447d4e80fb081","sha256":"65e31de86753a271f5b52be6716a181ff8931fbcd48a4f056e65e275e690d6da","sha512":"bbc03e8d358fe0d35c38b9e7ceffb6c9628ef69ba8152168349aacf1d462940f8923456a7a0215f1d524ee467bde7192756b861de7d843be0bb2dedf89a42741","ssdeep":"","tlshash":"c5f0abdae5e8a82bcd6949fac73c983d2a463e44200d2007e814382b9eb9c408658a48","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.170058Z","times_seen":769,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205297\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":102,"dns":0,"connect":15,"send":0,"wait":17,"receive":21,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/testimonials/client-5.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-5.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21569\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"f75371f848157b639ca47a4d97fe61b1","sha1":"43d0633b744d3f35897d67179b22ce4591a3cb90","sha256":"00b5e239f9e62e1be8f00408d8551a87a14542e0cf1d46b5e405ef000135b455","sha512":"89996ad5a134bce17b5b8e1f448621cd4404e11eba12722ba3b875f26a67bdc7a909493dc77ff0549cbf4c1641b2a08eff5a36d66ae4d6a031e48a768adc1610","ssdeep":"384:LSRA9lhtmhdQZM5eOWgwNKFaRLQlvXxe0QzkcQzqjt/YXW0ngd:G9eOGNua5Q9XxeTkfWZYXW0ngd","tlshash":"27a2e190d9968388e9b9f534761433f37a800fb216979622afd1a0f9d71815f047cf7a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.185601Z","times_seen":804,"resource_available":false,"data":null}},"time_used":1066,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.appear.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.appear.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 497\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1198), with no line terminators","md5":"80d1c754b36f693ea7de8d608acc4afe","sha1":"10736302703a32d7682359a36226f341c8982daf","sha256":"b57506318dccce1f06d2545f2db1bead5d46acb07df071aee7651d2c3013105d","sha512":"53f2b2c87a37679c54ae6e4adec6ab5e38aba31bf9ad51c69ada851d85d3b6e9d5cb3a770986d2584203d4f55fe6f03acbc0314afd99d536d70fb020847d68c2","ssdeep":"","tlshash":"0e21a8ca38c6bce583fb311c562f72421161913f574299a31ceadd7c35a6c913c13e68","first_seen":"2023-03-07T17:48:49Z","last_seen":"2026-06-08T16:32:30.188183Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:29 GMT","end":"Mon, 20 Apr 2026 08:39:28 GMT"},"fingerprint":{"sha1":"2E:B6:3D:17:52:5B:29:DC:03:5A:0F:A9:EC:0F:57:33:2B:54:50:E9","sha256":"05:C3:70:5C:FF:EB:B6:B2:B9:5A:B1:EC:19:0E:52:DF:7D:82:EC:E3:1F:F3:BD:64:AD:96:70:3B:A3:E2:E5:FD"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81657,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"08e05653e31fab3d22b310c0e00ea273","sha1":"262007d4397449e871762c7be844504b04369578","sha256":"b66a6ee1fec79a04f975b74b47a664469208e526929f828265833e8f40b3713d","sha512":"4541fb4a0813290eb839ff0ff35e8a41cc47d8f6417a6b7e67220d7f45480547831710bfe70de78b7024858c49bbca18477fd6c38be81fcd570d0c51c7cc7b70","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNezi6wNWnq:Xf+e9J3jHvK4UEgziGq","tlshash":"1883b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","first_seen":"2026-02-14T02:26:41.56253Z","last_seen":"2026-02-14T02:46:10.103263Z","times_seen":3,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":91,"dns":3,"connect":27,"send":0,"wait":127,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:03:50 GMT\r\nexpires: Tue, 09 Feb 2027 10:03:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404549\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-06-08T19:51:45.420239Z","times_seen":13052,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:02:29 GMT\r\nexpires: Tue, 09 Feb 2027 10:02:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404630\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:00:05.583277Z","times_seen":11319,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/style.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13192\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"231181ef0e78afe4c8c369f0b0cb8066","sha1":"3c14c3667faabea86bd4bd4f138100718a8f9c8f","sha256":"a7209c2137b1636de472b042fe4753d31967aff75a81c2869e9d3763bf165e5e","sha512":"1e54b7d227773bacf1bfd3e1f23b5b7216e584a17943b3a559fbd7fc265010fc651523ea3cb1ee9003c6a12a7d5681b1b461f539d16bebfe152aa48e07f5a4da","ssdeep":"3072:+gQgrtgMg7/TXecD1thqi9B1Gr8JZV+UhM3HFCwEdXN1yiZIwfdxgH:+gQgJgMg7/TXecD1thqi9B1Gr8JZV+US","tlshash":"2da3a9619246232ea127c61192cc66d43e38c563e72707feb6163716c7cb7e7226bf09","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-06-07T20:31:52.530179Z","times_seen":672,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/responsive.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3160\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19549), with no line terminators","md5":"41f6f258e711bd2f007f2fa62ead6217","sha1":"7fde53fc9fcb23d73eff3c8e9a0194e33c0432ff","sha256":"a8b7d048746598b7abfaa4e69644003831806e2a4d87e8a702d49fe949e144b9","sha512":"2c2a6c94e122c0337dfc55ee32f5b8fba21c63722814f8bcfe22b2f8b971e8374cd12660c357d5a017117082161ebd9fd455e79e8bc3aaf66df53855ca76915f","ssdeep":"384:WtWRoiBxVVdRr3Os0djy9ScnTUUHaeXTl0vwzaxEF:lRoiBxLOs0djy9ScnTUgB8w2xm","tlshash":"d292359323160b3de12b4822408d72f43f199a72d7a742fe9d154a2adbcd3b713b4b19","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.17861Z","times_seen":860,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\ncf-ray: 9cd91eaaec7dc272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230176-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 69957\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u1kNssJtUPik1tr4dZ16dcLYBwdYXQ%2FC5CNYIv0FNKsfXFWtqGVEomQ0%2BF4o8TXvbR%2BXZdqlrHCeAqotDF658942mSoGgnJuSFGJQehz7U6%2FTW%2BpX%2B2Nq%2FQiJA6A4k9FMRM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":10,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/fancybox.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/fancybox.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2931\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13039), with no line terminators","md5":"32ea6a4849f931f79f4ec5816923413f","sha1":"c9fa6fa910b8cd76cf14faf4ff98933c7bae6b45","sha256":"e2d2ac9b36a0e51b450d1f32059ba46fbadcc5ad9d3063abfb562ac714211af5","sha512":"bbcf2ce681b368745003b3e64a8aed9bed1cafb08bce2ddd375ee5e6fea16d68ce5bcb452bcd603a3e0937f41401660ec3703430ada8d2877eb894445c6964b3","ssdeep":"192:yJ6DcJ566s6kC/wEvH30trWc/p2/Pw8RvGgNmUKJwe:yJKQJl/wEvX4jx2/zvG1Nx","tlshash":"db4251336540312c407bcd22d7cfe948e13a9155aa2216fbea4cfd69cbc77e911d62c6","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.151947Z","times_seen":896,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/hero/hero-shape-5.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-5.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1204\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit colormap, non-interlaced","md5":"15cdeabd4f3cd0386e7557ab0c2c2fbd","sha1":"b85c817311204185520d819bfba5b2d68aaae19f","sha256":"817769cfe84fed4edce7451771448f921384e09f73364ea105924ca25a01c305","sha512":"86561281d81b263b73a1f94295f6e37380d074e05bd46cdb6bc7bbb907c09a45d52251e30d42dc64ddda2b4ea0955c0a0c155a803bfc6b18726997e5eeb825de","ssdeep":"","tlshash":"1421ba897809bf1ac6df763d4640b878cd4d78149f00c6060fc55a6c0e96bdd37d4516","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182113Z","times_seen":783,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.countdown.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2238\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators","md5":"76a923d3d69255c45cd24bf9b100244f","sha1":"eb3c96f9901692f1a03500ea632963a16afdb985","sha256":"8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5","sha512":"b97bed03f0e8868df19d9e2437158b89f06a46827af8876f616c8f42786d145105964e8518d8bad9eece23cd9c7a4767f39861488c5410ab42ffc7e20cde44a4","ssdeep":"96:GBXpuplQHIwbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qf:rQHnUpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"b9b1a5ceb3b213d508e553a201ae1116a27bf15be4d6001cb5fceac87a75c9d606fd78","first_seen":"2023-03-07T01:28:01Z","last_seen":"2026-06-08T19:38:41.274812Z","times_seen":8873,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/fonts/remixicondf6ddf6d.woff2?t=1590207869815 HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/temp/custom/assets/css/remixicon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125268\r\ndate: Sat, 14 Feb 2026 02:26:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125268, version 1.0","md5":"9915fef980fa539085da55b84dfde760","sha1":"4d375abf43ed18aa54264c1b59714b0a59c593a4","sha256":"e61f0d10c8cac8cd0ecb36790d6cce883380c0b185ff3c9bf849ed336ba8285c","sha512":"1e4c9a5e0f5150fe33870544c7d70a73724096e60ee10e0ade4def46f31647664afe361292c7ffb39a2edda98cab06bab206f64feb7f610ab137d17fc789a3b1","ssdeep":"3072:5vCveG1NooSPyIFS5WDTVKAQI+UHmfGsrKwfGXoiEw:tq5eTFa47QIVHmusrKWGoix","tlshash":"bcc312b6e11a945cfc80e9a278dc932d4d60145e4f80b7c7ce1912ac433ecdb4bec5a9","first_seen":"2023-04-12T01:04:15Z","last_seen":"2026-06-08T16:32:30.170544Z","times_seen":3183,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":535,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/storage/app/public/photos/HfwYMotPfeRFCDzvmYPCftdezb0R5AwugjUQ0jwe.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /storage/app/public/photos/HfwYMotPfeRFCDzvmYPCftdezb0R5AwugjUQ0jwe.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 15:30:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32179\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 448 x 145, 8-bit/color RGBA, non-interlaced","md5":"483769a028a3dd8d77f02eec9c595cb8","sha1":"a46ea40a487419d1fc32d4cfd143a9b0f8dbe375","sha256":"149d7c645bdbd31f3d4fb2a400afd6ce088b08387866036e53b46b352d0c1af7","sha512":"3ed6d36ee1a10e53f084046fca178bbb14deab789dcf378f69f0dd5f83e4a1d74e84a6cf8851ab1caa4483529a6942e2cda1c6b3b5931da04599f8de36e6a179","ssdeep":"768:MOB65XKKuzCrKxUU+TiQdpkpR8otkpcBvDUyx5UQZ4B:MOU5XZjjNdpS89yAeoB","tlshash":"e0e2f1651caa71707fdd1aa6207206f4ef234e1506c3f8dddec6fe419b001729b7aa61","first_seen":"2026-02-13T14:27:25.531596Z","last_seen":"2026-02-14T02:26:41.573405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/why-choose-us/wh-img-6.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-6.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 180305\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":180305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x692, components 3","md5":"5c9ea178a8573030d28ffb3525b2f3b1","sha1":"9ff7af508915c2488e5188bb3824f6c492232302","sha256":"866c823886969f332ee6ad51137f1daec2480cfa6fa78cdcbb411dc37be97499","sha512":"84d5e9ae8d06a1afc0cfa27b56d1ddbb9d8fe5dfcecbcd18a46e50a8041ca8c7ef875c84389a5f86f22efe4a61983dc2be5e65cf60e0c81f071b2aab7c723899","ssdeep":"3072:OpYQ94yA0CLKJ5Z36nneMWZNy8+ERR3RpS9d0DBD5VUe77AGI5:OpYQo0JZ3iGZNj3Rp4d0dDHXS","tlshash":"d40413ca08fd6bf4a6d80c235e29fb2457a66fba57098abd91c7f466c7d5000e097d0c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187676Z","times_seen":773,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-2.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-2.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 534\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit colormap, non-interlaced","md5":"c9eb18efeaa14310c0b3db2bc9f93a27","sha1":"c48275e79ca07a678467c7ede198b3ad2061f39e","sha256":"5f4957ffe8a2e4b25b354480b2ef2e44a663748a2bbdee7e172a62f16cfe58ea","sha512":"4281040fc9d75e2101d34f28221e97676f7e76a49355c81337dbb4a8f7704d8928c22aabca3f79db08544d721cf265817388a72a018b58e89bfb5327010d088a","ssdeep":"","tlshash":"8df005e2d5984f8c556c845113734ee0663c079b674071459d33d0a22ffd6acb2ebbc0","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.172023Z","times_seen":771,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-6.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-6.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 669\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 20, 8-bit colormap, non-interlaced","md5":"78a60559b34e8dd28b65b95903036c6b","sha1":"965f510a8283effd5154049e6db5d6569da7edd6","sha256":"6ede0ad128484c30e39ad7dbe5881844bea4360d7d0f65d8831597e0b058139a","sha512":"c3391299c37c1f097c04cc1091e8950102b486b6e1b823745ba43046f327e70071b8277950c118f641bc50b4d26ea69db9e98fa5bd424f53008a3eee55e6582d","ssdeep":"","tlshash":"f701239ab9458dad7771b09d03220f0591743b2023087a145db3d0b14adff09c222741","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.179136Z","times_seen":769,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.545Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 368664\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":123,"dns":33,"connect":21,"send":0,"wait":22,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/b1fa8b40bd981c921450c1153f00f1128d298a18.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"35.159.44.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/b1fa8b40bd981c921450c1153f00f1128d298a18.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 02:26:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-06-08T12:28:44.022189Z","times_seen":2964,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":121,"dns":35,"connect":21,"send":0,"wait":23,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Feb 2026 10:30:29 GMT\r\nexpires: Wed, 10 Feb 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316550\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:42:52.67885Z","times_seen":48979,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js%401.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/popper.js%401.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\ncf-ray: 9cd91eaaec7ac272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230165-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 39867\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7Rv9kt1nn9NffKLpaQaRDIxHP0efmzxxGyCe5f%2FqPuhoXMDyD4Q8bRaArnrdGIQ6MlA60b%2B3AIb1UM7gj9hTwgA8qdyaS%2FCI0E5sFsiUhPmdSx2jqsEeSg5r%2Fw%2Bdv5kxzNU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/dark-theme.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-theme.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1686\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8642,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8642), with no line terminators","md5":"2db98f202b2ea99a2c0e546c85d9899c","sha1":"71cb4231c618f94ef4fe9d1882f8a4e730f016f5","sha256":"04849ae2f5fa626f72455997b529e5612c6413077047c10486073461417b9a8a","sha512":"48a3e8bedc02c5523783f299230e749b7a6e080d8d5355f6b40b6e4f8ca9b477b41a8521014219d3cb50f88959c0e73910f5930822e7c9dfcf1a6d27d7eac207","ssdeep":"192:0KBCZ6B2nSPehnzhOe9mVxwVdU19HSkiwo7Ux+hvGb3lijIj3Yp2y3yZp1:0nSeyeY9khoEjIj3Yp932p1","tlshash":"9d02be20ed722e3a21138518f488bf981f7e31a0d6067b7df22b15e4de5a1de63b1b45","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.168042Z","times_seen":807,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/jquery.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30268\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-08T17:27:55.924477Z","times_seen":19632,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Raleway:wght@200;300;400;500;600;700;800\u0026amp;family=Roboto:wght@300;400;500;700;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 02:26:17 GMT\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12089,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"639340ecbe89bfa40436d07e95d5d5c0","sha1":"1fcee10dacb1971ee08f65e69f1a0a15e7c8ea32","sha256":"48b7b8dc47ec45da9abacf0728f246ec8715f4689bd4caae4c2a2555077e1f14","sha512":"7eee30b686c61f845fd5dfcf0bd3ba751062db920e776d3d7e8fcc3ba50e3dbc5a19acc6e3ce36569c0633e9d82b25574bb41315585697c36e0ec7b2487ba1e3","ssdeep":"192:MicTxHyDi1iHT+H1Dl0iaTzH0Dkfi9ToHfDPGi4TtHGD25iDTKH5DpYimTvHYDIp:x+NMzwNYr2tWXCRg3ExsP9","tlshash":"5d42ada10917d404eb476dc663ce3e36ee8e62057047953a9bfd58bcbcaad3613a070d","first_seen":"2025-09-14T16:10:41.877473Z","last_seen":"2026-06-08T16:32:30.179607Z","times_seen":843,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 10:04:45 GMT\r\nexpires: Tue, 09 Feb 2027 10:04:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 404494\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-06-08T19:00:05.583987Z","times_seen":6417,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\ncf-ray: 9cd91eaadc65c272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220109-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=el1Uz4zx9PCOQOlC2W4bY4KgWFvQLzhfADBU%2F3u4q3rZ21qLUMhKMwxq%2FtZAmOGTeHemfRKmZ97MLrKBn1TdA9uKhRICGrkjFNBHkwFiX%2Bjh4RJY2Ionuwyh7bI48HtL2ME%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":45,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/hero/hero-shape-4.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-shape-4.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2828\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 41, 8-bit/color RGBA, non-interlaced","md5":"c6fa237e3615874a95f25dbe241465e4","sha1":"a8e42d5c5453d27fbca195ce866df66ad677babc","sha256":"e72300940f13f799954928f3ef73bebbe4c59f1664cd703adac82e3a99e7bfbc","sha512":"be45a8d14ffaca88309cb06e7460a61dd745be4bd1be3de782307c615c075c5521ad46968a135838f8e6d499611fa07d98064362245942fc556ac598c32ba4d3","ssdeep":"","tlshash":"fc512bb1f4d2e7fdc0ee3a018a7c205e646b32e3640637c0ae91120efbd79646649881","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.195929Z","times_seen":792,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22162\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-06-08T16:32:30.161958Z","times_seen":2210,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%404.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap%404.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\ncf-ray: 9cd91eac5ae18be6-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230176-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 69957\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I9fJeXAV3QlxZvKDQe1EWjoqm3wa3yDVltbfwtrWC1JnesOzOXQGUYruvfjbpCGZK5JaGYX20X51ASgnNpvadqP5aYMhw8tb39hwkAvpXEDWwWfq3%2BhrxEdzusbtg1fUh2c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:08:19 GMT\r\nexpires: Sat, 13 Feb 2027 07:08:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 69480\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-08T19:51:45.4145Z","times_seen":65097,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260211","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:29 GMT","end":"Mon, 20 Apr 2026 08:39:28 GMT"},"fingerprint":{"sha1":"2E:B6:3D:17:52:5B:29:DC:03:5A:0F:A9:EC:0F:57:33:2B:54:50:E9","sha256":"05:C3:70:5C:FF:EB:B6:B2:B9:5A:B1:EC:19:0E:52:DF:7D:82:EC:E3:1F:F3:BD:64:AD:96:70:3B:A3:E2:E5:FD"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260211 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 14 Feb 2026 02:26:19 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-11A0EBgIYHl3RnSE32ZXyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw0pBiEOLhOL1r_xk2gQULX-5mVFJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzMDI01DMwjy8wAAAmTRLi\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=31.SE=EmrW9H17t1guBKpJo-MeXOcDB2RGmhuwnhB5HQAZi8u9FBSf2k9cvqcvoNn5u-kADA5EsATyxesnPakwMWeXo7X1eJzkVlP9R5eIl0AHucgblBD4Be6qjmwiElP4Kk6r3UzhvBHP4XkX_hGZGjCbpbUKaiVaVrI64uF3LVqsytAtiimcve7gm7Wmttvd-gPXkPpCKyTHMITDWCsLb87MM36DARBwrtV1fGnKVUL45ypC3HcYunBDjiY; expires=Tue, 16-Mar-2027 18:44:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/testimonials/client-2.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/testimonials/client-2.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24322\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4492070c33a5a620c7f74f67f13ccec5","sha1":"eabfa0faaf8877499c8681aab77236dddbe948ac","sha256":"079d830b47f34df1cbfc52ad478b4ff995e0c28b20925a877c3f09f91ca8c797","sha512":"2b84b864b1bad11c6937c1fce97ec6b0c10df32cc9952a2bd5b174ab86f9fabcf09811574d1b396a682159969e68a595fd5ba625ef99beaf64e2b8bc0de4b051","ssdeep":"384:LeOMbPiVLUNSNs6C9RiTsqW/ioVwVUFtGBbzrEzKg7JIMr2hKOdCXff:XMbPiVLUNS49RUsqGiNGFUBbzKTGO2hs","tlshash":"9eb2e1572f838c8f6a3a4b3ce61e82a36911033d9523e79c2d6935c2d72b3fda45c854","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.187147Z","times_seen":812,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/canada.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/canada.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 801\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"43508a151ab884d973520b83487b4ccb","sha1":"5379f54f4468a64d2c0c9512b2df7a7936ec043a","sha256":"579aea648f78215dac32b2c68101a5cd62b03d868d92a63c4b70545f1bd1aa78","sha512":"37cd272abd993d706f9b059a0dfc31cb3d1c49cf3619c370436318267ff91f717c8eb61f9a4535ce4e4218aec909f85fd95fc41741c76875c70f6166e4c4cf70","ssdeep":"","tlshash":"5901c58e730880cced46589283badd81607a15f014babcb13201052dd152bff8fccaab","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.153715Z","times_seen":793,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:26:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Sat, 14 Feb 2026 02:30:08 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3BwAAAAwBuUwKCQH3AQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb541237214c3594add8f692c41f504\r\nx-77-cache: HIT\r\nx-77-age: 7\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":74,"dns":35,"connect":7,"send":0,"wait":7,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/storage/app/public/photos/gZJ3tm0tZ0WoQwPoixOpa7WyL2LD3j5lCciTrTKL.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /storage/app/public/photos/gZJ3tm0tZ0WoQwPoixOpa7WyL2LD3j5lCciTrTKL.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 15:30:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32179\r\ndate: Sat, 14 Feb 2026 02:26:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 448 x 145, 8-bit/color RGBA, non-interlaced","md5":"483769a028a3dd8d77f02eec9c595cb8","sha1":"a46ea40a487419d1fc32d4cfd143a9b0f8dbe375","sha256":"149d7c645bdbd31f3d4fb2a400afd6ce088b08387866036e53b46b352d0c1af7","sha512":"3ed6d36ee1a10e53f084046fca178bbb14deab789dcf378f69f0dd5f83e4a1d74e84a6cf8851ab1caa4483529a6942e2cda1c6b3b5931da04599f8de36e6a179","ssdeep":"768:MOB65XKKuzCrKxUU+TiQdpkpR8otkpcBvDUyx5UQZ4B:MOU5XZjjNdpS89yAeoB","tlshash":"e0e2f1651caa71707fdd1aa6207206f4ef234e1506c3f8dddec6fe419b001729b7aa61","first_seen":"2026-02-13T14:27:25.531596Z","last_seen":"2026-02-14T02:26:41.573405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Sat, 14 Feb 2026 02:26:19 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-08T19:23:15.379225Z","times_seen":73598,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":63,"dns":5,"connect":8,"send":0,"wait":19,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 368665\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 920\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185), with CRLF line terminators","md5":"87abab2867922fef553680ba678dfa06","sha1":"38e873c124fb121992f7353080c62de7ff47c1ad","sha256":"eefff6e8d13f576add7c73285b00d6ef56d3d1d6e6f98af8561fd3dbf47500b5","sha512":"dbb7f9cf9d1f47ded41384e422050d480a1f718b9c5b15516869fe9b44cc18aa478471d589fec1e024e3c81354be71f64da311702f059dfbf515ef73b400e5e4","ssdeep":"","tlshash":"1461cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-18T14:12:09Z","last_seen":"2026-06-08T19:38:41.240887Z","times_seen":1587,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/aos.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/aos.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-08T19:51:17.82464Z","times_seen":38274,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/hero/hero-img-3.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/hero/hero-img-3.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102249\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x600, components 3","md5":"32acfb8082f7ff4363ce4b51eea98d2b","sha1":"26959509e5121feeb3adb0ba06acce1843f70c86","sha256":"3f98d875cae7c7f85488ecbb017113e566bd8e81dc56d0bb477f67d38c551a2b","sha512":"1cfdd9ff30e5d8e7f16bcca9d872ef8623d549cb5361b5f2dddcf603eed302519f1bcf7bbf3c966a9d07651a9ccaee5ab6cff3f22945747977cb33fad5bdb30c","ssdeep":"3072:NsteC/gX9dIIfEgyGFXZ/BzpnaAZN40S9MhCnsE4Y:2eC/RoEgyGhxBznN8w6HB","tlshash":"60a31238a7c292286cbc0d56b5f195d3978ba62fe77f931e987cc947cf42100e486a70","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.163013Z","times_seen":782,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/newzland.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/newzland.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1040\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9bbf5eedca3d147d0cf857312515c461","sha1":"1ba9ff83d4174b87d2703262df63834f4bb3c197","sha256":"0587301dd2fdd00f161a1a6b8d420bff27b5fc47b1f74b2ee07cdff24141347a","sha512":"28e65e6d2ba05247b5d9942b140e16429677aea34a2cbd025503b43009d504f051446ac1eb628e76f0e797e07dfb528b125fdb377cb75d2c961c568ab33877ec","ssdeep":"","tlshash":"7511b50e70845588c225030603d4503a0e339dba7db07b4ebc0f6c1dd640f5619e1f0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.163506Z","times_seen":794,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/tweenmax.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/tweenmax.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41298\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144259,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36174), with CRLF line terminators","md5":"3ebfc60317f7c7439949d5728c2e7905","sha1":"6bdc6e3e92cf447dc3922977d923b2901e36640d","sha256":"db1047e16f9ed072dbc343334fb2dde5f14c486676495bed4e592d75dc73522a","sha512":"dbf9d706a05c8b5215e73702744e075522cd0641e1a9a6566004866681eb6d3e55e5d8cf47829a2c6bb85f9a64d25555efe9b65c8c6614332177753583d142c7","ssdeep":"3072:wAcorGC89zpEosfUfR3Hb9jLYQz3Xk9kqJaR1MfgO4553Njx849GXIFsHtsznbFc:wmGC89zpEosfUfR3Hb2Qz3Xk9kR1Mfth","tlshash":"1fe3c54523d1213e8547f2629d7fcc46b33a8d68a385c85e790c94fc68189748bbeebd","first_seen":"2023-03-10T21:06:35Z","last_seen":"2026-06-08T16:32:30.165976Z","times_seen":934,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:01:54 GMT\r\nexpires: Tue, 09 Feb 2027 20:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 368665\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-04-13T20:47:54.876807Z","times_seen":37896,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:26:15.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 10:26:17 GMT; Max-Age=7200000; path=/; samesite=lax; secure\ncaymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D; expires=Fri, 08-May-2026 10:26:17 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 6882\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap:404.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":33140,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (351), with CRLF, LF line terminators","md5":"e081680491913b41b3e58eb98e04b61b","sha1":"e128ba72d2b8294e7e1be115e5d9c01b9dccba95","sha256":"032d1c1225c4675bb1b9b9ee6960327d6f259fa9c2bf6f39da6bd0a4cce6e763","sha512":"3df5cf50497d732a38fb92aa55e9bc6e96398d695095af21317969255738d376d36cb48f9f5f13c7addaa4504d6e47fc4b1d4db444a0f21c7acb2d14182e2fb9","ssdeep":"768:+SYrblXn+Z6m8MobBsQ52zmCxpd0F/4pbXq1NUDhFT/m:xWlXn+Z6m8RrCxpd0F/4pbXq1NUDhFLm","tlshash":"bae23c2164f2117701a3d4e1aa256f5bafe0e203ca5b4a047abd1feb6fc7d82cd07525","first_seen":"2026-02-13T14:27:25.535427Z","last_seen":"2026-02-14T02:26:41.593634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2626,"timings":{"blocked":1157,"dns":808,"connect":173,"send":0,"wait":308,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21197\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163864,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"d72fb46fdfcc65998d65ce27889e95fd","sha1":"8aa23d660df97231c14b1d247ff2fcbe25c6fc8b","sha256":"ac9e331eebe875842c3e7605970c374521815c4277502bbb1c66dc57aaeb04bf","sha512":"6c297b6d0bf706339fdbde201b8e4281d521991746ec8be2b9d8192662902cecbaf26845340d26eb6fd9ab0260a883286f0a2377e7a8619c714dceba7d7eb3d9","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt0430VUpz600I4fT","tlshash":"38f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.157563Z","times_seen":891,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/why-choose-us/wh-img-4.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-4.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76566\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"ad20b9108d7c8c4ed34ba2566f113085","sha1":"3f90f5b5d8148b0c0e9f1713aeb2cade62fa632a","sha256":"6bdfde425c88941e7ab7768dcf616bcf59bc90d1177dcbcf11a2edb3d1052e38","sha512":"addd313edb714f7021ff17b80b0c37436eb422d51de667d0e329c7cd43a7dbd4ba88ebea97d91e87a57a87effda3e04e942ed635aa2373e847184f8f9f1cafdf","ssdeep":"1536:IMZBuqtQoqyjU8PlyECB88eU5jCtEL80nfAICK:ph39yt8S5AELXYIn","tlshash":"f47302ad9a036e06efb0afa1a55727fd95cf7b9c408374238181f63177548e018b72ad","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.192263Z","times_seen":800,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/why-choose-us/wh-img-5.jpg","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/why-choose-us/wh-img-5.jpg HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67987\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 350x330, components 3","md5":"083d0f173a285cfc0eb53e99897bc5f5","sha1":"d469132a26088e0fcf6145047ab66d62f563dbc9","sha256":"d064673fb05387d838701073bb4a7647c713d341338fa3ee20c42d27b12e09d1","sha512":"77331315e43d22ca8cd1d7f718c1e5c402055bac9b9c987626f8008c4dd61a23dfdf4457e05983ff3618f9dc06297a65309ede467ea5e834c61170671b65e382","ssdeep":"1536:98qroSdUhTMeWoDtKAE5Sfe9WDOimovxvIlzSB/NbiY:9Vrn+hTfWoDtKTs29WDOYv9hN+Y","tlshash":"e663020f56007ceb8aaad24280f545dcf7551ba665b312b4d247beed412973bdf24c0b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.164477Z","times_seen":787,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:18.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 17:24:41 GMT\r\nexpires: Thu, 11 Feb 2027 17:24:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205297\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-08T20:03:32.80265Z","times_seen":54841,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":54,"dns":1,"connect":17,"send":0,"wait":37,"receive":8,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:29.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://firstcitizenssb.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1158\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1158,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"zxx\",null,\"TE_20260211\",null,null,[4,0]]],1871,[[\"1771035979123\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"5CEDC82D-5B1F-4B5A-8846-A25C690D9E9B\\\",[\\\"https://firstcitizenssb.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[],[null,11000000],[null,819000000],[null,819000000],[1,172000000],[null,994000000],null,[1,480000000],[1,480000000],8242,6882,33140]],[\\\"translate:page_load_to_initialized\\\",[1,480000000],[1,898000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1771035989124\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://firstcitizenssb.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sat, 14 Feb 2026 02:26:29 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-08T19:34:28.805149Z","times_seen":556009,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/shape-1.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/shape-1.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1166\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 49, 8-bit colormap, non-interlaced","md5":"3083080a6061f2145dd6034a07f3b466","sha1":"22330aabb755df270ae0abd601bba8ec9546ac4a","sha256":"cedd61e88f5aee5bd98568302612740a234ef7f9039ed5d52f749fdae7b4d8a4","sha512":"6283e9c9df859df0d4e7d4b64530be8c37595649c4c3a5ec14f508c7cb67649786642dbf73cb625d930128a934953015b1b5fc6ff0a79f33d0f9bc523a5e30d1","ssdeep":"","tlshash":"4621938ee55ccce4de10017189a31d950511b56c0c034100fa3b31beecdf08c86d0b6b","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.182627Z","times_seen":795,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-5.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-5.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 452\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 17, 8-bit colormap, non-interlaced","md5":"e3a4eda0513a1b921ff926d9d93d4f76","sha1":"f297d2ba283fb256eeb948e945721f8f53daaf51","sha256":"95b9133d00730f47385e1beac188df6493a3c17d694c6a5d3c808b7c8081dd4a","sha512":"a061bf8205b818f45b57e5cf688cfa9b74921b285a497855c27326009619586d76fdef8763b8f40f8ebefc8c9a67c5385182b681856424dc93d14c56f31b1f60","ssdeep":"","tlshash":"8ff0f8c293d66a2eda540af5cfaaa31ce0b03c4a0e744e0f4c532e0b566010a1a8009a","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.154402Z","times_seen":769,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/images/197582.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/images/197582.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23698\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"905fcb9b1a36f5f816201b4108a4681a","sha1":"1a5913195dbd63eee109041a53f4421e53a088fa","sha256":"6b3af5b3118aa1b73600bd038e97ccd56643d6c076ecda896512f87c3a46fe61","sha512":"15b7e358ec2dd5a3cf524a285529f4cae6cea292ee75126fcbecea154c2103f1677a21c1260f5d3bccbb23f6986d861c1f7fffad88d6289a0a7637eefcdd0b11","ssdeep":"384:F+uZBeEnw+Y9sziZDWm/SWHbE8qTsQpxSMtetCh3mldBEc+y6nR:F+uZnYUiZDWGSW7O/ttJ3md6R","tlshash":"c6b2e1ad42712d32195e5dc57a5fad404dc03dd178f4dce2234ba8887e02be0dc6dea5","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.176375Z","times_seen":875,"resource_available":false,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/form-validator.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1913\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"c4daf2755cb5c35eb40079a0457af6af","sha1":"98813bbfbc7a3b53b68457778cbf073281af1ecb","sha256":"5932ef8c9c2d361a85d8834d47f508dbd305fda081fb646c18f7fbe76839080a","sha512":"428ab339eaee7b3da2ee135ae6e9a99dd7626693027f1eb33a4239486475dcda6bd40f2dfa40fed5d46728813354f874feb0572f6806ea51c523ef6640825051","ssdeep":"96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c9c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-09T06:26:16Z","last_seen":"2026-06-08T16:32:30.173097Z","times_seen":959,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11143\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-06-08T19:38:41.266202Z","times_seen":11855,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/odometer.min.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3453\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-06-08T16:32:30.171545Z","times_seen":2237,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:29.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://firstcitizenssb.com/\r\nOrigin: https://firstcitizenssb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://firstcitizenssb.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 14 Feb 2026 02:26:29 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/remixicon.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/remixicon.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12487\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1f4e764479f95ac22b0b77cf9920d5b","sha1":"c6185202501a6084f83273ad6fe099641f11a8d9","sha256":"3c8d0233a1e66ba081468ad728a3032f70f10a5a5c890b0f9541722cba8a5bc8","sha512":"9cee62ab5c81be3db0750c47cb20030f7f0b2ec6c95638b8a130ea22548b7c01a10f5835ed9091cc74059dae399782f751cbaf15cce47982daa28f258e58bd84","ssdeep":"1536:Fc+QQP3ILxAju/j/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJ3:H3uxF/KPbdwRDn3","tlshash":"3993f2ede64e44c13732c886db74b78a60e9fab6c5815c95f85b500deec76a102c4ebc","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.164955Z","times_seen":801,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/css/odometer.min.css","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 384\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3123), with no line terminators","md5":"6c6b4fd147a0f12f7702bfc0533b1d61","sha1":"ec5d35465e472d207dd16056b477ed5a643119d9","sha256":"de4852787adeccdbf98fbd828daa10e3ff7733dbecd8a94ae9f297e5f907049b","sha512":"30a2e4e97a9763cc8eb7e923a45e1c3e8b676308ab213a2d528d60ec3f974ee46cae763882ad032d37ef132bddd14a094c21d1888a5b87f4315ec2a59d02ce03","ssdeep":"","tlshash":"eb51e2154f91136863367506bac81b60befce9015123e98e731da54bcf43db9e398b0b","first_seen":"2023-04-07T13:32:55Z","last_seen":"2026-06-08T16:32:30.191183Z","times_seen":935,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/usa.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/usa.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1123\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"71f2b9f8290de4e2ef115bbd7e88e606","sha1":"772dd8595caf015645f933ee938df8602afce809","sha256":"2c842607ca094c8e0e7e92951eb9369860ad967fc8a52e664098efb53b78665c","sha512":"8f7621171112c3302a8b6f433b176092b0f45d2f6108875619321acfa6dbc5485fd8f676e3adbc65455410dec1b60afb2ac83699860ca4059a0a451a86f8d805","ssdeep":"","tlshash":"6d21b96ef7e018c1c8db60074ef4357258257c9e8fe0f874b562940fd8b51092a46733","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.152985Z","times_seen":795,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-4.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-4.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 538\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 27, 8-bit colormap, non-interlaced","md5":"aa02aae884cb578bc0a2f1f9bf3f2954","sha1":"ba60f34106249ce0cc7485947434d7d70f411f64","sha256":"141b88a15608b337ef1fe9d476747cad1ce911f92d02c006699c61debfe00ac3","sha512":"caf6a311961b15e9628bb422e93b95131f2194b2f2fbe886de83c753edacd87a19fc243554cdda490889003fb2baa4693efc4ef78dcdee7b11fcad1a157eb2f8","ssdeep":"","tlshash":"67f00e580c70ac36cc969af3f762c03c4901bda5520648033f0c31cb9ee3b908981387","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.184096Z","times_seen":770,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/flag/france.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/flag/france.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 704\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9b5b3d7931b3029b5d87f478c3879a21","sha1":"e31575340bbc26635b43c3e4b48e1efb379c494f","sha256":"d0af89d9567368a223db1b6345148d40e272a3de4c2d6c378c6301ec10864328","sha512":"375b8a5b5eafc62eb88ece2cd5c38d6dc35aabcb1e7adf3a98975c1855b3b7138729716d1aa666e83fe471bb417a38ce384e0484941d085b0ab014770c583412","ssdeep":"","tlshash":"bb01449ee1045851ca15c44e1b9ae861ee1a595fc9b4d0b93c43c41cd403b7c18d1743","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.155072Z","times_seen":790,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/aos.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/aos.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4224\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-06-08T20:01:50.800786Z","times_seen":9629,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Feb 2026 18:56:07 GMT\r\nexpires: Wed, 10 Feb 2027 18:56:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286212\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-08T19:42:52.672665Z","times_seen":69561,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/img/chart-img/chart-1.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/img/chart-img/chart-1.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 470\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 73 x 25, 8-bit colormap, non-interlaced","md5":"b8a8d813b7c568f2b67946e982849db8","sha1":"1eb599fd13d98b754576447d2293fd61e74c8c61","sha256":"5ba5170dfd922182cdf09481c0e70c3694eedcff35a61d6c146dd031a6f5eb92","sha512":"18cbe818a68cf02983b06ab3057bea38152b514ac402ce03a9e7be81b6180b1eb845f0de6176a313aeadc94d9959a24d111cb470939e658b6de231cc13fa1474","ssdeep":"","tlshash":"2af023d6f409ee58b73960674e3acf108572bb9210045d04dd33c13546f734486b7d80","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.169519Z","times_seen":771,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/images/197375.png","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/images/197375.png HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 02:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22668\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b4a241ab7581cec5290118ceddb37bd1","sha1":"0b9925bc2676310d006f67cc2b856f158311569b","sha256":"e74d72b279797f0486c4659a646354c787a55f7c3f062f7ca91d6fc35e097f95","sha512":"1ad0de7fdda06be768174805ab7adc1f1997ef6e84dd0d8f555182036f9b652080fe5e1b3f39539adbae5ba884a2bafbf6827ecb08808a1ed01bdf770daff818","ssdeep":"384:u8qi0vYPlnzH1/XtHktr+wIWdTKEmYYwhZNiWqMP7sriGbV9knwxRMxCxGIT:uo0vgxXtEtr+Vem4PVkuevkIRlPT","tlshash":"1ca2d102e90501c4813ff887a252b6dcd91ffc0d0fe7138aa3b94a6eaa5715fc45d239","first_seen":"2023-11-12T08:26:57Z","last_seen":"2026-06-08T16:32:30.158714Z","times_seen":919,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1054,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firstcitizenssb.com/temp/custom/assets/js/main.js","fqdn":"firstcitizenssb.com","domain":"firstcitizenssb.com","tld":"com"},"ip":{"addr":"139.180.187.142","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:17.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.firstcitizenssb.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 07:41:19 GMT","end":"Wed, 22 Apr 2026 07:41:18 GMT"},"fingerprint":{"sha1":"C9:A0:C9:B6:2E:DA:6E:E5:C6:0C:B5:7B:86:EF:D5:A1:B9:8E:21:0B","sha256":"53:AA:92:2D:1B:44:3B:3B:3E:E3:53:3E:84:3A:50:78:B7:E5:9F:20:6F:6F:41:3C:33:3A:C8:15:ED:56:93:C4"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: firstcitizenssb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd4TDlzTDhibzB4bTlBOXdPN3liRGc9PSIsInZhbHVlIjoiZjVEdmpKK0NtY0dzTW9ScWc2ZG5VNjRnaXlYYWp1RlM1aXhaL1dIMFg0cEc5NkNkR3NNWm5yOERkTGhxcWFxTTBaYkI5Z1ZXTXF6bHVMaTFWOWx6bWl5OWp1NkRSMzZyZTBLUy80LzlRd1RVRWN1bUtSMHJ0UllLMEs0RVY1bVkiLCJtYWMiOiI1OWMwYzQ3YjU1ZmE3YjkwODc5ODZmOTE3OGQ1MmY5ZDNiN2U0MDg4Y2RjZjc5YTg3YjEyMmU1ZTM3ZTg2MTQ2IiwidGFnIjoiIn0%3D; caymontbank_session=eyJpdiI6InQzcitRQzVXd3kyNVlUQWd2MkszNEE9PSIsInZhbHVlIjoiL1BTQlZ5d2V5RVlyei92MitqRjNVcCtLSDM5TGl6ZEZIUGkvRVU3WW91bDJVUHE3M2lTcnUwVVZMZUJpSlBJWnA0czlEcm5DR3c2cXViNlBBV3ZxcE5QUmk3ZHNxeVd0MEQ2N1NYWnpWNU84WTM4aFR2VklINVE0WWlpR2NrVm0iLCJtYWMiOiI0Y2EwMTkxZmM3OTY0YzgyNGE1NzZiYzU1ZDY2NDU2NTBmNDU5M2ZmM2UwZGUxOWE5MzUxMDE1ZDA5ZmMxODdiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Jun 2025 14:51:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1451\r\ndate: Sat, 14 Feb 2026 02:26:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5498,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3752)","md5":"c36261f13ab72adcc6d121b42ecf7527","sha1":"c3797740ed1bcf47c268153320a1d04cec5d014c","sha256":"087aa918d5cd7d8340a2facc168e57245932b0a5f668f6249a45727b7868da1c","sha512":"a61e110a84815d8b4cb3bd2158daad9f9e12a20c95244c7d099b8f714efa5aa4ce48b72d699e4a08e6fdb7712bab17c7521586f52e18d683585df2f4c530c729","ssdeep":"48:YcKnGmRenN89Di9ooisW9ooiEM//PPBlLMeBlLqPBebfH0Yujmwm8Q+03iMbq1x5:YGOZ7W3vTLMyLqk9+0DeLfa+TBdD/","tlshash":"56b1864e712030ab94ef331598df6a44bf3b1910d700e999e2b641797d6890fbcb3a6d","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-06-08T16:32:30.166484Z","times_seen":852,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"firstcitizenssb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firstcitizenssb.com/","date":"2026-02-14T02:26:19.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://firstcitizenssb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:05:46 GMT\r\nexpires: Sat, 13 Feb 2027 07:05:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 69633\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-08T19:51:45.419634Z","times_seen":13402,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}