{"report_id":"7b506cda-6817-4b64-a504-600e27ae8f7c","version":0,"status":"done","tags":[],"date":"2026-08-20T13:32:49Z","url":{"schema":"http","addr":"link-novobanco.com/","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"link-novobanco.com/","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"title":"novobanco.pt/","dom":{"size":11204,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1018)","md5":"4d6050056ad329fa8d8445d283df625f","sha1":"3b0a7898d4151d17bf1668752eeb49f9beb583eb","sha256":"54df975c9ee1721e1c9fd19532abf37252fe30917c5ec62005a5a5c7deef5aab","sha512":"ca6584c6d95cfa5394b8cfeab0bb4334f594c8967f26ea771813acf36b84fd826db1e72d9d0c8b3afdd6b202b240af7808cde6395a8ed127fa18b630a2e30622","ssdeep":"96:mr3B+F0iRPvjkaH/LjNwhTAKTsbywgAglAIiO1vvSQfY8oHiP5dfryraCzP:mr3BKET/yywyZfK8IaCzP","tlshash":"6932c561e5e81973c1a342a08fa7a2063b55a21bd604dc0c797c86d45f8ee9fcd6be1c","dom_hash":"domhash22cd59f272aac662884bd18e7f1a9634","first_seen":"2026-08-20T12:48:11.701863Z","last_seen":"2026-08-20T13:32:49.580983Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"link-novobanco.com/","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T13:32:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"link-novobanco.com","ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-08-20T12:48:05.637284Z","last_seen":"2026-08-20T12:48:05.637284Z","alert_count":52,"request_count":13,"received_data":267098,"sent_data":6475,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"link-novobanco.com/sources/jquery.min.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-20T15:15:47.36084Z","times_seen":499182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/sources/jquery.mask.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"219d169a80568884a3d6baab3e5e7def","sha1":"61d00104de8c972c820cd9b527d8e2edb30e5c4a","sha256":"cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a","sha512":"90da5426fce80e290e48ebcfed50a9b93633abf0d0e34f6fe83bbe6cdf7a440ef486f0e57cc71f6ca04cedf89dea6a581c5a80d3c503a12c534202d163116597","ssdeep":"384:K2Pmngz+rsZSSQCyRjfQFe/he/U/GA2AJ:xOggjfT8uJ","tlshash":"7582400969f321625a6372ae4bef4008b379825354aeed04ba4d53c15f4493c93f7fe9","size":18430,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-20T13:32:49.58958Z","times_seen":1468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/sources/custom.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"56fb7689b0488b4ed20b40180601bbf3","sha1":"a8ace40848b93301e891e19661b33b62976a735a","sha256":"d0ad69b0f8c8dfa54e3bf43f45231bc12b049044b4e40afa359ca0a16c3ac950","sha512":"769566325968c5b73372b7a76d558b916d8f75a1a3ce4d1b764218edd093ef3bc1a53d28d54fc0c7fd9301a303c179d1410fd32df6ed4d8e560fff4410dfde2e","ssdeep":"","tlshash":"4001280cb388585992322b396f7b1399fc7085531186d259b49cd6a16f70d1184ffde6","size":762,"data":"","first_seen":"2023-03-08T09:33:40Z","last_seen":"2026-08-20T13:32:49.59799Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a3a46c4e8d0e826aaf7a944ef3f9ae2","sha1":"b446d2378de075b42b70073475d394fdc4d8e9d2","sha256":"a68e4e964045ecb3fb64df57b1a2d0152cb608a674c22ade802a94cbe7f579ec","sha512":"e91581f99aae23b910312f6dc506c58489d79e69660f5c3dd84e6d0415c01099c82c1b8829a21a778e8048a9a42d17d964987ef7d2fc6f35d62337a217ed09f5","ssdeep":"48:2NfY8oHiP5dfaqZLsoOSQVGUas/vx4pqV+:uY8oHiP5dfryraCzA","tlshash":"22a1a78af459158792b372740ebb52102a32205f4540ec183e5cd6d0af2d7bfcaa7b5d","size":5025,"data":"","first_seen":"2026-08-20T12:48:11.73715Z","last_seen":"2026-08-20T13:32:49.598708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"link-novobanco.com/assets/img/circle-fail.png","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.909Z","timestamp":1787232732909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/img/circle-fail.png HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 540\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:12 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:14 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":540,"size_decoded":869,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"b33eb714cba9f650bb15ddf15884367d","sha1":"d13a759cc6305a0cf419d8cb6f1defccd650e609","sha256":"4920bef482e83c71d05763a004e64e33142da23a927aa554f384d1814d34d86e","sha512":"f31321881621d54ddc7529d64e9fe525f17a6c748dcf21ab069213de9b1d4b3d281f17a60ce30c007f0d4ac4bf00fa9705c8ad4f0a57fb74963b67f5816d8faf","ssdeep":"","tlshash":"d9f0c0e33643d86d2ad68f2d6b1687af86536fc81145885fd7c36ddd23650612138861","first_seen":"2026-08-20T12:48:11.731073Z","last_seen":"2026-08-20T13:32:49.58617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/fonts/NovobancoText-Book.woff","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:13.091Z","timestamp":1787232733091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/fonts/NovobancoText-Book.woff HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/assets/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: font/woff\r\ncontent-length: 32744\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:13 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":32744,"size_decoded":33075,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 32744, version 0.0","md5":"ca34c40f5e76e486e6c9379c0178cadf","sha1":"363334eab16eead006af7eb01ab130e11b53d2ab","sha256":"ceaa2f8cc66bf5aa5e36a7cf28e9618c073db4896d60dfaf82f3b58e0a04b672","sha512":"8c9e973a22defcda37a23464a91449fa3da92e8518433ee0b02128c08b363b3c78bc7b0c0bba0793db7e191ff128bd77aff1100e2d652209b2d2e08ba489069d","ssdeep":"768:cyl2CUBykLqL0w2ASslACySff9Sg84lCnIW/K0w:z6LImodw44nIwi","tlshash":"63e2f237c432db57c110b5b542843b090e6428159b08cdd5b2afc6db1e983e79aaf67f","first_seen":"2023-07-15T14:03:33Z","last_seen":"2026-08-20T13:32:49.588942Z","times_seen":124,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/sources/jquery.mask.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.900Z","timestamp":1787232732900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /sources/jquery.mask.js HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4687\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18430,"size_decoded":4989,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"219d169a80568884a3d6baab3e5e7def","sha1":"61d00104de8c972c820cd9b527d8e2edb30e5c4a","sha256":"cf1f0d954cbbbcb32d170b1ff68c5b082a1086f34f2bbee825ca88b7c9fb213a","sha512":"90da5426fce80e290e48ebcfed50a9b93633abf0d0e34f6fe83bbe6cdf7a440ef486f0e57cc71f6ca04cedf89dea6a581c5a80d3c503a12c534202d163116597","ssdeep":"384:K2Pmngz+rsZSSQCyRjfQFe/he/U/GA2AJ:xOggjfT8uJ","tlshash":"7582400969f321625a6372ae4bef4008b379825354aeed04ba4d53c15f4493c93f7fe9","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-20T13:32:49.58958Z","times_seen":1468,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/img/logo.png","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.905Z","timestamp":1787232732905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1638\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:12 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:14 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1638,"size_decoded":1968,"mime_type":"image/png","magic":"PNG image data, 257 x 40, 8-bit colormap, non-interlaced","md5":"0ec55685ff9f734a2040eb3756e5adc7","sha1":"43310342e04cd000ff90082cdcc5dc840f6aa420","sha256":"3c2cb926599d189e3e232e7286b5dafc151a29dabfa7f824e722cbbe937644ab","sha512":"3e246c430f76f9dd3744aaae45f2d5eb7d6a8b56830863574ba61ee9c3be69e9f1e20aa513c00d293b09eb26a4feb24b93ee2e8a0c161a8530a8a7dc7789877f","ssdeep":"","tlshash":"8531eaadc5018730e56d3f73149e37b547979dc823c1004e2a75fc6409b67f6040a6b6","first_seen":"2026-08-20T12:48:11.729651Z","last_seen":"2026-08-20T13:32:49.590227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/img/Groupe_BPCE.png","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.910Z","timestamp":1787232732910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/img/Groupe_BPCE.png HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 27376\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:13 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27376,"size_decoded":27707,"mime_type":"image/png","magic":"PNG image data, 362 x 128, 8-bit/color RGBA, non-interlaced","md5":"0f3881edb1b8b7f9ed2197ce710de3ff","sha1":"9f497f5b45414e402759f2a84f7e5036c0834d2d","sha256":"a4684a9eb567d83c40009ae3de0bbdaa7c034954703241f441d2c4c366c5d868","sha512":"2d97f3ed840796f2e64d1a0fdccc63ae8a833f4ec64eb2d8146ca69101e0217b15c1b54f69346dbc2cb4a57ff48aad8a478800027008a4845463a586349ba2c8","ssdeep":"768:LILSOMSthg8w+NoHSYNeA6xKKiKTUBl2iK5lglA:0LSOJvg8w+NmSA6xKK6Qi0ilA","tlshash":"ffc2e0f1b503026a12f6576bf4c572dcb9ff47e84ac22e2469131ced499efb465801ca","first_seen":"2026-06-05T02:51:22.753723Z","last_seen":"2026-08-20T13:32:49.591199Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/img/icons.png","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:13.073Z","timestamp":1787232733073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/img/icons.png HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 7688\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:13 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:14 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7688,"size_decoded":8018,"mime_type":"image/png","magic":"PNG image data, 176 x 144, 8-bit/color RGBA, non-interlaced","md5":"61bbf2e4bf9cb6228c390cef7ebd95b9","sha1":"425dc8f528880820aa6e2577ebc1fb6bd0c22cf3","sha256":"b4597411ffacb57b34f0701ee0363eba9d1af6c7f0f3950890d33b0810151b29","sha512":"07b78da863a64515fc1d95992b5a0d0a5635b019e2aed1a6e28379284604c18b26b2c2c26e29866fa616483eec10cbd6535b21fd1abc453003d0d2065e2fc761","ssdeep":"192:9dTGU7VdR4HUOZjRlzPNI6pL5LQufrCcpL:9dT1hTOpTpLdQufFL","tlshash":"60f19e5561216713a38cc90924bbb633ee1d01499de2bb22ac9fe047d5b6393ccd08d7","first_seen":"2024-06-22T19:11:59Z","last_seen":"2026-08-20T13:32:49.592005Z","times_seen":22,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/fonts/NovobancoText-Bold.woff","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:13.088Z","timestamp":1787232733088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/fonts/NovobancoText-Bold.woff HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/assets/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31188\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:13 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31188,"size_decoded":31519,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 31188, version 0.0","md5":"6155b26e71f4811b18737e12f7ee4e1e","sha1":"217792dd171cd90004e8216b3e8fc4d00e7853ab","sha256":"247dc4367f865f503c0310137e4a84a9e3a845720235b4fb0d6eb619a60830c9","sha512":"f5385663c29f8c0412bd3058f9f754495cac51c2898be72044ad38f2dda3171d42bb3fe21135724616a8f85176e8806ce2691b77217cef796f7e1d377dce3d83","ssdeep":"768:63dkEWyBN/gs/wPzj+4ARzQf5GE3fy1GHwyr:0qRA624ARzQf5j3aAQyr","tlshash":"6fe2e15dab21953282663072150f7bd4ca1981f0390da8a1abbe9a47c27fff3bc4f050","first_seen":"2023-07-15T14:03:33Z","last_seen":"2026-08-20T13:32:49.592795Z","times_seen":112,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/fonts/NovobancoText-Light.woff","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:13.093Z","timestamp":1787232733093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/fonts/NovobancoText-Light.woff HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/assets/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: font/woff\r\ncontent-length: 29268\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:13 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29268,"size_decoded":29599,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 29268, version 0.0","md5":"8ed8459462cae4e4b40bf0ad527973d7","sha1":"8d4526053b4961df5c7920f0fd7e369ccc7f126d","sha256":"400ba1e8002e0b8d9de32989904cc8c1a1d6e4c84f196e70e92bf4b4fa1289da","sha512":"80618043f4a19b3ee3e945375afab099edac7f54d0a4f6b6791a0a9dbee40fb320b751f4aab3719966529e15fd1c5243520cea799fa71139d067af70dfcf93a8","ssdeep":"768:k1YwGcUmHVlOTBpAmxVHp5sw369nc9R7Ow:Ht/NpAsrswq9ncyw","tlshash":"37d2f176405d4275ec876c37295293a042f5e3090d9a68e623fb00dab6bb7b51ec3fc8","first_seen":"2023-10-01T01:21:37Z","last_seen":"2026-08-20T13:32:49.593445Z","times_seen":96,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/favicon.ico","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:13.289Z","timestamp":1787232733289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":965,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-20T14:52:18.050708Z","times_seen":151446,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T13:32:12.132Z","timestamp":1787232732132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3252\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":11233,"size_decoded":3495,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1018)","md5":"f8e401378007d0e291d74e986da8af99","sha1":"782ff2085d50b59f6a852244c54f59a9d7480a16","sha256":"a9c4c054a7ac99e6bd4af28556c56f39e1b862616d88c40d3869d45942b617c5","sha512":"d361001939ca15a16ad61ee882a2729227ef31e40de3eba840b9fae2fcec93af58acaf1a26e8c831068b6a8688b827e9bb2c26b544746e937995a9fb8e7b1243","ssdeep":"96:6r3BqF0vUEewW8eQIwhTAKTCbywgAglAIiO1vv9/Y8oHiP5dfryraCzz:6r3BXT/sywyZK8IaCzz","tlshash":"c332b565e5e81973c15342a08fa7a2063f666217d604dc0c797c86d44f8ee9fcd6be1c","first_seen":"2026-08-20T12:48:11.708746Z","last_seen":"2026-08-20T13:32:49.594629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":235,"connect":39,"send":0,"wait":179,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/assets/css/main.css","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.896Z","timestamp":1787232732896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 2543\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 13:32:12 GMT\r\nlast-modified: Mon, 17 Aug 2026 14:51:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11401,"size_decoded":2917,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e65590b8c07c9db1319b8e7d6d958ce1","sha1":"4874231061c648f7642a053173eaa8c1f001ac2e","sha256":"57326aa7235cf745306d0c91ad4f532a02f5eaac4a1edde750bda0b655165653","sha512":"dcc1b02663ebe4d7d0ca58f6a21dabdefe16be4a30b291f233eb06eda4ebfbf9005d18fed3cda332441aec97ef416d64c7b168b825bc955ca886e896ba204ba2","ssdeep":"192:ZRwmtcX1+rOkz5OQfwpncX5aPNqRuzR9XoPnlT992n5CdcB87N+f1jdBAx:BOQfwpncX5aP8Mkx","tlshash":"b5323058c6066042e1339d683bb20766ef9940139b03477dbeeca298cff60699671fdc","first_seen":"2026-08-20T12:48:11.726636Z","last_seen":"2026-08-20T13:32:49.595816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/sources/jquery.min.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.898Z","timestamp":1787232732898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /sources/jquery.min.js HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30267\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":30570,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-20T15:15:47.36084Z","times_seen":499182,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"link-novobanco.com/sources/custom.js","fqdn":"link-novobanco.com","domain":"link-novobanco.com","tld":"com"},"ip":{"addr":"37.77.150.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://link-novobanco.com/","date":"2026-08-20T13:32:12.901Z","timestamp":1787232732901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"link-novobanco.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:02:13 GMT","end":"Sun, 15 Nov 2026 14:02:12 GMT"},"fingerprint":{"sha1":"B6:7C:2E:26:94:A1:4E:37:13:80:F8:49:B8:2B:13:B9:D8:45:08:DC","sha256":"BB:5D:64:3F:41:E9:86:65:F1:FA:62:D4:1D:AC:35:7B:0B:83:05:26:46:05:94:FD:94:F9:4C:E2:1E:C1:1E:B7"}}},"request":{"raw":"GET /sources/custom.js HTTP/1.1\r\nHost: link-novobanco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://link-novobanco.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 20 Aug 2026 13:32:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 340\r\nlast-modified: Mon, 17 Aug 2026 14:51:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-served-by: link-novobanco.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":762,"size_decoded":641,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"56fb7689b0488b4ed20b40180601bbf3","sha1":"a8ace40848b93301e891e19661b33b62976a735a","sha256":"d0ad69b0f8c8dfa54e3bf43f45231bc12b049044b4e40afa359ca0a16c3ac950","sha512":"769566325968c5b73372b7a76d558b916d8f75a1a3ce4d1b764218edd093ef3bc1a53d28d54fc0c7fd9301a303c179d1410fd32df6ed4d8e560fff4410dfde2e","ssdeep":"","tlshash":"4001280cb388585992322b396f7b1399fc7085531186d259b49cd6a16f70d1184ffde6","first_seen":"2023-03-08T09:33:40Z","last_seen":"2026-08-20T13:32:49.59799Z","times_seen":26,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-20","alert":"Phishing Block","trigger":"link-novobanco.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"link-novobanco.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}