{"report_id":"75ad5928-ae1c-4b65-ac39-68b17c9aa6fa","version":6,"status":"done","tags":[],"date":"2025-08-09T16:22:32Z","url":{"schema":"https","addr":"www.debank.app","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"www.debank.app/","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"title":"DeBank dot App: premium domain name (Buy now) - debank.app"},"submit":{"url":{"schema":"https","addr":"www.debank.app","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-13T16:22:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.debank.app","ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":2112593,"sent_data":8880,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery.ui.touch-punch.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"700b877cd3ade98ce6cd4be349d81a5c","sha1":"c1c36e6927436231eb20474356b29667c4c648aa","sha256":"000854d782781aff1b16ea5451c1da3d07efadd35ab911ccb7e4b851571a25bd","sha512":"d1b12d2b451235df7a3273b85e11fc8e1bf79f2445d1e2bcee92647baa6461fddc334b83221349cbd96dbb3aa0ca9a08157c37252ba2cb4e2d564e008e965d67","ssdeep":"","tlshash":"6821dd8b5312b46b92b67774f26b0fcf72328a496012c599357fc9c00e3c8be434899c","size":1291,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-03T08:33:17.127936Z","times_seen":12277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"51bde17f17d30525cdbe5a5605faf6a1","sha1":"63ab725cc6c2a14df6f4be53c4ec54e3fcb8ae3c","sha256":"5c46f50d71e7bb2ad49b06300ce01753bfc7e2cfdec7b9a1747e445d1ff9792a","sha512":"59ddb5e52b13bcbd69490280d14cb6745e27f2919459a897dd4bf16c70e5d51665de6bd3d2f67451747526b447abe4371c03b10da28803424b5451411ed162f8","ssdeep":"","tlshash":"3490026017c58700d9003c14181c0304ec4ce420f084d648120090b0114e34234cf0c7","size":53,"data":"","first_seen":"2025-08-09T16:22:35.889396Z","last_seen":"2026-07-20T15:24:20.160271Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery-ui.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4888d398fbe13c4d93f4ff426e900fa","sha1":"616588f1280508fb27ac36b3a4a5b9360645d8fe","sha256":"15bd333f88c4dc91eabbe20107d624b4b7128c8d5973a2766fa8138c1d0ba683","sha512":"325132bb04fa5644571318e3f0274128d81df9ed87f9a61938251a0abb7d29193a3256433acf75575c8adb6af09bc68222c6f911cd5eb8bf1fd20e7c44a4ff3e","ssdeep":"3072:PsuPSaSvN5zbKD1WutlUU89W6cXyNruz1kWqOMFW56wlGFqJds1E:12alpuhsMAr+cdD","tlshash":"1934f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":252117,"data":"","first_seen":"2024-10-11T08:45:10.367383Z","last_seen":"2026-07-27T04:30:43.085532Z","times_seen":446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery-3.7.1.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T08:50:06.843402Z","times_seen":183607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/script.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6077d4d7142d0809074971b62c56a5f8","sha1":"89faf7929261bf1603bdb1bde7671a1b6a1d2cd8","sha256":"297206dc0deee01ae0fa6d8017ad32c1e688d20aed8f0bfba6315618bf62bf45","sha512":"00f38d78d1ea93bf9285dc6e4b5f2bff0e2357f8b8d45da9d33f763ec93e281a89a9a3002bfa3df152e356d92269b71e88236e2441823ee0443b300582242e05","ssdeep":"192:AxGGNq/T4UuHNdrRvb7Uk0sGAUTTlTKEWgN7lEqPh4keWP9f3yg/FjP0jUajq:U7qbWvb7MAkTKEW+hZ4keWPJ7/FQjljq","tlshash":"6662f84df580624903fb75a1202f6506c2f23aaaed44c46df0e580e60ebdf5a2573b7c","size":15481,"data":"","first_seen":"2025-08-04T09:54:07.194786Z","last_seen":"2025-11-23T00:10:33.353552Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery-ui.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /script/jquery/jquery-ui.min.js HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 29 Sep 2024 21:49:44 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":252117,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64400)","md5":"f4888d398fbe13c4d93f4ff426e900fa","sha1":"616588f1280508fb27ac36b3a4a5b9360645d8fe","sha256":"15bd333f88c4dc91eabbe20107d624b4b7128c8d5973a2766fa8138c1d0ba683","sha512":"325132bb04fa5644571318e3f0274128d81df9ed87f9a61938251a0abb7d29193a3256433acf75575c8adb6af09bc68222c6f911cd5eb8bf1fd20e7c44a4ff3e","ssdeep":"3072:PsuPSaSvN5zbKD1WutlUU89W6cXyNruz1kWqOMFW56wlGFqJds1E:12alpuhsMAr+cdD","tlshash":"1934f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2024-10-11T08:45:10.367383Z","last_seen":"2026-07-27T04:30:43.085532Z","times_seen":446,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":62,"dns":0,"connect":20,"send":0,"wait":29,"receive":43,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/bold.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/bold.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 22 Nov 2015 19:30:35 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 96640\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":96640,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"62d4d7d369292a9bf23762465ec6d704","sha1":"411bff1d3b8f0144f1685c94a21156a53848d5a6","sha256":"fa617e6195b48622cd13742f0a33f41bd0a3f8b5689424c90f6cba97d4679644","sha512":"17df3b2691859204761900db8af6c879153bba41b00c7e54ed7571c9f6dc7a9cc90abf4b769add4c729a6bd75962271bd99848d7bbca65f6f3b4d1e555c9e453","ssdeep":"1536:ki8qxBBvzDL3Vuxr6ZxnHTlu5RxFjb7DO+i149raBLUJo/dMzi6MXCQ79F:ki8qHBT3kr6ZxnHTlujxFX7agBaBLwoH","tlshash":"fc939d14f333bb88ce8a42364d76c3387365b16c8de9f261f498ac116fc93a518ed995","first_seen":"2023-04-08T13:17:12Z","last_seen":"2026-07-31T07:20:27.238431Z","times_seen":2009,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery-3.7.1.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /script/jquery/jquery-3.7.1.min.js HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 29 Sep 2024 21:11:08 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 30362\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T08:50:06.843402Z","times_seen":183607,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":58,"dns":1,"connect":19,"send":0,"wait":24,"receive":20,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/ProximaNova-Extrabld-ge.woff2","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/ProximaNova-Extrabld-ge.woff2 HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 00:07:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 22060\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22060,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22060, version 1.0","md5":"b5db25960801a297056378cfffed4899","sha1":"ca9fd16fb183e8a7c382d4a01beff152c0f786d1","sha256":"4dc464153fd30cb4372454b0a87f6cd6be63a040132c8c571079ca5d8f7e683a","sha512":"8d7ba548382df9a129cda604634f66ccd8558ea7305d1f6b6a8379b27e7d22cb0e15d921ebe8ec524134993edb3c006df05b4bc9f688a13bc990a19c4d53d6bd","ssdeep":"384:41tq/0LX1YI7WeSXAw/o3S09gfr0u+ceUtCZDtb00WGqIKH6KSOoVwoKyQJ:OtbNCey/oPs+ceiCZDtb7Vq0N/VwoL+","tlshash":"dba2d0038ee8473eda919ab5f6c03185418975c37b34ae34bf5e2b33d4996082fa5626","first_seen":"2025-08-04T09:54:07.207861Z","last_seen":"2026-07-20T15:24:20.125024Z","times_seen":38,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/roboto/Roboto-Regular.ttf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/roboto/Roboto-Regular.ttf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 May 2024 10:36:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 145348\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":145348,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GPOS\", 27 names, Macintosh, Font data copyright Google 2012RobotoRegularGoogle:Roboto Regular:2013Roboto RegularVersion 1.10","md5":"54a91b0619ccf9373d525109268219dc","sha1":"1d1d41fcadc571decb6444211b7993b99ce926e2","sha256":"b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f","sha512":"7f79ff3b42a672371814f42814aa5646328b1a314691d30ce09ffdc7a322adcb1af66625274f7fac024ca2f22a42b625001735711c430faef6e077e1f1d24887","ssdeep":"3072:ENAluNu8V5ZftwYlLzEeNgHS2pOpdO4WqLpMaSZFKVet:ENAH8XZuadpZuFw+","tlshash":"50e3e742d282f759ca86b9703d3dc3bf1d39e86a7c99751370e4af2190c9a458c297bc","first_seen":"2023-04-05T06:06:24Z","last_seen":"2026-08-03T07:38:04.179145Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/light.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/light.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 26 Jun 2020 21:55:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 166980\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":166980,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"530b8757f86e7fe95a6ae1d1dbe049f7","sha1":"c54c3850111c406b3dccf465993cf84987df23cf","sha256":"4202fb8db913c4ac924900f8f264f89a091c1ad9dbf5bc03f27aeb6cd3513ea2","sha512":"4528ba99ad8aa5ccae1b9ca69d94909581f2b96858df947eecf6bed43cfe23e4d941938287a9c91c66902b6756ea07a3645d3eaf8364181f7da45da162db60ae","ssdeep":"3072:8CtB7uu0iDbhewRpf4MDGr823+LBd5e9JJcq9:88B7uu0iDbVpf4MDGI23EBd5aH9","tlshash":"43f38d117115af08c232be3b6d72c3b86e6ff6286d5afbc0e487975a68d4b1084c5b4d","first_seen":"2025-08-04T09:54:07.19087Z","last_seen":"2026-07-20T15:24:20.125528Z","times_seen":38,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-09T16:22:09.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:09 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: quo=198d3851aba0b6a911f5bd4c30306048; path=/; domain=www.debank.app\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":64179,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19018), with CRLF, LF line terminators","md5":"dd074367b24e640e6d4b89d5d8eef5db","sha1":"927e13cca7d2de99dc0a589949d0aef60242c280","sha256":"c72de020abcbdb021056eda69cbcfdc3b529974a3f49f0730afd86abe9ff8265","sha512":"990176e95e2a9b1816e2509ce38ec8210bac30fc2c7aa86053f7f89fd74e2791004919fe0f451f3664d4a3f3dcfcecc41f7115fcfdec67ef482bda859bb5c682","ssdeep":"1536:Dn7rt8EyhkEtsm1hNl7dIuEigv8AJosIwshha68HyHi:/xRyPsm1hNl48C4l8H7","tlshash":"d1533c37a657ece547a6164081253f562c9848bbf7f8c098ffda05635cd88a2df3d0a8","first_seen":"2025-08-09T16:22:35.880923Z","last_seen":"2025-08-09T16:22:35.880923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":195,"dns":148,"connect":22,"send":0,"wait":130,"receive":42,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/jquery/jquery.ui.touch-punch.min.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /script/jquery/jquery.ui.touch-punch.min.js HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 02 Oct 2024 18:34:39 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 597\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1291,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1090)","md5":"700b877cd3ade98ce6cd4be349d81a5c","sha1":"c1c36e6927436231eb20474356b29667c4c648aa","sha256":"000854d782781aff1b16ea5451c1da3d07efadd35ab911ccb7e4b851571a25bd","sha512":"d1b12d2b451235df7a3273b85e11fc8e1bf79f2445d1e2bcee92647baa6461fddc334b83221349cbd96dbb3aa0ca9a08157c37252ba2cb4e2d564e008e965d67","ssdeep":"","tlshash":"6821dd8b5312b46b92b67774f26b0fcf72328a496012c599357fc9c00e3c8be434899c","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-03T08:33:17.127936Z","times_seen":12277,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":59,"dns":1,"connect":25,"send":0,"wait":23,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/regular.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/regular.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 01 May 2012 22:35:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 94668\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":94668,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"410504d49238e955ba7dc23a7f963021","sha1":"28d04eb938c05b5158a69a709682d4f0517a59ab","sha256":"36b59421bdc34fd9869a7541c47d5f157ff19eb183032efff759c4d5be5d9cae","sha512":"66364693910e72394b9e8c8711d72a0ed82d58d5d8fbb0d2200fc9ba0bdf07601b8128a0560b30e1b6bf8a567099e68690641b99e6b5cce27c64269766b55735","ssdeep":"1536:GG8kxBbvzDT28c6N2ABxlZ4KC+F+nET1HUB9hXsx68VQx6M179F:GG8kHbr06VJdFYEZUPBsxfux979F","tlshash":"b6939e5633a7e74cea6269371a959b3c3725f04f1e26f156f0c9cf8468c12281dec6d8","first_seen":"2023-04-08T13:17:12Z","last_seen":"2026-07-29T15:19:17.780242Z","times_seen":3256,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/img/bg/vr2-1920.jpg","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /img/bg/vr2-1920.jpg HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 May 2024 10:21:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 310283\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":310283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, xresolution=2170, yresolution=2178, resolutionunit=2], baseline, precision 8, 1920x1080, components 3","md5":"6584166b56d172e397f53c187b817c77","sha1":"cef96fc86369c4372216bf3f89e5f8fa3dbcffbd","sha256":"b9a0cc9051009f7e36a770660e48b25b6333e70017896bd44cf33bc4131d51da","sha512":"eeaa9801a4c8577c633b0eace3d5d0d793fb40ace214cb65f0e14bf3e1cc0c1becc0d092a9f22a482265b660170035628c9610b12287872f471bfe2ff3dd9f75","ssdeep":"6144:IBhKSZ5oL9oTfmWPzba5BKZeHDXFcUvxRza5017B10fQLQZTK5S7:IDKo+L9o7Ri5IwXLxh13NLQZaO","tlshash":"aa6423e31cb11296df4a9fb1298d971da2430209e1861b1d759f8fe6df8c2f89f3a101","first_seen":"2025-08-09T16:22:35.882972Z","last_seen":"2025-11-23T00:10:33.354303Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/roboto/Roboto-Bold.ttf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/roboto/Roboto-Bold.ttf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 May 2024 10:36:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 135820\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/ttf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":135820,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GPOS\", 27 names, Macintosh, Font data copyright Google 2012RobotoBoldGoogle:Roboto Bold:2013Roboto BoldVersion 1.100141; 201","md5":"afa7a91dadd77b23634a0fdf18c148f3","sha1":"6cbb57ba2355cf442e06899898ff5af55867103e","sha256":"9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70","sha512":"84d123b67505522c256f4ff79c3822eabe2d63036023896e9854298ff39e050bef7894f6320ccf950592015760354683c4dbd19aa203d433a04a5d6bb28e8115","ssdeep":"3072:N+peczeYnL1aPZroinhTPaM+1ogRte9vd1RNmVLOF:eecd+hXX0a","tlshash":"99d3e542e343b75ac6c3b9747e3de7fe1d34d8663809651a70d88f219086592ac28fbd","first_seen":"2023-04-05T06:06:23Z","last_seen":"2026-07-31T10:58:07.364658Z","times_seen":693,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/sourcesanspro/SourceSansPro-Regular.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/sourcesanspro/SourceSansPro-Regular.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 May 2024 10:36:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 229588\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":229588,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"5e1d162e634a102d7da8db597825a764","sha1":"7e37a91960863a58af44a34e0c4fed7f5e376d04","sha256":"6b096b47206d8f78a2c49af2f2ae46b35d93b0e3cf105a9febef59144aa2eae2","sha512":"0b198fa81f7aad78bb591403723ac270b3b99143386f39725dc3bbdb93696aecacff23fcba2a9b50c37f3dd7f115d9fb98c3e05fa4dc6098725278dbb960dc45","ssdeep":"3072:xZEqxCdwvyeiL0DvUCLWni+5Yl2w4odgT0dqPjsHWcts5kCNyVnkwhX4rISTap6x:xO7dQyeiLevUCuYsu4Eel5kMG34lawx","tlshash":"ba24c062b311530ce482ad311febd33177a37cd49da6ca48f337b644a6a81b61e593d8","first_seen":"2023-05-09T23:56:20Z","last_seen":"2026-08-03T01:07:27.028702Z","times_seen":221,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":350,"dns":2,"connect":21,"send":0,"wait":23,"receive":92,"ssl":330},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/ScOsfBold.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/ScOsfBold.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 22 Nov 2015 19:38:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21532\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21532,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"ea4cea397ad5c09f66f1ef2fae40ac63","sha1":"4cdd050a5ad857d53a37e040ee324df51246db3a","sha256":"399a2cdd13581f009dbcc84e1b97bb640ad2798af257dd816d593ecd8c48ca19","sha512":"b1672cd37900021491800566d940bf80a9dcdec262fe0f3b1e425f2001a6340cdbbbf5ff628b995323db47917e5b9b32a85d827de1a7eba59728b81677a233bb","ssdeep":"384:AwCVktazLHK/cGqCr6Bv/6QTiUvdp2rhtBVtEQkF4+f2YT3EWOPp:pMk0LHOcBRBvxeUvd4Pt6F4+FEW2","tlshash":"45a29e21b22b736df342c77e5899d7396331ba401e3f63b9b21c56a10e813142e7679e","first_seen":"2023-05-30T02:49:34Z","last_seen":"2026-07-20T15:24:20.119486Z","times_seen":42,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/util/fonts/proxima/semibold.otf","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /util/fonts/proxima/semibold.otf HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/style/style.css\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 01 May 2012 22:35:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 91904\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":91904,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"6a386899746222073dd64c5f74d1a69d","sha1":"74a699b9dd3f05a8e4d21648bc60ef75ed791bd4","sha256":"388be1fb84d1608325ba870797519fe52ad081852a47c66aef5e90eeaf2c425d","sha512":"5ebdbc0b8f5343eafc6d67258dcc3b73f849c1d365c9e36b00cd59f4d2a8f379716553977e10e7073ba3b753a12408183ee67ab3137d7560f41429c147104f39","ssdeep":"1536:TMF81xBKvzD73rT65GtuMsf9/x05iQpCFtYjXIJiUGLYJgR6M/79F:YF81HKnT68sy0JiUGLYJ4n79F","tlshash":"7b93bf153723ebcdca5a96367aa8c3783b16f0dc8c58f151fd0c5d7150c8ba41ace6aa","first_seen":"2023-05-15T04:10:05Z","last_seen":"2026-07-29T06:34:00.545493Z","times_seen":778,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/style/style.css","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /style/style.css HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 24 Jun 2025 14:02:42 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 45716\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":356309,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with CRLF line terminators","md5":"bbf69164934ad300fccfb548a230b920","sha1":"61163defe69890b68aeb17a376b82512dfc5dcae","sha256":"ad8289643c053e51598e579446f74061bf3cb0c47eaf110f493ab6e8f90f5fb8","sha512":"928c56804fa7f2be569ab062d185a7da139a25f574b7578c91fafaa50122a7802a9c8b8e22bc7067acdbe773dd61520cf7c894e5f042c3f8a5af13490e38ae61","ssdeep":"6144:dpk7Z52schg0pdMZgeT7CU5vZVyg/G3s88JwuDLyiFvSH1sUhfvoaVBez2rZ09PG:vB","tlshash":"f2741f149a83110f764b89ae38379b591f6e4440e20a9b7d35fe34e4becd09fd0767a8","first_seen":"2025-08-04T09:54:07.214599Z","last_seen":"2025-08-17T19:20:08.71952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/script/script.js","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /script/script.js HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 23 Jun 2025 20:34:48 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5168\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15480)","md5":"6077d4d7142d0809074971b62c56a5f8","sha1":"89faf7929261bf1603bdb1bde7671a1b6a1d2cd8","sha256":"297206dc0deee01ae0fa6d8017ad32c1e688d20aed8f0bfba6315618bf62bf45","sha512":"00f38d78d1ea93bf9285dc6e4b5f2bff0e2357f8b8d45da9d33f763ec93e281a89a9a3002bfa3df152e356d92269b71e88236e2441823ee0443b300582242e05","ssdeep":"192:AxGGNq/T4UuHNdrRvb7Uk0sGAUTTlTKEWgN7lEqPh4keWP9f3yg/FjP0jUajq:U7qbWvb7MAkTKEW+hZ4keWPJ7/FQjljq","tlshash":"6662f84df580624903fb75a1202f6506c2f23aaaed44c46df0e580e60ebdf5a2573b7c","first_seen":"2025-08-04T09:54:07.194786Z","last_seen":"2025-11-23T00:10:33.353552Z","times_seen":11,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":58,"dns":1,"connect":24,"send":0,"wait":22,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.debank.app/img/favicon.png","fqdn":"www.debank.app","domain":"debank.app","tld":"app"},"ip":{"addr":"165.22.123.139","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.debank.app/","date":"2025-08-09T16:22:10.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"debank.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 16:59:57 GMT","end":"Sun, 19 Oct 2025 16:59:56 GMT"},"fingerprint":{"sha1":"7D:61:D0:45:16:9D:73:73:C3:69:7A:59:96:86:59:23:8E:71:DA:87","sha256":"BC:78:3A:08:5B:F7:DA:13:AA:7B:96:DD:F4:54:C3:65:0A:F9:A8:23:DD:43:D9:DA:D6:B6:32:8C:BD:3C:6D:2A"}}},"request":{"raw":"GET /img/favicon.png HTTP/1.1\r\nHost: www.debank.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.debank.app/\r\nCookie: quo=198d3851aba0b6a911f5bd4c30306048\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 09 Aug 2025 16:22:10 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 May 2024 10:19:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16321\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6bbbca95b8dcdedbcbe794df16f8b88a","sha1":"f9a9c2dd66f33eddea037ef4af449d9b501c4dda","sha256":"30e8b908eff58d0754231b77d6b9d7c7f1163bd0b05e0207df59e65a6601786e","sha512":"6d0ca22e9d71b7e90017f532d91a24a105c57d8492b7ea62f6b3dd38b7cc9e73584ec41f90b41d5bcbf4b4beec1c95d10d030a6fecf8ec05f56acadba4d67c34","ssdeep":"384:V/oOjs/dW//35WSvZ/nP2Zt/EokY0Yu6jr3VAhVnL2:e7o3pWSJstEokYXb9+VL2","tlshash":"2d728d978019fc6a9aa5fd36e4328e428ed900267bb99ad8533f1c83a4d94c40f53c9d","first_seen":"2023-05-30T02:49:34Z","last_seen":"2026-07-20T15:24:20.120052Z","times_seen":42,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"www.debank.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}