{"report_id":"88600bab-c49a-4d0b-9df7-3e496c9b371e","version":6,"status":"done","tags":[],"date":"2026-03-16T12:16:13Z","url":{"schema":"http","addr":"transcorpbank.com","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":0,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"title":"Transcorp Bank | Trusted Family Bank","dom":{"size":116093,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2587)","md5":"cd99b12be02acaff0aa312ac9851ff32","sha1":"dae907bae0d7282d65b5b32dfeb0bceb9f8af184","sha256":"434fca48af9a4773d8d83a8fd4621c0180dadaccbfa1ada5f44a405d95832c6c","sha512":"b3f23afeaae525bc2817088c189f8324985c3a8807ad52ec828f1042e18b5b05db8536126b3a83b641c9e7ba380f943c4e049c6f2c625dbfff21b0baf60b16ee","ssdeep":"3072:+SUXCBDKbmcxxbaUOgSjn9BK4TRAEbEqKDtM3J1nTwNMi4K5nFqWZ5XvWdMYAmFq:+nXHSjn3M","tlshash":"6fb372a06cad643e506e3695b168e758b2b7c312cf055ee073bc726ccf85f845a63398","dom_hash":"domhash4cbdb419a9dd9d8cb4f08b84185a9c69","first_seen":"2026-03-16T12:16:26.228412Z","last_seen":"2026-03-16T12:27:24.465067Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"transcorpbank.com","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":0,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T12:16:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"translate.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-03-16T10:32:28.71191Z","alert_count":0,"request_count":2,"received_data":668,"sent_data":920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":3,"received_data":147465,"sent_data":1674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"transcorpbank.com","ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":321,"request_count":107,"received_data":4444976,"sent_data":53533,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WooCommerce","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Slider Revolution:5.4.1","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":3,"received_data":41930,"sent_data":1419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fredrickbank.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-06-20","domain_rank":0,"first_seen":"2017-07-26T11:07:58Z","last_seen":"2024-01-23T01:24:13Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1552,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9f04f6680994cfa1ba57dd9304c9517","sha1":"4374cb0b65492cc936d2fbb3289494c4b139673f","sha256":"d03951b3669bbca039250dd3ea876df0bacc19c7fa6bae488233f7fbe434b0f8","sha512":"87a35557ee40a03ee60ff5aa6e4a01dfc91e24e3a35f499ad96ebefc3e8a59059b0d56c8c0c9c0035e2bdb015fe1a30bdb4a985d9c3843d3b1f801ebaf7a2bfb","ssdeep":"","tlshash":"8e3120cdb133f87a26fb2a953027b5c094792467f2a5902594c91240cf68e86a433d6e","size":1847,"data":"","first_seen":"2025-06-04T02:59:16.265157Z","last_seen":"2026-05-22T08:43:01.000111Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8610f03fe77640dee8c4cc924e060f12","sha1":"076524186dbbdd4c41afbbd6b260d9e46a095811","sha256":"fc48d1d80ece71a79a7b39877f4104d49d3da6c3665cf6dc203000fb7df4447e","sha512":"10fe149f49675c81bdd7c9d8323e7c5c42ff587028de0783abd1c62cfca8f34142a1cf34260f2c6cf601a507f599bd384c044409350efb83d3eef2326003f62f","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp97:t4J+R3jL5TCOauTwD6FdnCVQNea98Hrm","tlshash":"3193d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97184,"data":"","first_seen":"2023-03-07T01:38:38Z","last_seen":"2026-08-09T22:44:10.031049Z","times_seen":6073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"943f6eb962c25bd965e0f0e5a284fcd0","sha1":"b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9","sha256":"50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea","sha512":"40d551836cb4fdce9c4411fc64cf65ec29854dcc4bae0782f7da1518d552bede6c14ee876ad1f25ffadb4a97efc7e97cb0cba877eca9f9e8cbb3e3fed7d600d2","ssdeep":"","tlshash":"ea31a5c9348568cd068f1221133f1a8ff07c8e49adcde699431de9f17934467861afe1","size":1846,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-10T03:19:46.877604Z","times_seen":7027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/contact-form/assets/js/contact.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a596f1f8bdc2710584c2f6f779a59275","sha1":"d0ccae4e6ce45e16507d8a45f4fbcf50ac5f7b7f","sha256":"60a43929b755475da08043e026f3ba77c65e6d03f22a5a886b8ac0cf3cd2c001","sha512":"13748a03b6279e4297ceaeae34a021414a621297d80c5fabbfdb4abca4ddb51d3ac06c2bfffb9ebc62681e3ae936345f9201c073aa621fa64cc2c3a950e8055c","ssdeep":"","tlshash":"4b312044737961e261b22a1629bf270232b2d97ac5158d91307a18f81e7cf9c2572b3f","size":1803,"data":"","first_seen":"2023-03-10T08:38:33Z","last_seen":"2026-04-17T10:37:48.656461Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/woocommerce_2.3.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d2674f99ced631470d4de78f11b4f8","sha1":"cfccdd11642b5af9173c2a36feceef6017bcbc48","sha256":"c97ff3189f1dd548d63c61720e65dd63336b7a48f3d675f2fb144d3ceafd15f0","sha512":"36a0e68ee72559cd8ad24b9025767e5e91576535569c48e90c6e19669522141e46ccbae17d25fb140e0b2c23f672a9a8ac51938f18224421ed5e5f5c859ccfcc","ssdeep":"","tlshash":"0351ddc971e122259ab77238df1ba61dfe768067b45003513c2c02d51fb859083b4fae","size":2628,"data":"","first_seen":"2025-10-11T10:41:43.838563Z","last_seen":"2026-04-17T10:37:48.692862Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/owl.carousel.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7f535ea24c4c9cf5f01ac9322634f58","sha1":"7b1383e0e4312c46280ddf91931e32f6e9f8de1c","sha256":"b0f20d9d73e83de106d02ab1f37b13aefaac746104a9c03eb604907c23bd435e","sha512":"8c80965bfc46f1d255d857b3c5028f3cefb393379ef2449eb7e531584d6adbb20c24068f9602519b9d71b2ced2740e82ecf6ff8de31c99b61e0f068349577119","ssdeep":"1536:WELorUUOZZ/Afrx0APP+5FkrhKt1+Ky46c+J0BDZg:WrOZZg0+PcFX+Z3clZg","tlshash":"817383c1f36c221b422a31b85e9e63cd723d416ae5115c6fbca9a9d838d146c437efb4","size":79152,"data":"","first_seen":"2023-03-07T01:18:13Z","last_seen":"2026-08-09T13:36:15.816227Z","times_seen":1631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4b495a7dc7db64771070c7f67813615","sha1":"f36b9f296e3fa9eb6d6e18841540129ea95861fd","sha256":"1dfd5afa2f6a618d8b7450ddc586413e1b75499322d6534e01accd990ae66925","sha512":"a4ed50e09dc47921c637c2c4eea51d6a8d91f62683a530a54b8d95418c3cbbcad5d105c4cc929f0fdfeed9288beb84bdc2c8d16201dc1212c6ea5c813046b4ef","ssdeep":"1536:nCnzw4tFco78+3hSrk8chwmbtWd2YMdYQ8Mv3xVgnug1QukBjc7NKimnD+NwAIIS:nCnzXQo7z3hSrk8hmEyncNKJ+yJN","tlshash":"b153ea64ba20347694bb2265d03f461572b15c37eb02c4a4e5e7687c6ff8d89236bf8c","size":63323,"data":"","first_seen":"2023-03-07T12:38:38Z","last_seen":"2026-08-08T00:27:30.818427Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2311e3bb788a7d32e8fc65fdf780af5","sha1":"1feedb3e4bc5320053a3464d690016a31213596d","sha256":"b01c1aa1a9ba6faeb1155b4b8237c5b02d129162f7c1e65c3fe3cdf9977a5dc6","sha512":"8d32aea50f245abdac3ec01649def42de03cd1fe62042f7d2914239e0769240b12669685c4874e385d46867c1bb5c9da5e30396187cb030ecb8f4977f5b213ba","ssdeep":"","tlshash":"49b092f9b4524a3a468e220c713dc3e43c380084a6423400e06c20461270dc24800ea9","size":119,"data":"","first_seen":"2023-03-09T22:10:25Z","last_seen":"2026-05-29T16:57:07.975403Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/translate.google.com/translate_a/element.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d9ea020c49d6bd1c3c2ee049d7f6737","sha1":"6eea1d59b7f835a3346c033e66d23450879f61a3","sha256":"f4def3f2923cd573eba79a03836a9e607880d92c4fbedf50d12128198c9949b5","sha512":"075aadf4b5a5dc07f449409687feb31611707d3317febb911b781e586aeef1cb10b5aebf9992dc485f5046501232138fa38c83f7aae5a1f530ccbb5e115feb4c","ssdeep":"","tlshash":"7d3132027a22ab2841e5c840b3bf9a99f4bab0354c349480a74ed9397dd4ece826dd65","size":1642,"data":"","first_seen":"2026-03-16T12:16:26.358922Z","last_seen":"2026-03-16T12:27:24.516093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"644c3d9618f705d98beccfe07802b0ea","sha1":"10dfb4b21e028e4f2f861d65e6e25c7612af982a","sha256":"ab57cd5b3fb673848d2225db8defde2f543b98bf173dec41b995dc61a9b6cf0f","sha512":"3d295e04d498e99015c671c64922cf9f8bd49fcb9f049d7ccb816359614bb9241d6cf54d70c409f7fb287a2313dac4887f1c8de920c09ea33264445436146722","ssdeep":"","tlshash":"8b51221bf060cd9649b3587ea17ab19523335955b20e8a30a019eca43face471777dcf","size":2569,"data":"","first_seen":"2023-03-07T01:42:19Z","last_seen":"2026-08-07T18:50:54.337814Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/comment-reply.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"56bc2726d829207bfa802f957aac0791","sha1":"5bf5c0a61359d8784c950b059e013aceea0d42f1","sha256":"1b1ca0f15010e0124bd4ca481404643c88f7eda1b276e9554d0ed83fb45b7e30","sha512":"44acf243beccb899c7db8bc006e605ac75bd3f6574b096735fe1e71011e6bb4d36485d23206a36d5522b18ae5053ecf0a332de043093d305e02c683d013041d1","ssdeep":"","tlshash":"ed1112a031ca5c612395d12953bfdb2ab4a19328780806a5c41fa4f47224fdb502ef9c","size":1078,"data":"","first_seen":"2023-03-07T01:43:40Z","last_seen":"2026-08-09T18:27:55.06361Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/essential-grid/public/assets/js/jquery.themepunch.tools.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"01bf3f6a0f9167f5d98fa4de9bbf8180","sha1":"9ed99b732b277edfe145f719b5f181e05701b5d7","sha256":"b870f915ae88b2b25584073dc2c566d6f1860d378fdb90887e169a63eed0f703","sha512":"06a705c43a72086300c3daa09855fa282178cb49602d7fff9bb257dcc19d1cf3446b40a38606e6fc7390dcacd0a3373ea935d46c2404b7d884d281c7b2038fb8","ssdeep":"1536:iQpnayKBPf8nS1ViU/thDzR57ON0IbDQR/gQU3uxjM+7f08+nxvFC8/eL7XdnFIF:iJf8YiU/6zUR/h5v7fYWGeLr85","tlshash":"07a329ca3662701245d622a5517f0643723bdceab4098d2cf548d9dd3e3cc9921bbfba","size":107147,"data":"","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-08-09T21:31:56.179415Z","times_seen":968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd753d146b3642395a98351cc476bc5c","sha1":"69e5b2716b520206bf3fe86812fb707c2ff5acb4","sha256":"956c4f57f653318115fa3f42da0f956130bace163a1644775d7cd43d19659f15","sha512":"69543d17a0e6cb7c53f51822454abe82d061042cde864b4e9ffc3f2968fd58a19b3094f3dd5faa5c1adee36541589b87750042b4e7fd416bb5562383710852ad","ssdeep":"","tlshash":"a041207917746caa31f618a7b49f9b0f3f39850300c9e9318194a494153ede1f1bfe0a","size":2248,"data":"","first_seen":"2026-03-16T12:16:26.377958Z","last_seen":"2026-03-16T12:27:24.573608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery.masonry.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd0eb3406096ff80266e7c9d7d419186","sha1":"0e3709691bf96233766de30e2fd473b84166c5b6","sha256":"c2e606e1fc82ea3a554aad5d0520e25d2677b89a891dc5c49e7ace08fce92e25","sha512":"3caf5308cdbc5f42f1eccf5944e8ca785ac086b85954765c1f40d91bd9cc9f3fe6eb816ad821b534f9ad36395f4b6b5d361bea24eb272e94cad2824f03faaac6","ssdeep":"","tlshash":"2b31ee46a55137a067b372e5703f610f023aa7bc9242d1e8318ec6e289be4056633b36","size":1819,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-08-10T00:29:31.409005Z","times_seen":27474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/internal.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c35f323b88c6f6db4bb6b89dcc9db74","sha1":"d903ace224b8d1a4f23e1670033aa8056a10a9e2","sha256":"2517c6b7d82ee0b002dd1fd08fb6bfb2a32945ad25dd06939ca765615ce63856","sha512":"b4883990bbfdd1c32f6b77673f3d4e943c68c94046646dfd599bb758c56bb67902a247a2eda53a551bf4b18fa3a2170da7db8c78dcaba7e9765614017c156229","ssdeep":"768:QuquLfs53iG9CK3FrsR1njciHjwG2lP5lDvDLsJD:QC7CiG9CK3FrsR1njciHjwGGvDvDot","tlshash":"3c036f09b9f21d62407b703e5bef60c872628017550ad9147d4d72e58fdca6892fafec","size":39382,"data":"","first_seen":"2025-10-28T21:45:53.208394Z","last_seen":"2026-05-19T18:49:03.36003Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/bootstrap/js/bootstrap.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a03d9cca57637f008124916b86b585","sha1":"1dadc506590e60b7869bc86d72fc11bd2ec7e47c","sha256":"8e5884d1be3041eafbab27d898b8e401e0263c5bebaba17c97d82240064a362c","sha512":"2208e34756e1b4c27b0ef3ff5cd4f52254d1a447365dddca22fdc7933e5ee5d0f78a47d446d1bc2ffe3b8f95b5069d9ecb6657ca64193273f6341cc766b3afa9","ssdeep":"768:wNktVCkWDqHsrT7aqjvjxrPbDekfZZFvLlyPBVNdWofA:zWDGm/ekqPTTW0A","tlshash":"ae534f167bb430a14b5b70aa8cdf610c7238951b554bd42838ad97d06f50b38a3abffd","size":65813,"data":"","first_seen":"2023-03-07T18:22:27Z","last_seen":"2026-08-01T16:46:52.338661Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/underscore.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a3a434a1360cc744341e97de9177bc6","sha1":"d110825c3252a677ce8b6fd81cd2eda0201e4e1b","sha256":"4f5b2528815d8b1cd9b68b1a4bb1fe689696f8dcbc2c4a5104343b886ee68828","sha512":"a86a62d78d101aa6e8045ae4966604415a808a34d686ba2e0dcd169fa93ea638652b2926ff336186564136973cb3e0870e725ceeddd23fd8fa40abd8aa6fffd0","ssdeep":"384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOy:kApB5IHtTY5FrX","tlshash":"af7271c839d2f85a97a3b0b5003f009bf23e6e652caca958d195e0e97cb484dc427f5d","size":16410,"data":"","first_seen":"2023-03-07T01:40:25Z","last_seen":"2026-08-09T23:27:52.456472Z","times_seen":1845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"765234021a972dcbdd5ef011a4870b28","sha1":"49c7cef1785f857aaca8d1757ac7aa26041c635d","sha256":"c6361a648d15fdf9cad312750da2568bd07a34a58e2ee1e1cf6b50d878e11a08","sha512":"0bbcd337161b4a139610f22dbc9e1ea724dc0250f6be6b65a70149690345e0a76a1e3e6c4b4fc5ca6c2d5cfbd9f4db80987978b22fcd26c58d6abac4750471d2","ssdeep":"","tlshash":"33f04c27b19226b59afa21f1fcbe27d03507088830d00940b40685593c281df1726b9e","size":562,"data":"","first_seen":"2023-03-07T01:40:24Z","last_seen":"2026-08-07T18:50:54.268702Z","times_seen":806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b1675c90652c93a655028154a3268f1","sha1":"73b1e053f3deeb342d747662a40f37fe7cee2b18","sha256":"31136c1431b10f0170f36e3b2571a49036cfbfbc7a164584d343cd766011e182","sha512":"4782d6f0f084e38b3bb0e1e4c9555d36e0fb04cc8f5ae335c32f633d3dbe02337f53a77b06a4a06938b3f663fbe15c2d1a08ea8257a11683aaef6f1e55c45ad2","ssdeep":"","tlshash":"0af0ac19f14f9d6393f11e8ab7087af2b6c0010726a0c646cfcc9cac0b84a95d14a33a","size":590,"data":"","first_seen":"2026-03-16T12:16:26.379082Z","last_seen":"2026-03-16T12:27:24.575132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/lib/masterslider/masterslider.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0056dd352472d65d7aecae35fbab7364","sha1":"54e72412e1c4eb9f9e2f856688334898828db83b","sha256":"95f67093146b967439bbde1231f47706a7cb9419fdba49cc60217c760dd3a908","sha512":"68b43dde7001ba74f5d368a0fe7fbf2a8f9cdea6a708ea834a6560cbddfb7d53810288234320547038723052e0762e0a17f358d1dcd4a010a7ce7f621c258c29","ssdeep":"1536:WmbarnaNv8gcdGX0cOHycZmYWINV2koBZE:dbaDPcOScZmYW+2koBe","tlshash":"8ac3ea4eb160622141eb91db523f8a4ea372a7155506c12c75b8edcead78c0d70afff8","size":119481,"data":"","first_seen":"2025-11-05T14:56:28.27946Z","last_seen":"2026-05-14T19:09:02.651136Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"07644a2d980255a3f9fc9a948eda5b9c","sha1":"b15f88630db5adccfbc97744afd857b791d88878","sha256":"c65eaaf7dafdc812f124353b4195bfcb1ec8b1cded944fba02e651a2fe1eeeec","sha512":"49df7f5a49fdb9718c9be3bb609cc5074df1e480c657ad4fad3e45b6b80e7196e496bb82761478a45c5ebe106029b780844e4f35a4864ac052167b05bd153eaf","ssdeep":"","tlshash":"a6d0a708518add9362d23ed8211574e2b1e11103e65d8854aaccfc4c0f11d80c90414f","size":225,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-06-05T20:56:03.26341Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/common.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"63298668adb713d8e88a065cacbf7960","sha1":"fcf27d5fb0f5cc5d883dfe4554a655b695f2d773","sha256":"63c2c9dd88dec8355699f4bbe4a237a582ac293c1277de4a6941bf8318954f61","sha512":"dc278bc5dfb816d6a5f78b368fe0461994998a8b630a894ea775b2c5a903ca9500b8d1ea534efcabf240c1b3900a1d51485f6798c3343c270e1d6520065a33e1","ssdeep":"384:EqXp9UowLDHpp/1oppKjNhPZ8u8G5eWLJo5uGb5Pw:EqnUowpp/1oFw","tlshash":"18b2410ab8f62d62047b717e5bef94c06671800b8649e9147e1d33b48f8c768e1b1fad","size":24085,"data":"","first_seen":"2026-03-16T12:16:26.36377Z","last_seen":"2026-05-19T18:49:03.387616Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7337b7a3b979c56d34f35b9a66988106","sha1":"7efa2cc96933624523fa37c0c36eeb97dc348e27","sha256":"8fdeb62c44e2cead243cf71d58f463730dbbda26bc94145df351651a5fcfba60","sha512":"196c9a919d8f077c1fc1fc1057c4da00ce5b3ec6e05649968abbe60564e2b58bffc6b853bbe9f984b519b162b2e8ddc23421e9ef5ab914cc9ef8069863bf1b21","ssdeep":"","tlshash":"319002084098188115a99476625565d29ac20248495458a5159dc5451f5a4408095258","size":48,"data":"","first_seen":"2023-03-08T20:02:40Z","last_seen":"2026-05-07T21:38:30.207574Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","size":10056,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-10T02:20:26.324668Z","times_seen":58594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed2f847604b18321a46593be796e4f9","sha1":"015b44587d6f3b8211096c8da79394f04eed63a9","sha256":"5a7a4e2fc588cb4d7362157106c2748455bc30c987d13fa1c158da70ebb6c1b7","sha512":"51af6edab1acd77bd0076f2d467e6f8a96a9b19a73e275d2cb7c5c352bc378822c96d0c18a8fa33090d934600e9c97fa4d8522c3be4906606beefdf578b2c3d9","ssdeep":"","tlshash":"d141427cb7cd556f06632017c85f2088c91ca97a2d6424d1fe8c847856e4a78d1e72f2","size":2168,"data":"","first_seen":"2026-03-16T12:16:26.381592Z","last_seen":"2026-03-16T12:27:24.578348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.placeholder.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98b1966fc57c809e9384dddbc09d592","sha1":"06d746f5c377a0d0ee72e9ac9f0a802b8aebf99f","sha256":"05438c67cdd2fbfdeeed44eae35e864a03bd13da7bde6e95ea47d0271763ddd2","sha512":"1bb6b99fef777493c4fd842f9c9de7a85d8688519e54585f3867d4945bc917d697bbe5f7b80ea4b1f9a65a832445708ee35160a4120a40ce9c5882b4af1be969","ssdeep":"","tlshash":"8031ba19f585fa9050fed9f020bf0902ba35264291c3458c353a9ac5697dc894372eff","size":1709,"data":"","first_seen":"2023-03-09T22:10:25Z","last_seen":"2026-05-29T16:57:07.867548Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c702ceafc8e24985178a20c032b7723","sha1":"c5229f4849fdbb1eab17007ab8d02da8e8d6eebc","sha256":"f186b1f2ce94cd81a064fa5f279694263d5815afaea10497b0266c64244da39c","sha512":"a4505c324146adedc88865a04af2745779b02c1486c2a6850e9b12739193e6d4c9a5fa011a243a1c766ceb5bb1113f19c385ffae0c7c3cf0f9719ab02616543e","ssdeep":"","tlshash":"f0e06892e35d04295855127914f4a9c97cdc17722d215c69ff1ca9316033f33806fb68","size":396,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-19T06:57:10.827248Z","times_seen":4414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/jquery.tooltipster.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe77b069375d7fb057046ba2ff483e3b","sha1":"ed2a966930372cc431c48e4c1e607020d44a4b52","sha256":"2b9f0822d44b9ea1e07ca786e873141cda60ab75053f77ae2ab5b93bd17d9442","sha512":"ab63315bcb28777ec055053756325171f3cba739717c640d9e161bde350015cbfc2bcc43a8b0d9e8909d7e920dfd6f7acdbc201860a10649691dacf5ce79fbde","ssdeep":"192:l0XS0XTcXVuUxTHmNEJD7uiRcxaIlRYqulfrT1r7mMzdnxpm:SoNTnRaq3BbW","tlshash":"00729346f262332987fbe1f6402f720d413aea311bc34174a515ead16def605a2a7f68","size":17524,"data":"","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T20:13:11.98416Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"21dfaf38832cdbc968ab16fd424c139d","sha1":"7b19198f987ea4ee48ab1eb980dece9b1f5f600a","sha256":"f415fe67784b0cc8ae6d6d9dece3c10739fbdd24857e59a1cac80ed245080795","sha512":"94a9e66e1b6b73e62195ed5295617c9eb89e777819135095ae33cee48984dd7246130d6890314a56f5d91af979e617358337fa47b86c233c328bbf026737bfe0","ssdeep":"","tlshash":"f041cff1f18a203af05fca2d38a45595342c87429ee35f34f627d596ce2a75b7a12701","size":1898,"data":"","first_seen":"2026-03-16T12:16:26.383418Z","last_seen":"2026-03-16T12:27:24.581373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7303f34c96dfe10b959a1f2f112dc33d","sha1":"f3b9488fa42cb96e3788a0cec3f07ebb97488149","sha256":"d4373278097e0cf388a6a353cb3c1e05a5c4dd6037db5feb4ba9f02b87dfbe50","sha512":"d554c61b1e8ba871d40a00c53c8fb9428f88d7f9e646a919473f81fcb29e6e2dd3c1eb6a76e07f87dfdbc9e0ff530420bf3964d05ee700884819f65dee92dd58","ssdeep":"","tlshash":"52611ee0e39c6cabc973055ac12f46d3d07ca43a6927a1e7f16cb165a46d24f03a73a4","size":3277,"data":"","first_seen":"2026-03-16T12:16:26.384409Z","last_seen":"2026-03-16T12:27:24.582712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"366c572e04d160f82886883c1ef5fa42","sha1":"766e3ccbaf9dbb0f40bd4ad8f779ddcaf257c098","sha256":"d94e09ce4941a42d9e0c4f142ffac0418166667acd32801f59dee06b13a9a6dd","sha512":"013b1a1c8dcff5ba2125370e7e9cb74a21a331524d8dbeace4ef83098e054395cffa3a6668744b5fa2b68b367a6495b58687801b11483675ea368326c2250482","ssdeep":"","tlshash":"11f09752e36d00689417017914e4bac8bcdc02731d005c39ff6c9a3851b2f13463bb6c","size":494,"data":"","first_seen":"2026-03-16T12:16:26.385495Z","last_seen":"2026-03-16T12:27:24.584046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a2a8e0b90c25561d7fb1cc9cab42548","sha1":"6f0acd948d109ab96ccc0d5e574a26a2af64b573","sha256":"1955fcf6f207b4ea630022c633db3a72b891a5fd24ce23397ff06aed2d0f3821","sha512":"c91e82c754ef5b184f1eb0d76f8bdb8f962cca4644c4c964c29f2063a610b277f923c9b1f47887b44745e043c34ad1008a75c2b82bf6c45449cdb844fb839940","ssdeep":"","tlshash":"47519c2d22964cedbc02683be1dcf785419c0f13fa8ce146b919a4858fd1e5ec1c636d","size":3060,"data":"","first_seen":"2023-03-08T05:38:08Z","last_seen":"2026-05-23T02:37:06.769341Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"23abce331939da08653ad1ae0e96ab42","sha1":"9d643a7eff4ca07cad0e2ffc4f851ac5178182ae","sha256":"5b3784f77d8eeeff1634593241207b833374d91da614bd64e06c57de1a25f5e7","sha512":"fdec49352c3d4d0a0075fcd6506bf0e7c844b6ea050292e04dfb402151e0a498a6f3e3b26bc00dfc3c6ca25936bce5d4a2616f67ab0721d3711363e429665932","ssdeep":"","tlshash":"6511e129611221f9c4fba7d0f8bd27ac717b6135694d8151b24b52e38e28164adc39e8","size":869,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-04T14:21:49.54369Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/imagesloaded.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c2c0d7e37652e66657c8c8d6376442","sha1":"f26118a43e9999e34bfba542db365f123f6ebad2","sha256":"854d677b850907cd851eac7e3f02f05a1e056f05bd5563199c5d93044ff16840","sha512":"353885b5502c4ae3530d863a47f3df228402f5ba0b76d072d6f662d3d253970343c9230e772e44609eb0ca47a0d664e7f6c134491ca45bb78755727f19066a4d","ssdeep":"192:Jiryv7A3goz0aForCrK7r2zjqwr5s2gc/y66DOP:JiuvMtz0aForCrK7r+Vr5sO/y6B","tlshash":"5bf1608d73967110668bb4b6e22f020fb237a09ae81c841c7698ecf16e75d5c5133f79","size":7994,"data":"","first_seen":"2023-03-07T12:02:27Z","last_seen":"2026-08-09T21:31:56.1778Z","times_seen":1333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/wp-util.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"83118aa939b5832dd4e1cad8b186012c","sha1":"297a768e2b68c8db53d4ac0f6a77396cbc8816a9","sha256":"080cf3de5031b9caac353875e8969fd80a548c9f39fdf4627a8c65abddad8b04","sha512":"1357bf9d3bd3e828e8b844a8be502dd428ab5aaa8c91eca62d9df06f72b292b2c197dd577bc535393455f46facfcb66264ea3314eb0a3f0ca90b686c0b8fc47b","ssdeep":"","tlshash":"9d1139da365aa9f3d1333074d37f031f7131ac2591249da0d09492d0ae74987b1b7a41","size":1046,"data":"","first_seen":"2023-03-07T12:07:48Z","last_seen":"2026-08-06T08:55:43.916777Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.commonlibraries.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60d9f7401667bc8207966c1913c9e62","sha1":"0202cefd91d784a7c8a0211c7186f1710526abc8","sha256":"ead5f454dd1e4f8c8046371db5e5f49777e12117346c60dc6a75e39ed4464dbd","sha512":"4598f816967221b799b1634e958926d7dbca3c04faa285e9374ac8ad930cbc37fbbf2f75b003c31b613828ca866f9ede8014be78182f234159140b600baf42ff","ssdeep":"1536:8KrKy6SH2KWspvM0fCSCK3LtA5btp1dtlAjH1cYT4:wKWsp4jRQH1cYT4","tlshash":"1a630949725171778be721baa62f820e7136d9a7e009c828b87cc5c82f7095c5277fbd","size":67879,"data":"","first_seen":"2025-12-02T01:19:05.358909Z","last_seen":"2026-05-19T18:49:03.379925Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cb796ac99f11a254d9e9f15ce0b9870","sha1":"51bb8503b7fe625b14146193a4f31ac85a3fb738","sha256":"b190352728af320b263b7d46746b52165e46b8ecb82ce2500dff740540bc6f76","sha512":"36b13126d46eb509664f28cfbf044487be7f23365e318ad36478b181b5fe5b6ad4a0b50a974972ff94b6557e5d5f215421b23586511fc5e6edaa92fd6de82951","ssdeep":"","tlshash":"6dc08c43f030080a2886a129c386468c3234840800360d242a40608a38b3f8c030e8a8","size":151,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-08-06T12:35:14.730804Z","times_seen":2371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b2be18696c4dfe620f7b6d0d75a566","sha1":"0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd","sha256":"120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72","sha512":"d6234549918a770a055717c9fd1ff4b162afc7cdb9e72459883bbdb5e04532d7af5295b2f58a6f8a70250efee55ab544fba9595c85001c204516d907937d8c9d","ssdeep":"192:x92sLIzSavikwgpTZlpSjjF1mk3eJ4Nr6SWCxjlRYifT7TMcPvE:x9bEzSa3Z7lMjF1mk3v6wjlRYiff4cP8","tlshash":"9912e96830f3605b90b3b1506dfbe78f73b31638658799c1d0ace42929acd7a3626f15","size":9566,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-10T03:19:46.837879Z","times_seen":7559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/wp-power-stats/wp-power-stats.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b71df52c9b4757157a9af74b7d47818","sha1":"4a0a4b48edc845d43b45cdc811282f9cf778f505","sha256":"a29bba39a85e88f357fe7c0bf92ff9ebf2d68bae93359389fe260c16b9e773ca","sha512":"c5c3b301eb0195fb736f1fa38e961804c41b01238be53923ed4ce3c605117168bec3f23edd2a36887eefbe4edc7cafe4c4e189d334161f6255c307d48597a50b","ssdeep":"","tlshash":"3721796558e3b0c2852b313e9a6b421cb0291157381def36fd0c06d49f56926c1babd9","size":1293,"data":"","first_seen":"2023-03-07T12:42:08Z","last_seen":"2026-06-27T19:45:47.498728Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7ad05249883e2d1a4155a5ed35ff43","sha1":"b476eacda7ee0d53156465b7578904eb6caf626e","sha256":"ff2645fa866c838505a03f4298558aff9b6e863804d12ac8c4eccef6ddcbd2d4","sha512":"f75b6232382bebc2c2cb5a7cdebec010eb75c63a988ac84a47ef4fca66e9f28343f3bb4cb92e31b83a0868c0d7985335cab02700c6a99397987e3ed5c0234f7b","ssdeep":"","tlshash":"1031de4235e10068824e10326bbe9ea6b5364be65a3770446a2efc264cb0dcddb5f978","size":1452,"data":"","first_seen":"2023-03-07T01:43:43Z","last_seen":"2026-05-31T19:49:15.081918Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac434784f6219f105823a9f5710b79e6","sha1":"b704c123d6079cd2d6fcb4ac97adbc0c191b44df","sha256":"80e6f5dd9fa80ea6a2225b11319f2843cf41302bab5bd10feb5d0ae78d17a119","sha512":"97bed1b3e59e6bac6b484bc80d47870255d4add05b7258f92449d41edc03bb11fe1e7154a317f49b9853898e67126f5bf38bdcbe7580bf4696b36a527bca1cb5","ssdeep":"","tlshash":"a201bd09c30c642f007b12b8725cb5cedcb8621623196668ea9cf0d6f3c80d487375a7","size":754,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-06-07T00:01:52.741991Z","times_seen":1405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/yit-testimonial-frontend.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb56455e2ce31b78e8a6aa3180fb7473","sha1":"2b9baf152f890edcde7881a9a3733f4efb6fe6e7","sha256":"5cff303320f91a6775bf17a5bde0a41b09de9f520f37ae65764c2070c7bc0e64","sha512":"4ae987efbcf9429661d0fbbacb44c5945d1c68ca8e2338146b7a042df79a721a2490b975b2de49619f9375bf80bbaca24fd7648a28f153ce6b2aaa52368532c4","ssdeep":"","tlshash":"eb21008834852733053234baaab9fa51e741661f9801629577fd618c6f309287331efa","size":1126,"data":"","first_seen":"2025-10-11T10:41:43.8495Z","last_seen":"2026-04-17T10:37:48.730278Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.scrollbar.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7e8099ab5cec198b32f9e72a319b69f","sha1":"214f34979f84f332d3849fd2bd8dcfbb8dfbf0c6","sha256":"ad06ee18cc65fb35d9f6e65b92d3d14183fb69e8c538e815e55d17b5a0402406","sha512":"fb20f46dbe27839ed4e1efd67db245e9074dadccd2f9b756e586bcaeb8257cb96b2a572d316e4ff11bd458329507d3bed95a4fe3b9f5976e532df2af392231a8","ssdeep":"384:/DSawPuboc+sgFykB5/gijpZjfBtHCnt+njylPiAH+1GYtn9:loc+sgFxBXBcQx9","tlshash":"51d20d4ee9a224a255ff316ecf8b43493272a017a34dd4c4395e9ef84f80b385756b78","size":30235,"data":"","first_seen":"2025-10-28T21:45:53.212778Z","last_seen":"2026-05-19T18:49:03.434779Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bd542e00d64a931539864f5a8758812","sha1":"0114c6ca3fc992b2c5194357d5c9ed101934d848","sha256":"29648a95752c931e96c72c489becfb3832ba28cd11650c7470a3881cf01f9a1e","sha512":"2077430bfb14f798a643318752cb96f82cf1698c37dd4d1a5cde81e5f2f4c0e103cd42068b4d3a5952031b54a90a8d654d50e0f216add23d0cf49632ae4d911b","ssdeep":"","tlshash":"52e07d947e416f455ca00e5d1e717d239b9102925615d5e02ecdd8800f149a0cdf53a2","size":306,"data":"","first_seen":"2026-03-16T12:16:26.403556Z","last_seen":"2026-03-16T12:27:24.588816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/woocommerce.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"66ddcce72dbf48c3d01e68925fd70ba7","sha1":"87f125ab4013757612d3e2f2851cca5ed16de821","sha256":"2d81a59d334af3b814033594907ab85f2d9d718f04ad94ea435b53549d4a1d80","sha512":"b8bfb1a4b035b4714ac38d25191aaf401248db7c6b32f876c1cf44aa83e50e6d405b55ed326655d446f02f07a849840f60293061c8bef3a793113e1968f1d256","ssdeep":"192:hHf1c/j00repItnXk3ZtKP4kGeF0CbgXdc++7ABe3P0jWz61EGuwBQL:le/jFPjGp+Y2L","tlshash":"5ea29589b0b35e6209bb32395d3aa4ccff25802752459b14bcad3af55fbc44443a5f8d","size":22227,"data":"","first_seen":"2026-03-16T12:16:26.370672Z","last_seen":"2026-03-16T12:27:24.552995Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f82b089cf163a5417b3edb4687151f7","sha1":"28436f92ab540ff08b12fdefddc7da67ba0f04f7","sha256":"5ba9af6f12e99663f8f04285ef3d4ffd4cdbca820bccbc2dda9c40f805b5a850","sha512":"d45b8b35fd4abf2616489c4a34fd2e6bc613d2b700832b7b3caf2bb23eab3321cd69963553c559bef98d0511ce387b2e3eb017886bff2c78a19359f25d697a91","ssdeep":"","tlshash":"87c08c0440854d8322e83cd87214345322e11206ba200c022b8cec581e26841cc4424b","size":135,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-08-08T22:18:58.856539Z","times_seen":73661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"55a1e882219a59121e1e69fb90a98fdb","sha1":"092bfdd63cfb1ddcafb0b2b9b627381f9cc68703","sha256":"8b6c27443c96e0447bb92e0f06393597f217152327305f95e8dc656d4d4477cf","sha512":"6f248e83c55c7c959fa7115a291ac1492c3066f2be58f9cfb2a1e83f2caa942d13912ab1fe6b16e051a50411b629e2584956fa9ac398ec974816a4564768b522","ssdeep":"192:9mtXwuPqCzSMntI0ngXNj1fTi72NXtwX6tdQjNrzx57PD2iujPx/OYcNK0pbnDu2:duRJFkNjxTikXtwX67wzx57Ci0Px/OYk","tlshash":"2b322ee571272c573a6f52a7448f540cb135d47c6256c4aa6caadbf3483ce442363b2e","size":11676,"data":"","first_seen":"2026-03-16T12:16:26.247987Z","last_seen":"2026-03-16T12:27:24.484621Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"902b7ca09549975e55e136fb0026df9a","sha1":"ae9b808c87bbbf57b9f3132c41effaaa12af03ff","sha256":"2685c1caf9a3e6616da70c63212ff6d6a6747e4929edf55832ebd18ef7a43ccf","sha512":"67c201aaf9ffd56f648bc230c74b41ebf9a1818d8392e319fa55808d50e46632d4c4de8a6d1727583d41fbaaf4fe06b177fa81b0ebf3c06d9eb8d56de00b4ed5","ssdeep":"","tlshash":"f2119ca6b70baf4cd1fab4ec9102c585b85588b292db10594e03abc8bbc8579901990f","size":895,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-09T21:31:56.067994Z","times_seen":3217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/ywot.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cff797d55e0a3ceaaea2f1b646b79eee","sha1":"5d92beb9676651c2c0741f3be49eb53de233318d","sha256":"ee6367ca049e1a9df6f9694d90bbbe25ac01fbabc54d5e35e9b45136afb82a58","sha512":"f14e9f7a4accb17be2ac995ebe59ac7ccebfd5a1f695339c9c9dc8b7882f2e7520c5b02329de8b8a217852d28d98246c5ba13f4cdd47dc397b2e3564b62232fb","ssdeep":"","tlshash":"49f0e53971f612090977b2c9456fa2183a1ba50761c557e1bd0c1fc10fc8934bab8a1d","size":438,"data":"","first_seen":"2023-06-26T13:14:11Z","last_seen":"2026-07-01T03:37:47.107073Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0d52f9c09f7de8452311036c325fa64","sha1":"6f5b51c81fa22b61a6acae630a40baf4f055622a","sha256":"d2724d4c1a7f21680fd54cb2b4c11cf015797bf6aa694e8d1aa7d316add5b4ec","sha512":"ebcfbd795082b5d6973e48c15ee50b9406576943eeb86fe1bfaa1da3aec445da6e65eafe23c5ba7f066744f6872b0e6bf964230e04c318b73af35883b871335c","ssdeep":"","tlshash":"70c08c0a98d99dc315e83de62114746b32f11222faa00d002b8cfcb81e22e02cd84e4b","size":172,"data":"","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-06-06T21:52:55.112624Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"82a8e26670c36de5ab1ac69e315972b6","sha1":"4ca808093d0e3b09d0819adfcd641114ca52b93a","sha256":"8c96daed134d0a9b73c544a79c166ed16333bf7f1a323d40e176ff7b1b7215b3","sha512":"4a1b977a9ce1ce306516dbeba99b015c01f5cdf3eb7f3ab235fb4504ef4e0bc2c256639b6f0ac2792ce198089335804ed5efd3a6abaf6bafbf8223e90deb5ee5","ssdeep":"","tlshash":"a1c02bf4c0e1484151e09df41f387222d6d1124318165c43238cd0840f5a0cddbc7771","size":137,"data":"","first_seen":"2026-03-16T12:16:26.406134Z","last_seen":"2026-03-16T12:27:24.591567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"db6a2bbe58ed5741a201ec519566fc8c","sha1":"ba68f886a1ec9dabd841f6aedac67896b1d209d5","sha256":"df1de6b92c67d86289d33437a87ec2132b56e64e8bd53e2719ec1b903cd7ed7b","sha512":"600e23d08401e1a82f4200489eaae92c5c7f0d5ccccd22e59f4e51fa21ab91a71c57e3a60ceea51d3b0b623260e85a8a277ca7ade6c34ac7534fbe3eff7b8888","ssdeep":"","tlshash":"19b09241849619a213f166aa31181eb22aa6c3886a08cc02a6adc2624f81a0680ea34a","size":119,"data":"","first_seen":"2023-03-09T22:10:25Z","last_seen":"2026-05-19T18:49:03.474447Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/wp-embed.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a03f97cc479b9f5d7efdaccec31bc17","sha1":"54518be91b7c5d4b139e032d23ffae568cc7e9fd","sha256":"dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0","sha512":"ed651ad04816784b4c14e54b1876498b6ed07f33325fd38aeb250dda0859f20e6f7997ef45439c1da3a6b0784de377258c9459264621caa7d17803458e70c827","ssdeep":"","tlshash":"6a21141a3338143b10db51e3b99d75c7d6f217ee240121d18d78c880fa94fa79966fd5","size":1398,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-09T22:44:09.948335Z","times_seen":4529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/masonry.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5420b6516c14245b504e7240a8310f2c","sha1":"bf6d46e754eca13c3074f002abb124e55ef4c3aa","sha256":"3ca3e467b7d4d6b403aa4619019d9250b11449c8ee9c91c90bcbc9acdd64fea2","sha512":"d072090ba5351427d1cd9113f00494faa967fdea3f6514fa66c5291907f1838b6fac45abd25db1ef66519c0b0d0c39375628438ab3908689d41b704444c27a2d","ssdeep":"768:S9+z0BFXYKby+HvOqvevgOkYtkdEvWBzigMPIW:SgKbbO0IkdEvPgS","tlshash":"d4d2b54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","size":28954,"data":"","first_seen":"2023-03-07T01:11:51Z","last_seen":"2026-08-09T21:31:56.078553Z","times_seen":1693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"af708ff0d42ff8d8543c6bd773fcf535","sha1":"38baeb2a2460523bb2038814c14671939378fee0","sha256":"60e52a19fe23790b163dd2a27b256eda989ec4b90f79b0abe0caedb1d44a0796","sha512":"0c3560eac0bce104fef36d0a83b5805545d285de14274158d7734a9cc130a972609788025441ec9e4761ec51d591617fb4ac5bdb4b5e5614c57d0293218988d3","ssdeep":"384:zvoSaj1haWTpcYrJhhpuDqPHXWExbFYnfOLSEApytwFCDf5Yhrj:zvFaj1haWTp1VhhpuDq/XWEx6naSEWyi","tlshash":"c182c649b95070f652b7363bf13b3f19b1372836944591206056e8387ebde4e222afde","size":19302,"data":"","first_seen":"2023-03-07T01:11:28Z","last_seen":"2026-08-08T12:03:01.706115Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/shortcodes.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdf6bd6874f039a9e13891aa08c73a21","sha1":"5401170319df8d62c1160e1547bcd0f8d6f38956","sha256":"82b8176d707a3fe2376850eab07a2a54282630c8f345b1944b174ed9d4d1324c","sha512":"42a9c87fdc01aa8afde9f2a92a033d9932301febb6d69b01bbff2fd052b35783acb0d525953bd5f335dc09c3e5e9df94f113ee6d49045e1e7c72807ba2254626","ssdeep":"96:QvlamLGySEOoNhEG9HXZjBSkcMxw5Z1iJLS29dIBkc6lUwWyucX:YLGUOoNC0FqigNkc6lUwT/","tlshash":"e702dc5db1a62db5d873313a8e3a80cceb364b1780009701b9adb5b84fbc544a566fce","size":8260,"data":"","first_seen":"2025-10-11T10:41:43.848006Z","last_seen":"2026-04-17T10:37:48.660616Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/essential-grid/public/assets/js/lightbox.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c44a393875498a2f059e6973d0649107","sha1":"55c47d951096307cd6bfac8f7e1bad62ef1f29cf","sha256":"83d4e86971a0102848cd562ef58a9ee1a2bad3b8d98e5860c17a3276793a2ed4","sha512":"5d36e7fa559aae08c984c1a0582378c3e05f9a1756bca83562d17f63081c8ff7936ff321c11ade469a7e1c00303bb7a65fd8e0c6b9feb9e84604827d8ff7e6d0","ssdeep":"768:aaOUkidZZgTnfuRU7n4nCBL8IM1+5BztQoWNmr:7OUkiOuSVBLx8gKQ","tlshash":"7053205a6694253ac0b77339ce5b810cfa33433b934245277ebc81656fb282467b5fe8","size":64375,"data":"","first_seen":"2023-03-07T12:21:21Z","last_seen":"2026-07-31T13:26:20.254254Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3a538fd2a39c22198e72c3b9f498a7","sha1":"c966ebdbd2701a0980a85671126664f3892d4f1e","sha256":"ac233233e7bcaf806041b243578fab081dced8a045d9a82756410da9ea2382a1","sha512":"fb50d60ece94f9447a8deaf22fa3d2422f4b6eaff522833fb311495ff653339896e7bf0393fb12a537b538f9bdb057369cccff99ce38d9449ed1e6d41f510ad9","ssdeep":"","tlshash":"4fb0125c64542f8b61e82ceba168b3ab6ad1235058244c1127c9d5540f12804cd84349","size":96,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T02:57:14.670559Z","times_seen":46722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3fb02f90526fa664994848db387966","sha1":"c81a52e84890c563a53c76fa62f38eb27175dccf","sha256":"14e5b45ae7259f0ae964f80435cdf3869ec8b673e1b70ce3737d5f62131bb468","sha512":"44b16f1575bd1e95cd9ddedb7cf83d4ed99c7941961f1fe33d3168b3ff87581c84dd56b2a60abe4c28090068ef2f889db25700e570a00569afd1348157dcab0b","ssdeep":"","tlshash":"f0e055c4c2b6b413234b28bb21c92a85ba79820c23505061fe4fdac82b238c4d20383f","size":435,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-07-28T23:52:31.718832Z","times_seen":6559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e6a9d9b7bc7cdae0fd6cad1c5bfe46a","sha1":"e5634fbea767a526b916278201fd84f330d2c92b","sha256":"c9476a79769276da9eb0aa7da2d7fbf878303e100806f14352d1f96428b05568","sha512":"779eb2e88c4e0e1415e804753561130554e7f48ec9064a66f6d39662855d158408d6caaa39e69902077b6794b71ecc46d4466af57fb6d7f68da731562b8547c0","ssdeep":"","tlshash":"6cd02b3570858e05a2b059c027283e9151f416635450c4c98b5dc9840fd8fead5c2339","size":261,"data":"","first_seen":"2026-03-16T12:16:26.409643Z","last_seen":"2026-03-16T12:27:24.594625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-woocommerce-social-login/assets/js/frontend.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fa107cdd281c76224d1a17328acaf8b","sha1":"71539bb8f66d621e0829d323d4d561576aa7fa9c","sha256":"429ae5a0c3061df3600247c5e2bae97260a3703073827a38e0ea3e5c2c2f5224","sha512":"b183676f40c1969a6c0c568002e9436acdff49eaa83f434922f10a2ea31ed070fe203b6264c8776f2b269eedd6246302612826bfd593179bc9d5c7cb47a2c64f","ssdeep":"","tlshash":"72d0c2ef3014dde99bf321a99d379a00762b30bb580d660170d47404266c61f823fa96","size":287,"data":"","first_seen":"2023-03-08T00:05:28Z","last_seen":"2026-05-01T11:14:07.504878Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://transcorpbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 111817\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-10T02:46:53.22481Z","times_seen":324024,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":167,"dns":5,"connect":20,"send":0,"wait":21,"receive":7,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32857\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"8610f03fe77640dee8c4cc924e060f12","sha1":"076524186dbbdd4c41afbbd6b260d9e46a095811","sha256":"fc48d1d80ece71a79a7b39877f4104d49d3da6c3665cf6dc203000fb7df4447e","sha512":"10fe149f49675c81bdd7c9d8323e7c5c42ff587028de0783abd1c62cfca8f34142a1cf34260f2c6cf601a507f599bd384c044409350efb83d3eef2326003f62f","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp97:t4J+R3jL5TCOauTwD6FdnCVQNea98Hrm","tlshash":"3193d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:38:38Z","last_seen":"2026-08-09T22:44:10.031049Z","times_seen":6073,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/gtranslate/flags/16/en-us.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/flags/16/en-us.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 488\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"2556bc1917869589e27a684959e62373","sha1":"8f49bcb0f8e5dc2e16c13f177cacfac4844ca423","sha256":"4ac836d19ba59b13f74176339bbb73a752844e528a338bd9340c945d2f2895c5","sha512":"4d16c705fa54c4b7dc27e6a2f1a87ec8a5a1cbbb90e1a19d50fe72350cf742fd880077b87efaec8218dcaf8f0001493d0145d9db8325e5b9a2b5e1ad8fc0f389","ssdeep":"","tlshash":"00f00ed8664146bf901b6c521a159869aeaf0cb449478c4b03dcbcb93c9f61ac5c1101","first_seen":"2023-04-16T17:31:58Z","last_seen":"2026-08-08T01:41:57.835274Z","times_seen":336,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/yit-testimonial-frontend.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/yit-testimonial-frontend.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 455\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cb56455e2ce31b78e8a6aa3180fb7473","sha1":"2b9baf152f890edcde7881a9a3733f4efb6fe6e7","sha256":"5cff303320f91a6775bf17a5bde0a41b09de9f520f37ae65764c2070c7bc0e64","sha512":"4ae987efbcf9429661d0fbbacb44c5945d1c68ca8e2338146b7a042df79a721a2490b975b2de49619f9375bf80bbaca24fd7648a28f153ce6b2aaa52368532c4","ssdeep":"","tlshash":"eb21008834852733053234baaab9fa51e741661f9801629577fd618c6f309287331efa","first_seen":"2025-10-11T10:41:43.8495Z","last_seen":"2026-04-17T10:37:48.730278Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/gtranslate/gtranslate-style24.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/gtranslate-style24.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 242\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"76cf1c2dbc624d728f054d3dffcf7ba1","sha1":"49c0b466a10a98d5de497cdf991381dcb0775a69","sha256":"849bc1d0349b68bcf4bf6d7bb8543354e8e14aa0bfd897d3719b290cde1f4533","sha512":"f9675dac7e1622ae97af569e3a2a97b54820ff8169c23caaca13eff9055c3abf92563eeb408741a1b1ca7bec28a977354b4df6150f634a2e24fb59d8a89d479a","ssdeep":"","tlshash":"d401470022d7472ab10bcd53f8bb167c32260682c4537f7963aa76f8e84a0b99633034","first_seen":"2026-03-16T12:16:26.235438Z","last_seen":"2026-03-16T12:27:24.474782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/jquery.tooltipster.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/jquery.tooltipster.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4639\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17523)","md5":"fe77b069375d7fb057046ba2ff483e3b","sha1":"ed2a966930372cc431c48e4c1e607020d44a4b52","sha256":"2b9f0822d44b9ea1e07ca786e873141cda60ab75053f77ae2ab5b93bd17d9442","sha512":"ab63315bcb28777ec055053756325171f3cba739717c640d9e161bde350015cbfc2bcc43a8b0d9e8909d7e920dfd6f7acdbc201860a10649691dacf5ce79fbde","ssdeep":"192:l0XS0XTcXVuUxTHmNEJD7uiRcxaIlRYqulfrT1r7mMzdnxpm:SoNTnRaq3BbW","tlshash":"00729346f262332987fbe1f6402f720d413aea311bc34174a515ead16def605a2a7f68","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T20:13:11.98416Z","times_seen":173,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/3_2.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/3_2.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 433 x 1, 1-bit colormap, non-interlaced","md5":"2be5c299813a37c71ab277b3ef640f00","sha1":"03e9e92e1bf507d7b779fbf9d39e58f9160aa4d0","sha256":"bf91569368dc9ed3daf8b5b13f969ac878f8949e10359236ec9e07c779ef7c8e","sha512":"89aaafa890b04db3bf5e453622939d474bd470c1ead919319c3675413d261646530a2fc1791b4f87d6dd2e7ec618f0f0463a144346d1b0be0d710bdd9af4e470","ssdeep":"","tlshash":"e3b012e633f04c3b81010a7351044341eb61431811511913403f83fc547310c96c0187","first_seen":"2026-03-16T12:16:26.237934Z","last_seen":"2026-03-16T12:27:24.500963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgmenu1.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgmenu1.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20403\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 453x388, components 3","md5":"e0770d9f883bd6f9b295f2a371f99a92","sha1":"c18863d5d45b745664bd287f94e2d5233d9cd0c3","sha256":"058d23c773a842cb1f923969da14219765591c32b0ef2111d093eb52d6cd2c15","sha512":"9b1a00281e8d53d8000c39a20312aeb33bb10b182f75a36bb9e63ce788e667cc4b77d06ef84fd75904dc799088d18507f3acc03fa24acd7afc3e08c4238d4316","ssdeep":"384:yXXX/Dn5t4XQYCU+2ohlqnHBKHUlZldC8x6gcZZFcE7ripN:Yndt4gdUfojqHB7ZHo+EvmN","tlshash":"de92d03023b1ebe0e0159a71a168637572609f0371bc5eb9767e61cc0c9785c1ee9d9e","first_seen":"2026-03-16T12:16:26.239468Z","last_seen":"2026-03-16T12:27:24.490904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgbag1.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgbag1.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28390\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 689x410, components 3","md5":"1deff7bceae12bb935fbb70cfe7e15ed","sha1":"7db8a5a0b3358120a83c381fc1e456fd0937b0e0","sha256":"4e4391d5a727069dc0fd99083c0675b6eb93d17808e26e10a180514d3a05ee98","sha512":"65c842b3c0533b5cb6751d51c3e76670c9b2a8a692e81ffa0fb7a0bfd39ac45fb7d1b984f85eacb8379bcb264e2d071dfe4da7dfa7fe3355fcde225a65fec00c","ssdeep":"384:dD7ZgOCvlvRJ6ggUEtso3i3QnlxYaV09xNHQ6teI9xK8MgH7Zb7OAEwlhi:91gOOlvX6hULqQePYauLdt+MbYGa","tlshash":"92d2adc6d678af45e1a08a3961614b235df0f6164f35f9b43fe022ad9fb10072e4e6e0","first_seen":"2026-03-16T12:16:26.24057Z","last_seen":"2026-03-16T12:27:24.50803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/core/assets/css/font-awesome.min.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/core/assets/css/font-awesome.min.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5898\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26806)","md5":"582f11dec52c961cd4d002a8f1f4e6c9","sha1":"0243b72577986f7c9cac422038cc552aed834812","sha256":"ca495cf107c5ede6257179820bcf2aee3f17bcb209829b0df70c51dc5bf18941","sha512":"b5cc973ff47bed1037a3ac82d3fe07464a19e7e6e6befc801105a9e238d72ed98485f9cd7730e2b32351b1033b4a3c40f2aebb4e0ddb407c20d7a6431f9d986e","ssdeep":"384:Ei5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/N6:Plr+Klk3YlKfwYUf8l8yQ/U","tlshash":"27c262e8e54d01d6a731c48bff85b36862b6f73dd5804da9f01f290c29d226522c5bbe","first_seen":"2026-03-16T12:16:26.241672Z","last_seen":"2026-03-16T12:27:24.50502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/shortcodes.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/shortcodes.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15255\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (356), with CRLF line terminators","md5":"84291c841c4ab6a2aa5746ba4df1052c","sha1":"4bf64fff63978cf1266c903f16467271df83045d","sha256":"bc5323d436ea862ec9a7b7121390ac246a78c7f5c14b63b9f20d959ebfaabc9e","sha512":"b617f2459ddce62105a4dfcbe108b0e2db0aaa571d32d1c7f932124fa95e9e5c2376dd937b632b56a7d82aff52bb0e040abc571a3ebf9338ed79fc5abc64bf4a","ssdeep":"1536:uVM1qrXlFV9L1kpVzftCfr3dSkr3dSQf7RGGbZ/rcbKvH7tIU689VYc:APLazftCfr3dSkr3dSQf7RG8Z","tlshash":"f1a3729cda262c056237d73867d546c4fe7440638e074878fad5b2098fbeaac5263f9c","first_seen":"2026-03-16T12:16:26.243603Z","last_seen":"2026-03-16T12:27:24.548423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans+Condensed%3A300%2C800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans+Condensed%3A300%2C800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 12:15:51 GMT\r\ndate: Mon, 16 Mar 2026 12:15:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2535,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7cc60507b6ec902648a63dd0137863dc","sha1":"32d5dd0cfa0f01d8ea918698a790abfe29f85a6c","sha256":"4ec35cf1489220ff7a26992024cf4f6cf81a7f03d61cb2eec380db40a539cb51","sha512":"a509391bd5037af7a3ee29a6c92559064a3970928e836cbac42d8decbe69c93178509676008efa97f1db712746801f2c9558fa359f54464983fc133e53f0512d","ssdeep":"","tlshash":"7051aa95093fa400ab87bcc27bcf3d319d4e24507089c6b65ff94d88dd65e2a23a934e","first_seen":"2025-09-08T23:43:29.502861Z","last_seen":"2026-08-07T22:40:38.487099Z","times_seen":955,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":103,"dns":1,"connect":8,"send":0,"wait":32,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/?wc-ajax=get_refreshed_fragments","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://transcorpbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2020 17:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17731\r\ndate: Mon, 16 Mar 2026 12:15:50 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WooCommerce","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"Slider Revolution:5.4.1","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":100593,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2676)","md5":"2b0f50e728dd6e7679233666bfecddb9","sha1":"4b9e816c05a8aa0d3ba9a9c3bc309d99d6227371","sha256":"90a9d34a467d8e39d391c8b8ade846f78ccc9700735d8178ddfb4c0657b83606","sha512":"187964e6bd3458d94f76c46b11df1eb877d567b7e97fb539d6271192b5f72b7bbd51420f152130db7c2ec7a4766cfab255fba4150020357d20c3d429f89f9171","ssdeep":"3072:xo1bgL2oLhv2TOfyf0f2r9pY/cwTRYlWtW04MdD8wEv8+2nXAfDJ7B0VyCA6Z1JX:xrpMwXb","tlshash":"eca308a06d6da47e40673686b268f698b2f69212cf054d90b3fc766ccfc5f80966335c","first_seen":"2026-03-16T12:16:26.24551Z","last_seen":"2026-03-16T12:27:24.506584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/tower_4-wallpaper-1280x720.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/tower_4-wallpaper-1280x720.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 04:11:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125738\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125738,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x720, components 3","md5":"fea4a94e6869d9040f35da6948a0c516","sha1":"73ae9117e3717c464a8ab5da0620e2241c7c904c","sha256":"70f9c788b057644554673f34815d693f44abc2019805a268672aa7a52d51973d","sha512":"e670862638203ff944e498f72a0b2d027ff5ecfac15d341e0bc4b7c087de2500ab850b19640b40b252bf6fb237174989c1df27f3c00ad0e3e10a968b2a3a3253","ssdeep":"3072:Mc9yIMNSwFL/jPCI9P9LHmIPuKpzk98kH15lQFk9d35Q:h9yPSwV/jPX9P97ti9H7lGqY","tlshash":"10c30241b3390c54fd97991d8bee99b1bb256bd007a301f13ba121ef46b3a122c79b35","first_seen":"2026-03-16T12:16:26.246711Z","last_seen":"2026-03-16T12:27:24.504268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2907\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11676,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11676), with no line terminators","md5":"55a1e882219a59121e1e69fb90a98fdb","sha1":"092bfdd63cfb1ddcafb0b2b9b627381f9cc68703","sha256":"8b6c27443c96e0447bb92e0f06393597f217152327305f95e8dc656d4d4477cf","sha512":"6f248e83c55c7c959fa7115a291ac1492c3066f2be58f9cfb2a1e83f2caa942d13912ab1fe6b16e051a50411b629e2584956fa9ac398ec974816a4564768b522","ssdeep":"192:9mtXwuPqCzSMntI0ngXNj1fTi72NXtwX6tdQjNrzx57PD2iujPx/OYcNK0pbnDu2:duRJFkNjxTikXtwX67wzx57Ci0Px/OYk","tlshash":"2b322ee571272c573a6f52a7448f540cb135d47c6256c4aa6caadbf3483ce442363b2e","first_seen":"2026-03-16T12:16:26.247987Z","last_seen":"2026-03-16T12:27:24.484621Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10585\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (399), with CRLF line terminators","md5":"20d02efda00d9b8b55dee1c83190c222","sha1":"c4fae3ce5ce24ac0493f3677886472bbc7b53b39","sha256":"fc8c7736ef90aaab2b67f0c84f0f83b4a6fabb973bc9f53b455769f61321a8b2","sha512":"2592b4e55f4e86fad2d1ff87568d22a89c0c20129674a09f127994c4a2ba405476d121524ca58df37e6ced003404270fb054ff5b064ccd8bd0e0c5e26f5c97e9","ssdeep":"384:WZiurb/q3dx95tiEE4yEyMWdElsIb+iMIaB8yHt2Sx1tHHvh+tmnoWKnURkA8dyX:0iab/q3d5E4KZIbLM11tKneZ8cxbBC8","tlshash":"cf4365589e421c41d232c724d7e179d8e76921138fc324a8bdd8b345cfbee98426ee9d","first_seen":"2026-03-16T12:16:26.24913Z","last_seen":"2026-03-16T12:27:24.505784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fredrickbank.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.1","fqdn":"fredrickbank.com","domain":"fredrickbank.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.271Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.1 HTTP/1.1\r\nHost: fredrickbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/woocommerce/style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/woocommerce/style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11351\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80969,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"538bdbe618f9cb2c4fd59bd8a0f5abe1","sha1":"eeb2b02e1412aef8a47e5909234f6a082fad46b0","sha256":"a24df6c0980938d0fa15a232149c0e1274361d3a75f0809d293af83df0a535d9","sha512":"f51e1fcb9212aca29c2a3ea4fced7400e1f4a96ed6559a161629670b77e3496d1adb89107034c9618caaa8c43bf84733919770770c10431de31054aa6724efa3","ssdeep":"1536:aHVW3gMIEuBwmKjmJaOrYf+Qs03igFcFTc83y7SK7cVp9ToCJy5vS4crtCOvgi+s:dqJaOrI+Qs03igFcFTc83y7SK7cVp9TL","tlshash":"a58362dee1312d0063b6d7786fe116d4fe646077ab861029bc9077089fbe5e91262f8c","first_seen":"2026-03-16T12:16:26.250856Z","last_seen":"2026-03-16T12:27:24.486041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/ywot.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/js/ywot.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 167\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cff797d55e0a3ceaaea2f1b646b79eee","sha1":"5d92beb9676651c2c0741f3be49eb53de233318d","sha256":"ee6367ca049e1a9df6f9694d90bbbe25ac01fbabc54d5e35e9b45136afb82a58","sha512":"f14e9f7a4accb17be2ac995ebe59ac7ccebfd5a1f695339c9c9dc8b7882f2e7520c5b02329de8b8a217852d28d98246c5ba13f4cdd47dc397b2e3564b62232fb","ssdeep":"","tlshash":"49f0e53971f612090977b2c9456fa2183a1ba50761c557e1bd0c1fc10fc8934bab8a1d","first_seen":"2023-06-26T13:14:11Z","last_seen":"2026-07-01T03:37:47.107073Z","times_seen":15,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/1_3.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/1_3.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 233 x 57, 1-bit colormap, non-interlaced","md5":"2dd4902110d10a9fa6aa8ff51ccfa746","sha1":"d863d82a075fb4427201f03dffdc0d9ab272560c","sha256":"5f02bc187bd8bea3ea36be3c375461fbf2ee3845645cf7d70ae3f93542e4c556","sha512":"ccc9c3256c61cf320d06f6f64bef1eaa932f10f60654426be2f2425b78b441a5d4b273232f430a673a2d77b8b1617790e167c882e925785e1532da4fe9464a95","ssdeep":"","tlshash":"0fb012c229110c6997444023420a44308c3700594419c2670ac044d82c70014d764ecb","first_seen":"2026-03-16T12:16:26.253232Z","last_seen":"2026-03-16T12:27:24.468143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 894\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1680)","md5":"943f6eb962c25bd965e0f0e5a284fcd0","sha1":"b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9","sha256":"50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea","sha512":"40d551836cb4fdce9c4411fc64cf65ec29854dcc4bae0782f7da1518d552bede6c14ee876ad1f25ffadb4a97efc7e97cb0cba877eca9f9e8cbb3e3fed7d600d2","ssdeep":"","tlshash":"ea31a5c9348568cd068f1221133f1a8ff07c8e49adcde699431de9f17934467861afe1","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-10T03:19:46.877604Z","times_seen":7027,"resource_available":true,"data":null}},"time_used":1077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-woocommerce-social-login/assets/js/frontend.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-social-login/assets/js/frontend.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 157\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"2fa107cdd281c76224d1a17328acaf8b","sha1":"71539bb8f66d621e0829d323d4d561576aa7fa9c","sha256":"429ae5a0c3061df3600247c5e2bae97260a3703073827a38e0ea3e5c2c2f5224","sha512":"b183676f40c1969a6c0c568002e9436acdff49eaa83f434922f10a2ea31ed070fe203b6264c8776f2b269eedd6246302612826bfd593179bc9d5c7cb47a2c64f","ssdeep":"","tlshash":"72d0c2ef3014dde99bf321a99d379a00762b30bb580d660170d47404266c61f823fa96","first_seen":"2023-03-08T00:05:28Z","last_seen":"2026-05-01T11:14:07.504878Z","times_seen":12,"resource_available":true,"data":null}},"time_used":2158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/js/element/main.js","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /translate_static/js/element/main.js HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Mon, 16 Mar 2026 12:15:53 GMT\r\nserver: sffe\r\ncontent-length: 1596\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3280\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9172)","md5":"81b2be18696c4dfe620f7b6d0d75a566","sha1":"0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd","sha256":"120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72","sha512":"d6234549918a770a055717c9fd1ff4b162afc7cdb9e72459883bbdb5e04532d7af5295b2f58a6f8a70250efee55ab544fba9595c85001c204516d907937d8c9d","ssdeep":"192:x92sLIzSavikwgpTZlpSjjF1mk3eJ4Nr6SWCxjlRYifT7TMcPvE:x9bEzSa3Z7lMjF1mk3v6wjlRYiff4cP8","tlshash":"9912e96830f3605b90b3b1506dfbe78f73b31638658799c1d0ace42929acd7a3626f15","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-10T03:19:46.837879Z","times_seen":7559,"resource_available":true,"data":null}},"time_used":1078,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1078,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro%3Aregular","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro%3Aregular HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 12:15:51 GMT\r\ndate: Mon, 16 Mar 2026 12:15:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2415,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c0f60d71292a5a8d1cbdbc6c80621","sha1":"3a15491027d6ba63d9720887c07b9677aa405a16","sha256":"109ce15b2cae910659d99ca36afcbdc552669aac69736f67af8d552e0e292117","sha512":"9c7c3bb34a0cc0ed674bc891e4007e5068c50658f104157ef46ba909230b2eb8901d2436240d7785417347ffc021dcf5786b55d3e6253aab323fd28e33a54beb","ssdeep":"","tlshash":"53419ef3401ea84897a31cca23de3e369e4f65106186d17adffd085cec75c2a5264b1d","first_seen":"2025-09-11T21:22:52.791197Z","last_seen":"2026-08-09T22:44:10.00114Z","times_seen":3166,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":75,"dns":1,"connect":21,"send":0,"wait":38,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40974\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":458447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"047176c5feeb50bfeadc389fe311ac0c","sha1":"7e362839ddf1ca4698b0dbde79b6909df563f181","sha256":"0010026f43d232f97b359b5d54383434583eb55b59795b8a0cc5a157c38be595","sha512":"b9e39855e946df7270a611218f0121b1211eedd91de839e5d4bce93c6ee433d0d36f2ae09a3f613fb91ab33bbc47cb358739c63de4af78ad2222deb42398834f","ssdeep":"3072:lIXv8KwxfGPw3TkjgPGcHCWJpyIfeB1u6e+5LRXuWnpAx53R46wuzEaCeVGNz+C8:lIXL5jOT5","tlshash":"c8a421b2f894241f23a74dbd30e4b92a7e1b01f3d4c21fae3564e6945a0686f353a735","first_seen":"2026-03-16T12:16:26.256493Z","last_seen":"2026-03-16T12:27:24.566533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/css/responsive.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/css/responsive.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4288\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6e28915739185e48312331e901d2a167","sha1":"ae2bd061520f45307b3246f1dbd2a510acd99947","sha256":"ed8fc123bbd95758efb1ada279003bfc6d5d20a788497700254b601ee87be8c3","sha512":"6d4fdd45e16e9959dd2fd7dcfab2150d5c283e917cd5859abf2446b44c2661b494f4a7b2103f0969d4d19048999b550cbb592bb11cbd94ec63af1ae30942deb5","ssdeep":"192:eF5Nsv0WhXZKwyuw+rV1SlwlICr5tV09CLilNCnVB4LtmHAaeVW0A5pkG6IGK7Gu:l1i2tIyZEyWpRwO+JWE/PpLmcOlDlQr","tlshash":"50b20b0ed6a11c08583aa338dfe345d8ef275067878580a97decb606cfbca584161fdc","first_seen":"2026-03-16T12:16:26.257642Z","last_seen":"2026-03-16T12:27:24.492279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 287\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":895,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"902b7ca09549975e55e136fb0026df9a","sha1":"ae9b808c87bbbf57b9f3132c41effaaa12af03ff","sha256":"2685c1caf9a3e6616da70c63212ff6d6a6747e4929edf55832ebd18ef7a43ccf","sha512":"67c201aaf9ffd56f648bc230c74b41ebf9a1818d8392e319fa55808d50e46632d4c4de8a6d1727583d41fbaaf4fe06b177fa81b0ebf3c06d9eb8d56de00b4ed5","ssdeep":"","tlshash":"f2119ca6b70baf4cd1fab4ec9102c585b85588b292db10594e03abc8bbc8579901990f","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-09T21:31:56.067994Z","times_seen":3217,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgmenu41.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgmenu41.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20403\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 453x388, components 3","md5":"e0770d9f883bd6f9b295f2a371f99a92","sha1":"c18863d5d45b745664bd287f94e2d5233d9cd0c3","sha256":"058d23c773a842cb1f923969da14219765591c32b0ef2111d093eb52d6cd2c15","sha512":"9b1a00281e8d53d8000c39a20312aeb33bb10b182f75a36bb9e63ce788e667cc4b77d06ef84fd75904dc799088d18507f3acc03fa24acd7afc3e08c4238d4316","ssdeep":"384:yXXX/Dn5t4XQYCU+2ohlqnHBKHUlZldC8x6gcZZFcE7ripN:Yndt4gdUfojqHB7ZHo+EvmN","tlshash":"de92d03023b1ebe0e0159a71a168637572609f0371bc5eb9767e61cc0c9785c1ee9d9e","first_seen":"2026-03-16T12:16:26.239468Z","last_seen":"2026-03-16T12:27:24.490904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://transcorpbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 111817\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-10T02:46:53.22481Z","times_seen":324024,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":42,"receive":18,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/1_5.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/1_5.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 111\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 548 x 50, 1-bit colormap, non-interlaced","md5":"528f9a6ff2c943108ec01846af4233fc","sha1":"f404f7392fba90256c0d8285fe07c4e27e0428a6","sha256":"b90b53208f91c3a01cc39fd9d68a6ab71ceaa663b38e938af3bd86c1360d0406","sha512":"1f1b1ca6cfc6a0e4ca167ec7eceecac91a3c27c67eedad3e660b2b68cd425440dde64cdf4ae5b93573734f5365f1596c593d3227bd2b6d04092ab21d424bd9fe","ssdeep":"","tlshash":"edb022fbc3008c3c88bc0cb2080f0082cc3000002820030f0202a83e8ef3208c22030b","first_seen":"2026-03-16T12:16:26.259314Z","last_seen":"2026-03-16T12:27:24.528991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/PS-1.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/PS-1.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Nov 2018 22:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19377\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 382 x 208, 8-bit/color RGBA, non-interlaced","md5":"df2b586e8c0a118ed318d17efc66604e","sha1":"bee86ac6a6255bbd815f3ac598674e5dae3536c1","sha256":"a8736ee5ab413570265fa01ad918139fc1006960bc763c8081d610daf474b2cb","sha512":"dcf8c5a970d94f23feaa6d9e9542769f3e34372c73880114ce6b35e0f259a5ca58bc27029fa55009db43ab1aa8e6ba01676e3eba07149c74ce489d0b13c14f06","ssdeep":"384:eGCjHdwIll66vU0/AV9+Aky1v1MUBWnt3R6RXcRER/aVk9mQYN1FlH:eGFIll66vU0/Al39Fq/CGERSk9mhNx","tlshash":"bb92e1ac9fa359c871922da73430142977c560fd3ca223715121fdee9a48616ff213be","first_seen":"2026-03-16T12:16:26.260425Z","last_seen":"2026-03-16T12:27:24.49437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/wp-embed.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 637\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1398,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398), with no line terminators","md5":"5a03f97cc479b9f5d7efdaccec31bc17","sha1":"54518be91b7c5d4b139e032d23ffae568cc7e9fd","sha256":"dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0","sha512":"ed651ad04816784b4c14e54b1876498b6ed07f33325fd38aeb250dda0859f20e6f7997ef45439c1da3a6b0784de377258c9459264621caa7d17803458e70c827","ssdeep":"","tlshash":"6a21141a3338143b10db51e3b99d75c7d6f217ee240121d18d78c880fa94fa79966fd5","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-08-09T22:44:09.948335Z","times_seen":4529,"resource_available":true,"data":null}},"time_used":2133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/banners/css/slider.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/banners/css/slider.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 975\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a23384a7b195f6c678412d052c0d3950","sha1":"bf9f4de0fde70deac21284762373abf954093e7f","sha256":"39e9eea9e00ec00981c0b022d3521c4ff159d07be0a4a28ae3ce7a918691f579","sha512":"7648fb5156fb97980199eacdfecb0ea495babcb001baad435de7299924310ef827b2ef947d8e64faa4427a4da90a0b7f6077a714352d095ac0aef94e1e6fdb7e","ssdeep":"96:Ccokco+9+l3oZBEsDBmTsFsEgU07s5H6r:nokZ5oZBEsFusFsl/s5HO","tlshash":"87918c546b931958e12e82ec1fe9df1aa7dc5143d60ac868b7c10788df6d1dc7076bc8","first_seen":"2025-10-28T21:45:53.253061Z","last_seen":"2026-05-19T18:49:03.361918Z","times_seen":5,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/woocommerce/style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/woocommerce/style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11351\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80969,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"538bdbe618f9cb2c4fd59bd8a0f5abe1","sha1":"eeb2b02e1412aef8a47e5909234f6a082fad46b0","sha256":"a24df6c0980938d0fa15a232149c0e1274361d3a75f0809d293af83df0a535d9","sha512":"f51e1fcb9212aca29c2a3ea4fced7400e1f4a96ed6559a161629670b77e3496d1adb89107034c9618caaa8c43bf84733919770770c10431de31054aa6724efa3","ssdeep":"1536:aHVW3gMIEuBwmKjmJaOrYf+Qs03igFcFTc83y7SK7cVp9ToCJy5vS4crtCOvgi+s:dqJaOrI+Qs03igFcFTc83y7SK7cVp9TL","tlshash":"a58362dee1312d0063b6d7786fe116d4fe646077ab861029bc9077089fbe5e91262f8c","first_seen":"2026-03-16T12:16:26.250856Z","last_seen":"2026-03-16T12:27:24.486041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/comment-reply.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 488\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1078,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1078), with no line terminators","md5":"56bc2726d829207bfa802f957aac0791","sha1":"5bf5c0a61359d8784c950b059e013aceea0d42f1","sha256":"1b1ca0f15010e0124bd4ca481404643c88f7eda1b276e9554d0ed83fb45b7e30","sha512":"44acf243beccb899c7db8bc006e605ac75bd3f6574b096735fe1e71011e6bb4d36485d23206a36d5522b18ae5053ecf0a332de043093d305e02c683d013041d1","ssdeep":"","tlshash":"ed1112a031ca5c612395d12953bfdb2ab4a19328780806a5c41fa4f47224fdb502ef9c","first_seen":"2023-03-07T01:43:40Z","last_seen":"2026-08-09T18:27:55.06361Z","times_seen":1397,"resource_available":true,"data":null}},"time_used":2132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/bootstrap/css/bootstrap.min.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17394\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"1edc8613d9abf0b667b7aa3ed236e3cf","sha1":"12f75d8149d3961c543a4c3e780fa95061048194","sha256":"328b1e65ed3981fab4b0f3be5a193b96b95a44491678a20adb254737536dbfae","sha512":"6c71472beb656f0c67f356ad9ae72c9cc75688ae06bc989772f7305cb65e394b655419890d91f806a4c076a1e9a4b11e30c9224bdeb11158e7c1f2c96c1fed0b","ssdeep":"768:0yAGxwhkBwmlp3N420Hx7N1eAbkdIu7bZbhzoN+cSaKgqi4bQWhkRQmNaO:DweF70Hx7NJkaEzW543hM","tlshash":"47b3d7a0f21031ea7223c55a71d0ed872219a153e5674fb7f22f25e84f896ca1773f1a","first_seen":"2026-03-16T12:16:26.264099Z","last_seen":"2026-03-16T12:27:24.509422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/parallax/css/prettyPhoto.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/parallax/css/prettyPhoto.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1642\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7ba9d023fdebee125aaa1f99d2b2214d","sha1":"444eab4da9b7a340294e0c5096b375ae2be6cb67","sha256":"f6269d2ee6374ef2b60c29397c3003610f0a9cbad65c6a416185f5589c1c67b1","sha512":"fd6175e77d599bb70f48469b0c1064c96a8c39391d91a0b4d782484eac3517f9932257176f6742f8b68ae33e243dd36061867313e4aa4e3a4ec758d9312418a4","ssdeep":"192:uF1K/WEP585hl0udnx8Fld2hpIv2258Y2YRl2CXL86ZXYlq+w:a0A22Yh","tlshash":"6822f4288e1e5545e23bc7addfd28320e5615067ae02343cf6c4aa085fb993d99b1fcd","first_seen":"2026-03-16T12:16:26.265374Z","last_seen":"2026-03-16T12:27:24.514149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/formcraft3/assets/css/form.min.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/formcraft3/assets/css/form.min.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13951\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57088)","md5":"0bb329e08a0319ddb66827fb18ca7983","sha1":"95878360cff9a0da9a973b4e7334484e29291212","sha256":"7b0d3158624d23967b4ab3f425af8a4d7c1ae708874ef4d353e3742e4bbae0ab","sha512":"886e8dbe13b09cb6d7e33a57e216d2bd30ff1db006a964ccb3226093b07a39834c6620be2d9170abbc6421aeb23d8f8487a50dd29354cca9fe89ba630a7fa491","ssdeep":"768:JJHaHNuuK40wGUl4bsSDp8rl8NW3131RwAwl1E1iwNwoAXmtvXpv0vpC:feku/zETp8rBAXmtvXpMY","tlshash":"e9b35454f431214a6112ce4396e8a9ec5a0fdd32865b0c9bb611b4078beff9e32d6f47","first_seen":"2026-03-16T12:16:26.266442Z","last_seen":"2026-03-16T12:27:24.466683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgtech.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgtech.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25500\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 642x422, components 3","md5":"a0ec96ffbc605c09341c26144ad8b885","sha1":"0603a87409e6e5834f6e263d943e4f7d7d9c4a0a","sha256":"bfd0de858193a5f6ad6f516cbf1d16d4a813ffde24fc2f8d0a60a3daba6cf9f3","sha512":"2e00972ab10e0e238e9efd99bf21e753a4cdc7094ff2980006a29b180693f07cc188ef21e3cd43afa234184f92a455781e65633535f5f6c165757e915be8e97a","ssdeep":"384:kN4WpD6jH/PmeA1I+C+hqxamK6E+t8mdItsDx2fdYdFHmv1uR9gYR+zfOyZbs:6NKHmjCGq4mmWIuQfCHLHRqo","tlshash":"80b2cfc95af0bf0af82c953d4494430b42c5ef210fa4f6b1bf991a8c6e93507498c6f1","first_seen":"2026-03-16T12:16:26.267464Z","last_seen":"2026-03-16T12:27:24.521185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/owl.carousel.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/owl.carousel.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17003\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a7f535ea24c4c9cf5f01ac9322634f58","sha1":"7b1383e0e4312c46280ddf91931e32f6e9f8de1c","sha256":"b0f20d9d73e83de106d02ab1f37b13aefaac746104a9c03eb604907c23bd435e","sha512":"8c80965bfc46f1d255d857b3c5028f3cefb393379ef2449eb7e531584d6adbb20c24068f9602519b9d71b2ced2740e82ecf6ff8de31c99b61e0f068349577119","ssdeep":"1536:WELorUUOZZ/Afrx0APP+5FkrhKt1+Ky46c+J0BDZg:WrOZZg0+PcFX+Z3clZg","tlshash":"817383c1f36c221b422a31b85e9e63cd723d416ae5115c6fbca9a9d838d146c437efb4","first_seen":"2023-03-07T01:18:13Z","last_seen":"2026-08-09T13:36:15.816227Z","times_seen":1631,"resource_available":true,"data":null}},"time_used":2148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2138,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/flexslider/css/flexslider.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/flexslider/css/flexslider.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1258\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4ae7c6c7547537c62f97b655a8e55f","sha1":"da504fcb2fe6060fd4cc642457ed5322014f6b9f","sha256":"d0587592160c8ac3dfd56e1450ffbb73210d2f5d7143eb015d4c3d998a29eec5","sha512":"4d16aa7ada994cee728f83a810a5e013f9768c9fc90abcaf3141fb5f1f5d58ce874ce07388f6fbede5ccf618b39dafcaf05933fea68fb46becbe50950b7ed8fb","ssdeep":"","tlshash":"ec810238a1712e14d493c269fe81cbddebb89415932a95fcf4d23a34c69e1850d378dd","first_seen":"2025-10-28T21:45:53.257217Z","last_seen":"2026-05-19T18:49:03.358824Z","times_seen":5,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/widgets.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/widgets.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8071\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2a4fbbee6e19f19db537ca510657caac","sha1":"8c2ee1a780eec7a20451696d02673a8a78e9b62d","sha256":"5ddbe7de5186634d4b7bbe2dc5f71bc1a95c3a87a05696550a654850517414ef","sha512":"1b69f00ee38cee40e90741852cb6ecf7896a843ee3b1ada2f2955bcc7accdc2a9499e0c9e1403d7a3a2708213ea557a825041e464ac92c385f9b9f5596a9e48b","ssdeep":"768:DOmfvH6z17XU1Mx9i7T76LE5w6Z+QUy2Nig:imfvH6z17XU1Mx9i7TP2NR","tlshash":"83332f98e9656c06523689349ba971c4eed441dfde430ea8bdb077068f7ead84133f8c","first_seen":"2026-03-16T12:16:26.274269Z","last_seen":"2026-03-16T12:27:24.488576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-woocommerce-social-login/assets/css/frontend.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-social-login/assets/css/frontend.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 125\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9633b4dd20afcc379fa2ea530e3fa028","sha1":"7353f960bbe3d294db049e450702bfdc9906d352","sha256":"e581b2e8424103fa550af5cd66faf4519c727fcc7674f99a22e12aed50d452e5","sha512":"dee144faf5dbdf19652180a61caf455312eeb28526da1161796423c5457c9aec8257b6a631c580fd6ae735adc2e89c4045a7d10c2e07523f244d788fa5e4a283","ssdeep":"","tlshash":"13b092ca07734380c45385868eea83422134410b9d5ae99abdaa6984cf0e719e142bb6","first_seen":"2023-05-02T10:44:05Z","last_seen":"2026-08-04T20:38:26.939648Z","times_seen":28,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3823\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9959)","md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-10T02:20:26.324668Z","times_seen":58594,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/images/icon-set-options.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/images/icon-set-options.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 815\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 18, 8-bit colormap, non-interlaced","md5":"359cc8c9c3010f40a9e4e72615739183","sha1":"3827fb2c4bacfa31582a2c926a1ef8c7ee933677","sha256":"2b65f29bc138b59fa3f0d72f138ce5bdeb22c36a6d452a0c3865a1cac7d4f2c2","sha512":"9add16bfd172cab3dc369127e1c83d7499afd05f52942cebd836649fa127ff1efe6295d4b708cf06f97e9da0cc629fb1a7627059df2fd584ad1d385bb1d84485","ssdeep":"","tlshash":"4b0115d5330ec5fbd588f0d6e209a014f5385d641442886fd03230baefb7a9e7510c97","first_seen":"2024-08-19T22:10:15.53898Z","last_seen":"2026-03-16T12:27:24.486844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/owl.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/owl.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 994\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b51416af9e8adbe3d16f5f2526aba221","sha1":"097c8d67412f44534449ed4cadc6dd22b025801d","sha256":"dd7b97c7ad9d7b3eb79bdc728bcbc6a7ab8e3d5db0421fb0dd16d34f3dc88277","sha512":"015b350d568d2959886ed5982b74592d2608d65f2756ca5b3cd27c95ac1b68cfecbb8f6f4bca4f3dbbb09c3bd998b158973b60c691efce2f1c16a224aca80f2b","ssdeep":"96:15+VPKCDemllo7PZ2RUPKuT+8F/pgvYsuC1u:15+VPKChleHT+ypgH1u","tlshash":"9491dbe91276114d741f87e81a9d6b1a3f3dc451e91acc18b6eb2a058fcef48502fb4b","first_seen":"2023-04-05T05:08:28Z","last_seen":"2026-08-09T23:57:33.895949Z","times_seen":6600,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/css/translateelement.css","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /translate_static/css/translateelement.css HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Mon, 16 Mar 2026 12:15:52 GMT\r\nserver: sffe\r\ncontent-length: 1602\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":68,"dns":14,"connect":21,"send":0,"wait":31,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/responsive.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/responsive.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4288\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6e28915739185e48312331e901d2a167","sha1":"ae2bd061520f45307b3246f1dbd2a510acd99947","sha256":"ed8fc123bbd95758efb1ada279003bfc6d5d20a788497700254b601ee87be8c3","sha512":"6d4fdd45e16e9959dd2fd7dcfab2150d5c283e917cd5859abf2446b44c2661b494f4a7b2103f0969d4d19048999b550cbb592bb11cbd94ec63af1ae30942deb5","ssdeep":"192:eF5Nsv0WhXZKwyuw+rV1SlwlICr5tV09CLilNCnVB4LtmHAaeVW0A5pkG6IGK7Gu:l1i2tIyZEyWpRwO+JWE/PpLmcOlDlQr","tlshash":"50b20b0ed6a11c08583aa338dfe345d8ef275067878580a97decb606cfbca584161fdc","first_seen":"2026-03-16T12:16:26.257642Z","last_seen":"2026-03-16T12:27:24.492279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/fonts/retinaicon-font/fonts/retinaicon-font.woff","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/fonts/retinaicon-font/fonts/retinaicon-font.woff HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/theme/assets/fonts/retinaicon-font/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 22 Nov 2018 06:16:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224676\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224676,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 224676, version 1.0","md5":"6de3862ee9943fd76c559807c7f7b04f","sha1":"2f0ba3293bdbe6cbbd153fd056a09e9b415a742d","sha256":"c6ed5f41c0fa361410dd82899fec73790f8f883939a2cfcfaa45e60a7a29cb2a","sha512":"b9e6a1d8f45479209157e3554d765d19adac111d77766996d453aed6d74c78721330d4220a6243282c4f290f16c35373e3c0e8aa5abac2bc00d2b5cf49149dcf","ssdeep":"6144:1IpxvAnS3NtAl4tZVbiBOi35uVGM7Y3OQV:YxvnAlmigVGM7Y3zV","tlshash":"472412a9748f243ea070e3b7ed8c1243b977ac7955cbb3479c0bbd7418952940ae12a3","first_seen":"2024-12-08T23:41:20.492035Z","last_seen":"2026-05-19T18:49:03.365456Z","times_seen":11,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T12:15:50.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2020 17:40:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17731\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WooCommerce","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:5.4.1","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":100593,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2676)","md5":"2b0f50e728dd6e7679233666bfecddb9","sha1":"4b9e816c05a8aa0d3ba9a9c3bc309d99d6227371","sha256":"90a9d34a467d8e39d391c8b8ade846f78ccc9700735d8178ddfb4c0657b83606","sha512":"187964e6bd3458d94f76c46b11df1eb877d567b7e97fb539d6271192b5f72b7bbd51420f152130db7c2ec7a4766cfab255fba4150020357d20c3d429f89f9171","ssdeep":"3072:xo1bgL2oLhv2TOfyf0f2r9pY/cwTRYlWtW04MdD8wEv8+2nXAfDJ7B0VyCA6Z1JX:xrpMwXb","tlshash":"eca308a06d6da47e40673686b268f698b2f69212cf054d90b3fc766ccfc5f80966335c","first_seen":"2026-03-16T12:16:26.24551Z","last_seen":"2026-03-16T12:27:24.506584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":202,"dns":2,"connect":94,"send":0,"wait":94,"receive":95,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/ie_assets.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 663\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"02f94c2f6485552dde29f1837794a8ca","sha1":"1349b51572e3f86d1e104b648139d2ce37c6322b","sha256":"e563d176963bfc3f3b50c142a880a63e90c7bd4fc6cec7b76c80dbf1614a5df1","sha512":"fd99b3b2ed3f4be4713e1156f772cbd38a5936ea2d4e8b45c3b6f8291496c8b086468441fcea11c7036d4d817170a73fc3625433aae850ffae556449ee48c9d7","ssdeep":"96:Gi5wcb+GzGY8K2KF3LwVfGWJ4GWJP2Zed6RdzYsBmjjoLmVGtNtKvJVUEy6UGVSp:ZSpY6r4PSYK2uIzgH","tlshash":"d19159a39a5f4486d23bd79068186b93da88f117ce8b93b8c4751b2dc8f4e585350bb4","first_seen":"2026-03-16T12:16:26.283782Z","last_seen":"2026-03-16T12:27:24.525213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/imagesloaded.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2359\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7994), with no line terminators","md5":"d0c2c0d7e37652e66657c8c8d6376442","sha1":"f26118a43e9999e34bfba542db365f123f6ebad2","sha256":"854d677b850907cd851eac7e3f02f05a1e056f05bd5563199c5d93044ff16840","sha512":"353885b5502c4ae3530d863a47f3df228402f5ba0b76d072d6f662d3d253970343c9230e772e44609eb0ca47a0d664e7f6c134491ca45bb78755727f19066a4d","ssdeep":"192:Jiryv7A3goz0aForCrK7r2zjqwr5s2gc/y66DOP:JiuvMtz0aForCrK7r+Vr5sO/y6B","tlshash":"5bf1608d73967110668bb4b6e22f020fb237a09ae81c841c7698ecf16e75d5c5133f79","first_seen":"2023-03-07T12:02:27Z","last_seen":"2026-08-09T21:31:56.1778Z","times_seen":1333,"resource_available":true,"data":null}},"time_used":2139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgmenu3.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgmenu3.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17013\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 432x371, components 3","md5":"47bcde09476ee62da73ec8ce797d4a31","sha1":"92bc4875d884aaf07e5ac2257e0e4dcd62aafa3e","sha256":"f8111803fa7d135f3c7b266fb2fca844e432281ca6dab24c2434a93ebcb4334a","sha512":"f45c278c2fc642afe3b8cc74068b16ae376a2210aad340020d2dadf76e0522df285e4d93bc631d1754d93c38f4d85b0f98aa8dc2d7dc92cd6f00d4420a04445d","ssdeep":"384:oef6vjxERI9yV4/Zya6nYP4rpRtTR2RMOP8pdoiM78mYwA0A:oeejkayVkZya6nG4rTtkRM48pdgs","tlshash":"9072bef3b762cd3bc0ef3ab5e1f36bb26c259203a41c15b77051850aace37504a5906c","first_seen":"2026-03-16T12:16:26.287738Z","last_seen":"2026-03-16T12:27:24.542432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/1_4.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/1_4.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 57, 1-bit colormap, non-interlaced","md5":"93f15162443b9cfd0cfdbece0877df8f","sha1":"7f43d3606e8af1a73feea198231b3b95f89605eb","sha256":"518bff6827b4a6140a93002ccbfa6cc7762004b77febd94620091a2d26cf42c9","sha512":"837766070d1da4dcb5c45b43802c8eb9ecb20764a0ae34f7266d5308dedda492507669efb462ea2cec1c8f926be474ac0f2e49bcd9e697d9d23a58a0e9b785a4","ssdeep":"","tlshash":"b4b012c286100d34d344657301101306cc601024001e00b71640843c4a65000c190746","first_seen":"2026-03-16T12:16:26.289012Z","last_seen":"2026-03-16T12:27:24.533813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/scrollbar.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/scrollbar.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2919\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (682)","md5":"bf2c33873c8d57627933e4cfdef9fc22","sha1":"f046c1116af53103ad0c8dde3d8c95bbcd0c25b9","sha256":"b305616751701f9c0b983c159eaa1db4eaf85b4f618890b77e47a668b392edd4","sha512":"9f0e5a9a33e7f7afb39a8133ffe34e39e376d6447e1135c5ddc5821d126ab1eb1cf07cfca2505f39a44ef759b5fbd674b2431f73648959899880db43070fdd11","ssdeep":"192:q9jpRW5qjvy+ik/RGIRS5hJrRSBO1AyOI3tnj54dXu7WHPf7DAdy4ctnvJT:OpAAjv9FRSdRSRVXVf7DJd","tlshash":"f5a2aa5665a21a5430ef9057dbe3b3ae72252243b30ac4d8f6947e70bf1df783196e80","first_seen":"2023-05-05T15:35:15Z","last_seen":"2026-05-19T18:49:03.39242Z","times_seen":27,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/dynamics.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/dynamics.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8930\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78513,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2501), with CRLF line terminators","md5":"ff1b1cca630f24d23d1683683d877d95","sha1":"75ccfb6e25393f6ae4b0941bbf760458b517d145","sha256":"607244b25de9c572404f67af1f46ce437a924f213cc145fbdc31382040925ec1","sha512":"5ceec1d46674f2092e3aae38e6e7ea4ad7bf504b5bd9726ab75aa48453f31260b48ac2666dfa67e0fe061aa5bc76b4f8df38ac383ed841f49255e4458d8b17f2","ssdeep":"1536:/qmYHnsGve+zfJLvOcXTTSncjQwQQpYw4KYLfQUwyQawW9lGd:/qmYH5zfJLGcXTTSplGd","tlshash":"de738687f2791a042eb2043c299678e0fe58d39be0818aaf7dbdd5095fad594633334d","first_seen":"2026-03-16T12:16:26.291453Z","last_seen":"2026-03-16T12:27:24.495777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bgsofa1.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bgsofa1.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34169\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34169,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 642x392, components 3","md5":"511ea5c399645e7bfece3c712760ccff","sha1":"686ad043b40921784545c36248cfe777d734bca1","sha256":"478eb18562c09e54c42c3e173c8ca891ef5c14090b2c9b4e2e6e4d916cad08c8","sha512":"ec5c9e64057e794c6d2107881e0083e36a13678e69acc34248eb21013c4592b850440853a274c025c2876b442407be8a1b3b550c04a61f342d1cdf3f54adf51f","ssdeep":"768:OdQhExDRgfgEPG69kOiZA2O6ayjhbAQ6wC2JE6:3ExVqgs19kJahI1bA8CWt","tlshash":"2ae2e0e28770f706f1f99339568143990af2fa4143237ab9aa25256cedf4123476c3f4","first_seen":"2026-03-16T12:16:26.292889Z","last_seen":"2026-03-16T12:27:24.519177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/wp-power-stats/wp-power-stats.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/wp-power-stats/wp-power-stats.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 497\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1293,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5b71df52c9b4757157a9af74b7d47818","sha1":"4a0a4b48edc845d43b45cdc811282f9cf778f505","sha256":"a29bba39a85e88f357fe7c0bf92ff9ebf2d68bae93359389fe260c16b9e773ca","sha512":"c5c3b301eb0195fb736f1fa38e961804c41b01238be53923ed4ce3c605117168bec3f23edd2a36887eefbe4edc7cafe4c4e189d334161f6255c307d48597a50b","ssdeep":"","tlshash":"3721796558e3b0c2852b313e9a6b421cb0291157381def36fd0c06d49f56926c1babd9","first_seen":"2023-03-07T12:42:08Z","last_seen":"2026-06-27T19:45:47.498728Z","times_seen":144,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bglamps.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bglamps.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 12:29:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48913\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x431, components 3","md5":"4fa3e300773d9c0d63c89bcfe5ca276a","sha1":"b78bdd0138203388c21f5909d59003e7ec847a11","sha256":"bc4db383b3b64f108f827bb1d3eb724ad6b05fec1c3f48b09a6bd4c6cca1f707","sha512":"2f8d5b7ca1af28ec2a54b932cf77800a274007b906b77f0785c78441ab30f985dc1a8b7d90d4b476d32b751c954c161cdd17fe5d93a75c3196fd166b2ec3f6e2","ssdeep":"768:6e4Cv6brQ6flxgZjQmYMc5kGo/WnD1VNUnoeONexjxrtyfuR7fabcOiNY1zZGl+8:WCQsQajQmYN5VVBYnp0exjxrtouf+BfG","tlshash":"3423029eb2d1c90ddfeec0d72914c1468df77a9534dddac23502eab97811880b60ba39","first_seen":"2026-03-16T12:16:26.295682Z","last_seen":"2026-03-16T12:27:24.482904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/nba-ribbon_family-outside_home-lending_227x288-200x200.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/nba-ribbon_family-outside_home-lending_227x288-200x200.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12699\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 200x200, components 3","md5":"71b11ce92b7ae7aafd16c0a6977a21c9","sha1":"72256ca77a6139f02518a95ae02bcdf33470937b","sha256":"97f0f3afd7a6748e7e39e447e31bd9b0da2d84a9c51ace3b3391797c0a0cd6df","sha512":"4c7725a59c5b3e8fa9b95889aa59dea7258633df0d55b09601f727f11964161f0e2ff0ee33e6f93e3a87d6cb3f153a4bdb3b6ed5863786c28b658d55e0b53e73","ssdeep":"384:WhePXu+QgwJyGpH/4UFAdBi4b31JHP0Ne6qXx2YPI:Wk++QfJPqi4jT8Ne1xg","tlshash":"9e42cff291b1432208d4ce634a01177b3c1aaaccf5d8629a6f76e8b95fb83c87904a14","first_seen":"2026-03-16T12:16:26.302845Z","last_seen":"2026-03-16T12:27:24.498344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1087,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 826\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2569,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2569), with no line terminators","md5":"644c3d9618f705d98beccfe07802b0ea","sha1":"10dfb4b21e028e4f2f861d65e6e25c7612af982a","sha256":"ab57cd5b3fb673848d2225db8defde2f543b98bf173dec41b995dc61a9b6cf0f","sha512":"3d295e04d498e99015c671c64922cf9f8bd49fcb9f049d7ccb816359614bb9241d6cf54d70c409f7fb287a2313dac4887f1c8de920c09ea33264445436146722","ssdeep":"","tlshash":"8b51221bf060cd9649b3587ea17ab19523335955b20e8a30a019eca43face471777dcf","first_seen":"2023-03-07T01:42:19Z","last_seen":"2026-08-07T18:50:54.337814Z","times_seen":509,"resource_available":true,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/internal.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/internal.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9213\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2061)","md5":"7c35f323b88c6f6db4bb6b89dcc9db74","sha1":"d903ace224b8d1a4f23e1670033aa8056a10a9e2","sha256":"2517c6b7d82ee0b002dd1fd08fb6bfb2a32945ad25dd06939ca765615ce63856","sha512":"b4883990bbfdd1c32f6b77673f3d4e943c68c94046646dfd599bb758c56bb67902a247a2eda53a551bf4b18fa3a2170da7db8c78dcaba7e9765614017c156229","ssdeep":"768:QuquLfs53iG9CK3FrsR1njciHjwG2lP5lDvDLsJD:QC7CiG9CK3FrsR1njciHjwGGvDvDot","tlshash":"3c036f09b9f21d62407b703e5bef60c872628017550ad9147d4d72e58fdca6892fafec","first_seen":"2025-10-28T21:45:53.208394Z","last_seen":"2026-05-19T18:49:03.36003Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2144,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/jquery/jquery.masonry.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.masonry.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 628\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1626)","md5":"cd0eb3406096ff80266e7c9d7d419186","sha1":"0e3709691bf96233766de30e2fd473b84166c5b6","sha256":"c2e606e1fc82ea3a554aad5d0520e25d2677b89a891dc5c49e7ace08fce92e25","sha512":"3caf5308cdbc5f42f1eccf5944e8ca785ac086b85954765c1f40d91bd9cc9f3fe6eb816ad821b534f9ad36395f4b6b5d361bea24eb272e94cad2824f03faaac6","ssdeep":"","tlshash":"2b31ee46a55137a067b372e5703f610f023aa7bc9242d1e8318ec6e289be4056633b36","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-08-10T00:29:31.409005Z","times_seen":27474,"resource_available":true,"data":null}},"time_used":2138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/lib/masterslider/style/masterslider.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/lib/masterslider/style/masterslider.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2576\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef3808630fa35fe683dd843bc27187a8","sha1":"09bd3682e99986f38bdd9f0fcc142fb7c4dce155","sha256":"d741375bf3267c1bb16279688165099ab8905282abfb824fcdf4e89a34a0dc13","sha512":"394431b66daa9eab1c05b4a365d834b8a5d4877a679211f71ed7a41915d5106d82c17088634b58ac62703f2c1d068ae368ac01ec7fcb3cd92b578c72a80cb125","ssdeep":"192:tqPyBcc9RDh1ZzQ+aBZzzVZJa6ZBOoh9bUkBThVVRi:wPa9Rl1ZzQVPZJzuoDbUqh3Ri","tlshash":"07428278ed93208a6113a3ec7ff147658efaa007ba13189d74df294dd3858ec1c225d9","first_seen":"2026-03-16T12:16:26.313384Z","last_seen":"2026-03-16T12:27:24.526091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/2_2.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/2_2.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 451 x 56, 1-bit colormap, non-interlaced","md5":"38abf1d4b4c084e8263082d5a773c832","sha1":"a1c1e874f786e0eb186efbbb713e19c91549d85f","sha256":"8cad27efd37c1a7e9d6421a3b939b19d4e8353ff56a3c466cacb4efc79577691","sha512":"bc6d9249ce38ba4a81565cf90dedc72c0ab164649d9f194a123b9653c4c8f744aba5479818eb20ed33ea7baba131a401d676aad15da0761fba674a4d3cc251bb","ssdeep":"","tlshash":"98b012c3b2405c38906e2972825c5341de7a15156423037a0427846a99a1306fc9514a","first_seen":"2026-03-16T12:16:26.31539Z","last_seen":"2026-03-16T12:27:24.4817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/11/photo-1-am-i-getting-the-right-mortgage-for-me-value-news-story-august-2015_090815103052-200x200.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/11/photo-1-am-i-getting-the-right-mortgage-for-me-value-news-story-august-2015_090815103052-200x200.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 04:58:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31960\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3","md5":"828f771a27eeadf0125f997ecb636dee","sha1":"5dab3ea4af0ab8a2f27af3c4ae48e9530ca00e34","sha256":"7ca1cd83f96b346b4920fed27d699e660ec35b1155c29a48e5d26b7a8dca8321","sha512":"fdbcf5539e24a9214b14c874b1e1c3087d6bb63400f0b523423e234b44afd79742c072f3bdf56160b59a120020ad0deb9a28f1681ce01a6508ad25ba01a6c40c","ssdeep":"768:NOW44jHOW445kjocYpZNwqaNQuU/3dGZ+:L441445krYTNw3NQVGZ+","tlshash":"ebe2b02aafa45c5af2c152741077c3d69752ac890397bf4bf94ca4187bb26e08e1cf53","first_seen":"2026-03-16T12:16:26.316493Z","last_seen":"2026-03-16T12:27:24.530832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/faq/assets/css/yit-faq.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/faq/assets/css/yit-faq.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 659\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef07fe8fb63e02d491efb310b7fb3547","sha1":"805f6c50355a4cf639c0bebee93d23f3322644f8","sha256":"c59f8940858a582f773f073c6f5a10a4ea52521d3c79a1dd44ebcdb0605e5025","sha512":"89dbea1a9f486d6eeab095ff72ec6b81d6a8483aa0ff0695e31850f626cdc4f4fb0af4eab4bab90991700f74f46d5b33a74216c7fab874d20c86330e10ab5d80","ssdeep":"","tlshash":"2c41259cea463803623fbff09ba511c4f6b111a7e98541793ab01791dfba16cc155d88","first_seen":"2026-03-16T12:16:26.318797Z","last_seen":"2026-03-16T12:27:24.513385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3Aregular%2C600%2C700%2C400%2C500%2C300%2C800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans%3Aregular%2C600%2C700%2C400%2C500%2C300%2C800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 12:15:51 GMT\r\ndate: Mon, 16 Mar 2026 12:15:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c2737bb7f4c051273c7779cac2b42abf","sha1":"1b11b631a809920e76cdc0c5b10e24d8262bb341","sha256":"ee6a61be2bcc5b5b4cc1189c2d8367fbd230d372a73663ff714b217e890ba4ae","sha512":"b1cc6666cc7cb2bbdfa8a7b25ded7be54dc2a555d1b0b778121f04f9c65ac3a187302af540057f5b1645d2e562a231a0e025be2137dffd6eff36fdd044e102ce","ssdeep":"384:0AYqY4tjXqY4pGqqY4xhhqY4tU8qY4FX7qY4o:VosL5+2JbcI/z","tlshash":"ecf22aa00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-18T15:20:48.909012Z","last_seen":"2026-08-09T16:24:47.402582Z","times_seen":1488,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":105,"dns":1,"connect":8,"send":0,"wait":36,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fredrickbank.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.1","fqdn":"fredrickbank.com","domain":"fredrickbank.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.275Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.1 HTTP/1.1\r\nHost: fredrickbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.commonlibraries.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/jquery.commonlibraries.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20783\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21538)","md5":"f60d9f7401667bc8207966c1913c9e62","sha1":"0202cefd91d784a7c8a0211c7186f1710526abc8","sha256":"ead5f454dd1e4f8c8046371db5e5f49777e12117346c60dc6a75e39ed4464dbd","sha512":"4598f816967221b799b1634e958926d7dbca3c04faa285e9374ac8ad930cbc37fbbf2f75b003c31b613828ca866f9ede8014be78182f234159140b600baf42ff","ssdeep":"1536:8KrKy6SH2KWspvM0fCSCK3LtA5btp1dtlAjH1cYT4:wKWsp4jRQH1cYT4","tlshash":"1a630949725171778be721baa62f820e7136d9a7e009c828b87cc5c82f7095c5277fbd","first_seen":"2025-12-02T01:19:05.358909Z","last_seen":"2026-05-19T18:49:03.379925Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2146,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/shortcodes.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/shortcodes.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1917\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cdf6bd6874f039a9e13891aa08c73a21","sha1":"5401170319df8d62c1160e1547bcd0f8d6f38956","sha256":"82b8176d707a3fe2376850eab07a2a54282630c8f345b1944b174ed9d4d1324c","sha512":"42a9c87fdc01aa8afde9f2a92a033d9932301febb6d69b01bbff2fd052b35783acb0d525953bd5f335dc09c3e5e9df94f113ee6d49045e1e7c72807ba2254626","ssdeep":"96:QvlamLGySEOoNhEG9HXZjBSkcMxw5Z1iJLS29dIBkc6lUwWyucX:YLGUOoNC0FqigNkc6lUwT/","tlshash":"e702dc5db1a62db5d873313a8e3a80cceb364b1780009701b9adb5b84fbc544a566fce","first_seen":"2025-10-11T10:41:43.848006Z","last_seen":"2026-04-17T10:37:48.660616Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2140,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/logos/assets/css/logos_slider.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/logos/assets/css/logos_slider.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 642\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2023,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"608c207b4ffa9d8a5ab3e39c0e340246","sha1":"ef06ef4bf87b7c8647d3ed5c0d60f00ac0f0a9a2","sha256":"038158096d08e6c0912ea2acef09b41f586497604328eb200c7695ab62ce58cd","sha512":"dff402e8480dfd861493e56c88674ade7ae26e6ddbc4eafc531db89c613b8c03347cc4069a7af3dff1f1e37e0a7a6410067337ae8d3b38c2ad30f356bbac5d89","ssdeep":"","tlshash":"a641cc0cd95b0f92d3738264bb7a878ee7c9805f4b496069f6f1944ccf3b1988116ec8","first_seen":"2026-03-16T12:16:26.333389Z","last_seen":"2026-03-16T12:27:24.473609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/bootstrap/js/bootstrap.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/bootstrap/js/bootstrap.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12828\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d5a03d9cca57637f008124916b86b585","sha1":"1dadc506590e60b7869bc86d72fc11bd2ec7e47c","sha256":"8e5884d1be3041eafbab27d898b8e401e0263c5bebaba17c97d82240064a362c","sha512":"2208e34756e1b4c27b0ef3ff5cd4f52254d1a447365dddca22fdc7933e5ee5d0f78a47d446d1bc2ffe3b8f95b5069d9ecb6657ca64193273f6341cc766b3afa9","ssdeep":"768:wNktVCkWDqHsrT7aqjvjxrPbDekfZZFvLlyPBVNdWofA:zWDGm/ekqPTTW0A","tlshash":"ae534f167bb430a14b5b70aa8cdf610c7238951b554bd42838ad97d06f50b38a3abffd","first_seen":"2023-03-07T18:22:27Z","last_seen":"2026-08-01T16:46:52.338661Z","times_seen":136,"resource_available":true,"data":null}},"time_used":2157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2147,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.scrollbar.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/jquery.scrollbar.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6070\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30235,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c7e8099ab5cec198b32f9e72a319b69f","sha1":"214f34979f84f332d3849fd2bd8dcfbb8dfbf0c6","sha256":"ad06ee18cc65fb35d9f6e65b92d3d14183fb69e8c538e815e55d17b5a0402406","sha512":"fb20f46dbe27839ed4e1efd67db245e9074dadccd2f9b756e586bcaeb8257cb96b2a572d316e4ff11bd458329507d3bed95a4fe3b9f5976e532df2af392231a8","ssdeep":"384:/DSawPuboc+sgFykB5/gijpZjfBtHCnt+njylPiAH+1GYtn9:loc+sgFxBXBcQx9","tlshash":"51d20d4ee9a224a255ff316ecf8b43493272a017a34dd4c4395e9ef84f80b385756b78","first_seen":"2025-10-28T21:45:53.212778Z","last_seen":"2026-05-19T18:49:03.434779Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2142,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/animate.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/animate.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3877\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9d566e6d44c01d736818f650b6cc7f0b","sha1":"a1f768f16ae98d737d22bdf28222cab734bcf1e6","sha256":"224a419c96b5ee0e1cb11055e7af71123e00e7888d1199b72a5dfa633e313e27","sha512":"78d33076dfa1645d3df38db5e2494f86e8a1094d4966651e7fcfb3de253d14a39aea79d96521eb0fc97092c9562db5ed8367a46766d5453220d5427bf75b3d34","ssdeep":"384:21g1I4w48151V4t4h2Z2UP3PjHf4r4wVbVZ4U4t:21g1I4w48151V4t4CHf4r4wVbVZ4U4t","tlshash":"6c73fc6e1941118447738b29c7de8e68db3d917318122eee72ce588b8fb6f6853c5e07","first_seen":"2023-06-12T09:00:11Z","last_seen":"2026-04-17T10:37:48.556785Z","times_seen":8,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://transcorpbank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 111817\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-10T02:46:53.22481Z","times_seen":324024,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":89,"dns":1,"connect":21,"send":0,"wait":31,"receive":18,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/favicon.ico","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/favicon.ico HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:50 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 152\r\ndate: Mon, 16 Mar 2026 12:15:50 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":318,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel","md5":"314445d27baf1cf922a58d8484fe6157","sha1":"fbe0091533c0be552df8bdf8521071d4c3241667","sha256":"1a3d6804bf54b0e36fceda7e839cece501e488a7d61b3f1bc1c251c30d2ce585","sha512":"c1030ca1219246c2477f98f7000642c7dff2af0ab8419de1ecc1891cf49284589d92835bd90a5c7cb77775becc9d6c6163e645c3a34fe66c7e5782369c1cb785","ssdeep":"","tlshash":"98e01246f612c101e0523238800f9b6086560c80c3b80f4a00233f8f3f3da8a8beeae8","first_seen":"2026-03-16T12:16:26.337957Z","last_seen":"2026-05-19T18:49:03.415237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/essential-grid/public/assets/css/settings.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/essential-grid/public/assets/css/settings.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 02 Dec 2018 22:15:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8537\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43369,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7136), with CRLF line terminators","md5":"b076b1b2aaeda8dc65c654034dd1c186","sha1":"5aef6003a4f592e3225889cd2675f43d061254cf","sha256":"bc8c8dcc65d19dc897cf3760da01b97bd8b0e3cb69e761dd5b1169a5905905a8","sha512":"613401bc8e69bc8d9e2b0f74bf811ce7f33a55c704d1e8824191d3b666643b03389f50a68e0f476990c059956282adc593dc1151626c8d1b0c8e13fb31ad14a7","ssdeep":"768:ya+dBQ8AAe6136xbBY6yvyV9Ijs3sbQPJt0T9xZ1wfYqwYLVG7DC8D28n:yfB7P34tY6yvy0Q3sb4Jt0TfZ1wf5G7/","tlshash":"6c1351f294872d405727c784a7da62e05f06f131cac34cd6f096b95cd3ee6a853a92ec","first_seen":"2026-03-16T12:16:26.33898Z","last_seen":"2026-03-16T12:27:24.527236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/12/bginterior1.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/12/bginterior1.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21138\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21138,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 648x436, components 3","md5":"be1b90bdb396a3ff53bc65d23263bc67","sha1":"49107dc15ac1da626672a63edf3edd3bc74a8d44","sha256":"4ee7804ce6062ef00be48acab4a0faca84c8e02747dad5fd9bab303464c97ac7","sha512":"3458282a1b49eaf1914afaa51de2ef7822a7ddd38890c566569e0510775ee26161d2eebcf9c6033f7f887d0bccc31481923eb1de52478f1927294a35c4d6ad39","ssdeep":"384:X6MPkwNktUJyHq5yykRu/d37zpWe/DQ2MNgCKO97jBKAWzugSVbYo+c3osDXG3lW:X6MPDN+UJ2q5yykRiZWe7Q2mgC79KAh5","tlshash":"ff92c0a367e5a86cda3855b44203de1ca16badc620081ee3ed59e96d173f003cf97835","first_seen":"2026-03-16T12:16:26.340158Z","last_seen":"2026-03-16T12:27:24.479888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/comment.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/comment.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 890\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"618d841f2a011c31862e20cf84e2cf35","sha1":"93d007b80cb5d89d76d7c761bcb256753f9dc25a","sha256":"82dcf25516d75203734877906934821d4b8ad30a2042e17e25d5e5d1f9b99a08","sha512":"649e695090bdca19bbd2523fc5c5893ca42b9ea5c243c4c07549a7fb23cb3136898134e37c3acc82d611a8a032dc30a6447fd95c8bd484b04530389f9c4d0a60","ssdeep":"","tlshash":"7b71ae8df9c226156137b635ffea4a52ea640223974180a9ffc451088f39f7c4a81f8c","first_seen":"2025-10-11T10:41:43.933859Z","last_seen":"2026-04-17T10:37:48.666747Z","times_seen":5,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/img/credictcard.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/img/credictcard.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/shortcodes.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6464\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 149, 8-bit colormap, non-interlaced","md5":"0f801415c92e07df53720a44831337d6","sha1":"4cf8b91ba1daf0d42212c1e7f73fac6f994fb675","sha256":"5ebec8fdfba9c21e9cb3f6838e47ad0ce275ad1f86d60db7c82cc57d9ecb2c90","sha512":"038829b433728e27ad4476dda5a74fd4dc61afc1ad91e198aca7c2d5a29824cff65095588072d892ff927017b5371041754efe7f357d92d8deb4a6d11e4797a4","ssdeep":"192:3ur0TtpqjlZuq1mmNEboh2z+PrgQUOQmlfQ9JBqrZ:3ur0irVmaQohk+PXFjxQIrZ","tlshash":"3cd1aea990dab91d8262600efe29208e2c01660631dec9d71360ffbe55b830a19c5ee6","first_seen":"2026-03-16T12:16:26.34245Z","last_seen":"2026-03-16T12:27:24.554737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 239\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with no line terminators","md5":"765234021a972dcbdd5ef011a4870b28","sha1":"49c7cef1785f857aaca8d1757ac7aa26041c635d","sha256":"c6361a648d15fdf9cad312750da2568bd07a34a58e2ee1e1cf6b50d878e11a08","sha512":"0bbcd337161b4a139610f22dbc9e1ea724dc0250f6be6b65a70149690345e0a76a1e3e6c4b4fc5ca6c2d5cfbd9f4db80987978b22fcd26c58d6abac4750471d2","ssdeep":"","tlshash":"33f04c27b19226b59afa21f1fcbe27d03507088830d00940b40685593c281df1726b9e","first_seen":"2023-03-07T01:40:24Z","last_seen":"2026-08-07T18:50:54.268702Z","times_seen":806,"resource_available":true,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1075,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/banners/css/idangerous.swiper.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/sliders/banners/css/idangerous.swiper.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 431\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0009c7c24da4b4084616198055cc3f20","sha1":"8dce88fe5f41151e1b7b3c786cc4778a737c3f9e","sha256":"dc95ef1e0a7e3a5e6549dd67ec429a2080d863ea7c75adfcc7cb675f4b7b4e06","sha512":"d06c4471985ef90512c0603347282b4baaefc5920fe7add7070f76cf279fc6e5fe9d6e62a4be29d35445a226bbbbc6275205c572a5b43e0eb78d039ac85b1de7","ssdeep":"","tlshash":"bd314cb46110351581338f1d47c7a6358b3e95626923dc8f770e8f0acea33aea147b9a","first_seen":"2025-10-10T22:41:28.806309Z","last_seen":"2026-05-19T18:49:03.368106Z","times_seen":8,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/apple-touch-icon-144x.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/apple-touch-icon-144x.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5043\r\ndate: Mon, 16 Mar 2026 12:15:50 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced","md5":"a34332b6d7c789584228c9b97cef5eb3","sha1":"73a91e2f714ed0d679983d7824b576fbdb1f0f53","sha256":"818ca52bb6eaf151c612d5e1412bdb8d444940a50bf78394055732f5288a37fb","sha512":"e4b578e93d85f7b21097eaab3fa9b6dbb01ef3844320fcee5d2c71fece39da5447091810fd08bc5a267df6c69c913d21e2ff0366152520c6c70bd69c5d45973e","ssdeep":"96:FQA2Hq5q5l/bMjxEo4Gv64u3HmRy3/ayzTK3lLOVUMTkoZp:FFw5pho4Gi3/D/sROVUefp","tlshash":"42a17d5c1b835ec3a218dd5358d7d446eed5082489a047a2ffaba825ec450e8560d6db","first_seen":"2026-03-16T12:16:26.344912Z","last_seen":"2026-05-19T18:49:03.396102Z","times_seen":5,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 705\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1847,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1809)","md5":"f9f04f6680994cfa1ba57dd9304c9517","sha1":"4374cb0b65492cc936d2fbb3289494c4b139673f","sha256":"d03951b3669bbca039250dd3ea876df0bacc19c7fa6bae488233f7fbe434b0f8","sha512":"87a35557ee40a03ee60ff5aa6e4a01dfc91e24e3a35f499ad96ebefc3e8a59059b0d56c8c0c9c0035e2bdb015fe1a30bdb4a985d9c3843d3b1f801ebaf7a2bfb","ssdeep":"","tlshash":"8e3120cdb133f87a26fb2a953027b5c094792467f2a5902594c91240cf68e86a433d6e","first_seen":"2025-06-04T02:59:16.265157Z","last_seen":"2026-05-22T08:43:01.000111Z","times_seen":9,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/Transcorp-Bank-Logo-1.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/Transcorp-Bank-Logo-1.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Nov 2018 03:01:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16803\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 58, 8-bit/color RGBA, non-interlaced","md5":"d7edeba0e0c5560128a45ae51341da6f","sha1":"ec8adb70def20f8a891a13ae4e1fbd65fc47fa03","sha256":"e13f7a39a761fef7d19b9bb6ca97b369b2b2163bb3f20eaea158ffd8889922e5","sha512":"79b3d8db35aae217f23fb87bff6c9c6b2510f930c9e7f5d6dd43921fd184ef86eb5e8024feea8a403b811203b9773abbc38a52d3e40d448cf39f0ab01a02b5ec","ssdeep":"384:6jJsL5f21P6fmn2YT397rr0ubNSUbWCnCqwrUsTfYHR/rv0Uw0T:6NsL52F2a39fQEdWJqS7Yxza0T","tlshash":"3072c0c7911b0f31023c9674af1d58e0053be1e93749f91d98386826f2e574b7d8ba6b","first_seen":"2026-03-16T12:16:26.346917Z","last_seen":"2026-03-16T12:27:24.561323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/woocommerce_2.3.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/woocommerce_2.3.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 884\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2628,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e8d2674f99ced631470d4de78f11b4f8","sha1":"cfccdd11642b5af9173c2a36feceef6017bcbc48","sha256":"c97ff3189f1dd548d63c61720e65dd63336b7a48f3d675f2fb144d3ceafd15f0","sha512":"36a0e68ee72559cd8ad24b9025767e5e91576535569c48e90c6e19669522141e46ccbae17d25fb140e0b2c23f672a9a8ac51938f18224421ed5e5f5c859ccfcc","ssdeep":"","tlshash":"0351ddc971e122259ab77238df1ba61dfe768067b45003513c2c02d51fb859083b4fae","first_seen":"2025-10-11T10:41:43.838563Z","last_seen":"2026-04-17T10:37:48.692862Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/underscore.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5680\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16194)","md5":"6a3a434a1360cc744341e97de9177bc6","sha1":"d110825c3252a677ce8b6fd81cd2eda0201e4e1b","sha256":"4f5b2528815d8b1cd9b68b1a4bb1fe689696f8dcbc2c4a5104343b886ee68828","sha512":"a86a62d78d101aa6e8045ae4966604415a808a34d686ba2e0dcd169fa93ea638652b2926ff336186564136973cb3e0870e725ceeddd23fd8fa40abd8aa6fffd0","ssdeep":"384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOy:kApB5IHtTY5FrX","tlshash":"af7271c839d2f85a97a3b0b5003f009bf23e6e652caca958d195e0e97cb484dc427f5d","first_seen":"2023-03-07T01:40:25Z","last_seen":"2026-08-09T23:27:52.456472Z","times_seen":1845,"resource_available":true,"data":null}},"time_used":2134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/essential-grid/public/assets/js/jquery.themepunch.tools.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/essential-grid/public/assets/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35671\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26857), with CRLF line terminators","md5":"01bf3f6a0f9167f5d98fa4de9bbf8180","sha1":"9ed99b732b277edfe145f719b5f181e05701b5d7","sha256":"b870f915ae88b2b25584073dc2c566d6f1860d378fdb90887e169a63eed0f703","sha512":"06a705c43a72086300c3daa09855fa282178cb49602d7fff9bb257dcc19d1cf3446b40a38606e6fc7390dcacd0a3373ea935d46c2404b7d884d281c7b2038fb8","ssdeep":"1536:iQpnayKBPf8nS1ViU/thDzR57ON0IbDQR/gQU3uxjM+7f08+nxvFC8/eL7XdnFIF:iJf8YiU/6zUR/h5v7fYWGeLr85","tlshash":"07a329ca3662701245d622a5517f0643723bdceab4098d2cf548d9dd3e3cc9921bbfba","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-08-09T21:31:56.179415Z","times_seen":968,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5319\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19302,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19302), with no line terminators","md5":"af708ff0d42ff8d8543c6bd773fcf535","sha1":"38baeb2a2460523bb2038814c14671939378fee0","sha256":"60e52a19fe23790b163dd2a27b256eda989ec4b90f79b0abe0caedb1d44a0796","sha512":"0c3560eac0bce104fef36d0a83b5805545d285de14274158d7734a9cc130a972609788025441ec9e4761ec51d591617fb4ac5bdb4b5e5614c57d0293218988d3","ssdeep":"384:zvoSaj1haWTpcYrJhhpuDqPHXWExbFYnfOLSEApytwFCDf5Yhrj:zvFaj1haWTp1VhhpuDq/XWEx6naSEWyi","tlshash":"c182c649b95070f652b7363bf13b3f19b1372836944591206056e8387ebde4e222afde","first_seen":"2023-03-07T01:11:28Z","last_seen":"2026-08-08T12:03:01.706115Z","times_seen":1300,"resource_available":true,"data":null}},"time_used":2134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/wp-util.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 523\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1046), with no line terminators","md5":"83118aa939b5832dd4e1cad8b186012c","sha1":"297a768e2b68c8db53d4ac0f6a77396cbc8816a9","sha256":"080cf3de5031b9caac353875e8969fd80a548c9f39fdf4627a8c65abddad8b04","sha512":"1357bf9d3bd3e828e8b844a8be502dd428ab5aaa8c91eca62d9df06f72b292b2c197dd577bc535393455f46facfcb66264ea3314eb0a3f0ca90b686c0b8fc47b","ssdeep":"","tlshash":"9d1139da365aa9f3d1333074d37f031f7131ac2591249da0d09492d0ae74987b1b7a41","first_seen":"2023-03-07T12:07:48Z","last_seen":"2026-08-06T08:55:43.916777Z","times_seen":238,"resource_available":true,"data":null}},"time_used":2125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fredrickbank.com/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.1","fqdn":"fredrickbank.com","domain":"fredrickbank.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:53.274Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.1 HTTP/1.1\r\nHost: fredrickbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/css/ywot_style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-essential-kit-for-woocommerce-1/modules/yith-woocommerce-order-tracking/assets/css/ywot_style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1476\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3380d1b08264fc854bf34db6980d7f4f","sha1":"feb25f1726219be4fe0dca4ca9afc66fb803e977","sha256":"9715e377be39dbdbf51427ed460a879b2af1dbd6af62a00e2d013f2ba2be1ff2","sha512":"ae99d95f5abf77fa70c8925f23c9d12ee8536e80123cf4098269295c40a91a80c9db7104a7a91ac37cfd6d288ee753e66079e1418721417caef9a83183af8c5a","ssdeep":"96:VJTlqeCZyBpvppnDdxZyhLpoIHJyZPgcZorGdXd7WWiZOxai6GW:VOeCsgoX67","tlshash":"1812e2ebfb8037444d33de8993caf324923e42623b7badb533825949450f65883a3657","first_seen":"2023-04-06T21:44:07Z","last_seen":"2026-08-09T05:53:51.347615Z","times_seen":944,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16870\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003), with CRLF line terminators","md5":"b4b495a7dc7db64771070c7f67813615","sha1":"f36b9f296e3fa9eb6d6e18841540129ea95861fd","sha256":"1dfd5afa2f6a618d8b7450ddc586413e1b75499322d6534e01accd990ae66925","sha512":"a4ed50e09dc47921c637c2c4eea51d6a8d91f62683a530a54b8d95418c3cbbcad5d105c4cc929f0fdfeed9288beb84bdc2c8d16201dc1212c6ea5c813046b4ef","ssdeep":"1536:nCnzw4tFco78+3hSrk8chwmbtWd2YMdYQ8Mv3xVgnug1QukBjc7NKimnD+NwAIIS:nCnzXQo7z3hSrk8hmEyncNKJ+yJN","tlshash":"b153ea64ba20347694bb2265d03f461572b15c37eb02c4a4e5e7687c6ff8d89236bf8c","first_seen":"2023-03-07T12:38:38Z","last_seen":"2026-08-08T00:27:30.818427Z","times_seen":804,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/new_york_city_2-wallpaper-1280x720.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/new_york_city_2-wallpaper-1280x720.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 01:07:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 730980\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":730980,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced","md5":"e6b7c07f462ee4215c02debaa276869b","sha1":"542f1370225ef435bf27f42c92072d886b888c41","sha256":"480890434b0fe0ebaf44c33807b5276b162c7b22a99cf5eb58c29b4db8d0a575","sha512":"f9d2442f4bfcfe5e5b765bf92390832dbf1f18ed3cc38db2a043ade3ff6630da49cdc3c73c26fa93e387917a8b013abab3364b01eb46514ddca5b78d025a8de6","ssdeep":"12288:PgxmhwHOiJ31ggR41FsKYrREqKaJB/AKvmFu+FBYQTMZc42l5GqFJG7ns9KmtapC:mKeO6d4TsXrREqvVydLYdchg3dmtYyp","tlshash":"a0f4239f5204e9be92860010c2def6d63fab74e370637af64834b27585e20a736761c7","first_seen":"2026-03-16T12:16:26.351895Z","last_seen":"2026-03-16T12:27:24.50233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2017/06/920x920-Fredrick-Bank.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/920x920-Fredrick-Bank.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 00:46:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166534\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166534,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x497, components 3","md5":"f0d7666801352665f41faed2fedfdab4","sha1":"37177002a988086005e12fd2c52f2f83a0918bdc","sha256":"741b239ba18ef72c04958129ffdc348f9d3ad20fe5bc398ee28f3f942ffdbeed","sha512":"2196dd1686f15de95efb045ed94ac2633ecbcbd152fb57535635a35c4ade1a8d4d667fb79f82c28ba816f9a91d8c8721e075ecfba8e471f0e05a47e02e4df565","ssdeep":"3072:Jwev7AW+Zcv9aZ90te1HGVOeQClW2Gb8sZxsV8nBixBIlGDB7m5FitCl8O5nO:JZ+Kfte1mV5LW24lZxsSnBinIlIwjitN","tlshash":"95f3125b5c02c338a8ec547f16926ae7fd05fb79b44318aa63319918e7b8410ce9d2f8","first_seen":"2026-03-16T12:16:26.353147Z","last_seen":"2026-03-16T12:27:24.518254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/contact-form/assets/js/contact.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/plugins/yit-framework/modules/contact-form/assets/js/contact.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 652\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (539), with CRLF line terminators","md5":"a596f1f8bdc2710584c2f6f779a59275","sha1":"d0ccae4e6ce45e16507d8a45f4fbcf50ac5f7b7f","sha256":"60a43929b755475da08043e026f3ba77c65e6d03f22a5a886b8ac0cf3cd2c001","sha512":"13748a03b6279e4297ceaeae34a021414a621297d80c5fabbfdb4abca4ddb51d3ac06c2bfffb9ebc62681e3ae936345f9201c073aa621fa64cc2c3a950e8055c","ssdeep":"","tlshash":"4b312044737961e261b22a1629bf270232b2d97ac5158d91307a18f81e7cf9c2572b3f","first_seen":"2023-03-10T08:38:33Z","last_seen":"2026-04-17T10:37:48.656461Z","times_seen":10,"resource_available":true,"data":null}},"time_used":2155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/gtranslate/arrow_down.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 208\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced","md5":"20a650477130c7c2c62c5647131f545b","sha1":"4615101fcc5df1fab3e7dd516d058e1052a8fcb2","sha256":"068f35dd132804c7effcbca65f9398d34351339ed2fa7b20ef5e9a6221e76516","sha512":"9b5f312c3ce5e504de7b2b1ee4bdf21f8a27e04329b2793e12f685d70e53d02cbb5e3094f83950573e814303900b77f099331dd4106fb534773d6d60736ca003","ssdeep":"","tlshash":"fcd022c6fbc00f1dc9924a32d6788410a87a9bc4812467680881c0832185ed880aaae3","first_seen":"2023-04-08T17:48:50Z","last_seen":"2026-08-04T05:24:10.819428Z","times_seen":258,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/yith-woocommerce-pdf-invoice/assets/css/ywpi.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-pdf-invoice/assets/css/ywpi.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 346\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7f6a288e730aada9d6610a3622b0b465","sha1":"67dfb16d022653d0dda33ffe5fad2f1510c42ed2","sha256":"cf369bf9b09a4ef74e6cb8985f164df88b273e758d95c47fcd62def2548e6f1a","sha512":"2fbd797e85f6b8d486ea718c021fcaf84dab4a34174589e1558f7d9a688f9fee14e00ebeb4aa9827c8baabdd649a3035d141b1000d18c9ff96ed6a505289fb9c","ssdeep":"","tlshash":"ba41a040f0b6ff8f219ba01615bff689747c9072a2144a3f2a3b70a0ef574b845bb546","first_seen":"2026-03-16T12:16:26.356421Z","last_seen":"2026-03-16T12:27:24.544731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/revslider/rev_home/2_1.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/revslider/rev_home/2_1.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 335 x 57, 1-bit colormap, non-interlaced","md5":"6659a76321d821d6f6ab076ff852180e","sha1":"78c27f2ee69a5abf8a719f0c332a9b039da755fc","sha256":"a43a52ac95866353e484c0defb1e7d77c7b513bd6178c0442a0c21d3d10b11ac","sha512":"b4c85097fa40237aa738ee581b0448644fb340a76293bd6903ef8d9234656cec4bf6da5adbb53f3b8708d3e464f6a36b52309c4de99c7e57ae02ef6d937a101e","ssdeep":"","tlshash":"e8b012d263248cb8c229393b86198806cf20223e952e6a46c245c4a40ca2286f0cc7cf","first_seen":"2026-03-16T12:16:26.35763Z","last_seen":"2026-03-16T12:27:24.503084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/translate.google.com/translate_a/element.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /translate.google.com/translate_a/element.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 609\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1642,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (767)","md5":"8d9ea020c49d6bd1c3c2ee049d7f6737","sha1":"6eea1d59b7f835a3346c033e66d23450879f61a3","sha256":"f4def3f2923cd573eba79a03836a9e607880d92c4fbedf50d12128198c9949b5","sha512":"075aadf4b5a5dc07f449409687feb31611707d3317febb911b781e586aeef1cb10b5aebf9992dc485f5046501232138fa38c83f7aae5a1f530ccbb5e115feb4c","ssdeep":"","tlshash":"7d3132027a22ab2841e5c840b3bf9a99f4bab0354c349480a74ed9397dd4ece826dd65","first_seen":"2026-03-16T12:16:26.358922Z","last_seen":"2026-03-16T12:27:24.516093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/essential-grid/public/assets/js/lightbox.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/essential-grid/public/assets/js/lightbox.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13154\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64375,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (410), with CRLF line terminators","md5":"c44a393875498a2f059e6973d0649107","sha1":"55c47d951096307cd6bfac8f7e1bad62ef1f29cf","sha256":"83d4e86971a0102848cd562ef58a9ee1a2bad3b8d98e5860c17a3276793a2ed4","sha512":"5d36e7fa559aae08c984c1a0582378c3e05f9a1756bca83562d17f63081c8ff7936ff321c11ade469a7e1c00303bb7a65fd8e0c6b9feb9e84604827d8ff7e6d0","ssdeep":"768:aaOUkidZZgTnfuRU7n4nCBL8IM1+5BztQoWNmr:7OUkiOuSVBLx8gKQ","tlshash":"7053205a6694253ac0b77339ce5b810cfa33433b934245277ebc81656fb282467b5fe8","first_seen":"2023-03-07T12:21:21Z","last_seen":"2026-07-31T13:26:20.254254Z","times_seen":176,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/11/28-200x200.jpg","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/11/28-200x200.jpg HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 25 Nov 2018 12:22:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33529\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=200, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=200], baseline, precision 8, 200x200, components 3","md5":"5949bf4fd2553e127b98adf59641ed01","sha1":"f336282abc5fed57bd0cb010768985d800f478d7","sha256":"dd17765f94dcce4311193077446850873c9a7bdbc056aefb2dd28eb3c3c9e903","sha512":"304500eade391d3a7c1eff6a7a3a22ab621ebac55207499e1d880b9e47a0b6276121fe2713107f3f206e1075e613f053fb6b7222fe345a469f8302f5bf2aaea2","ssdeep":"384:/M+7YQSgB+RKgGd+YpKDi7M+7YQSgB+RKgGd+YpK5n98HmUFCunfgmgs9Mzg1OCs:kaPSTAgGpg3aPSTAgGpgUfRugAEje","tlshash":"4be2be24e740ad13f4d0067195eed25b9349ce5826a39bc279cc7d91bfbb7e09c6c282","first_seen":"2026-03-16T12:16:26.360715Z","last_seen":"2026-03-16T12:27:24.535592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/uploads/2014/11/49427_HomepageTriplet-384x216-Mortgage-200x200.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/uploads/2014/11/49427_HomepageTriplet-384x216-Mortgage-200x200.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79334\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"e6ffb1510c40bb70a8416bd570c335a3","sha1":"3e3dd76fdab6d03ab2c4ab95be788466d2f1df76","sha256":"07c116b9e60376daaaf79d3581c2ac3ded7a37f062566924bedb236e4565c040","sha512":"667ef0e73f4e92c14fdffc23bbe3fde80def2b22f3a9a8afb2651bf79eca3d4a119b454eb30c4599d2347274fc16cf465d991a720d80d80bc871b5736e91e1bd","ssdeep":"1536:tHQhkI/VJeNBvvUGfp2EVKbzjMhOpMcsF7HqiFaI0zlEkPFIqEms:twhkI/yhRfcEVmzsOp9YqDBzlBM","tlshash":"a57312f7b4b568c3e908200a7fa3d30ab1697c528a66911c3166b7231a7d3dfdd5b350","first_seen":"2026-03-16T12:16:26.36168Z","last_seen":"2026-03-16T12:27:24.497165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/jquery.placeholder.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/jquery.placeholder.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 570\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"f98b1966fc57c809e9384dddbc09d592","sha1":"06d746f5c377a0d0ee72e9ac9f0a802b8aebf99f","sha256":"05438c67cdd2fbfdeeed44eae35e864a03bd13da7bde6e95ea47d0271763ddd2","sha512":"1bb6b99fef777493c4fd842f9c9de7a85d8688519e54585f3867d4945bc917d697bbe5f7b80ea4b1f9a65a832445708ee35160a4120a40ce9c5882b4af1be969","ssdeep":"","tlshash":"8031ba19f585fa9050fed9f020bf0902ba35264291c3458c353a9ac5697dc894372eff","first_seen":"2023-03-09T22:10:25Z","last_seen":"2026-05-29T16:57:07.867548Z","times_seen":21,"resource_available":true,"data":null}},"time_used":2142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/common.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/common.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5677\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (408)","md5":"63298668adb713d8e88a065cacbf7960","sha1":"fcf27d5fb0f5cc5d883dfe4554a655b695f2d773","sha256":"63c2c9dd88dec8355699f4bbe4a237a582ac293c1277de4a6941bf8318954f61","sha512":"dc278bc5dfb816d6a5f78b368fe0461994998a8b630a894ea775b2c5a903ca9500b8d1ea534efcabf240c1b3900a1d51485f6798c3343c270e1d6520065a33e1","ssdeep":"384:EqXp9UowLDHpp/1oppKjNhPZ8u8G5eWLJo5uGb5Pw:EqnUowpp/1oFw","tlshash":"18b2410ab8f62d62047b717e5bef94c06671800b8649e9147e1d33b48f8c768e1b1fad","first_seen":"2026-03-16T12:16:26.36377Z","last_seen":"2026-05-19T18:49:03.387616Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2134,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/core/assets/css/wp-content/themes/nielsen/core/assets/fonts/fontawesome/fontawesome-webfont.woff2_v_4.4.0","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/core/assets/css/wp-content/themes/nielsen/core/assets/fonts/fontawesome/fontawesome-webfont.woff2_v_4.4.0 HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/core/assets/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 22 Nov 2018 06:16:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64464\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64464,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 64464, version 4.262","md5":"4b5a84aaf1c9485e060c503a0ff8cadb","sha1":"574ea2698c03ae9477db2ea3baf460ee32f1a7ea","sha256":"3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019","sha512":"05196036c41398616c077925fc4bf252e81f11b6ebef8745047d75cb2c8b80441b8c3593f4d5b2617089e9f3d8d957f9edcdf8e43993661a277be8f4b6a32111","ssdeep":"1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q","tlshash":"a753f162a0233101d19918bb7d39ffe22b01c1cee34659c7dda62c5338e5d5472abe2e","first_seen":"2023-04-05T03:42:19Z","last_seen":"2026-08-10T01:16:10.435924Z","times_seen":26154,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/gtranslate/switcher.png","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Nov 2018 06:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 207\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced","md5":"d6ae4f341752017ab0e603e3bb9260b7","sha1":"c84c11d3bc69c7e14b2f75e7dea6e0ac93dee1e2","sha256":"8c2ad9254589a597b65dae284a6da49dbfe1e3c8e628b03b80883d980fb6435e","sha512":"136f04b44fc3194fb2dda6dde51ab0b83ce15bcd129ead332053114675423d9e21e02769969d7037bc282f59ae11e673b61e2b3977253c54d8c5270fa72228fa","ssdeep":"","tlshash":"aad022c2b3841c68db7b0423cbb80022b87e1a5c65012b1c9484c4e213caa8821f43a5","first_seen":"2023-05-03T05:26:52Z","last_seen":"2026-08-04T05:24:10.7731Z","times_seen":237,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/wordpress-easy-paypal-payment-or-donation-accept-plugin/wpapp-styles.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/wordpress-easy-paypal-payment-or-donation-accept-plugin/wpapp-styles.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 179\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b2d6dd6c5b8d13ee574ac6129b15afd1","sha1":"39e8971f529106295b8a512fbd0817a87bde5aa7","sha256":"ca3ad4851c4c16f3f78d4601a0a3760bb380776130570b650c99ab85e13347fd","sha512":"d36bd6ecd7889de8242f3296434271bc7ec80a78b46e513a4caf7f666a477aa4de69150f9e985897ab22ed5ef80fe478c2e8cd1acbca23a17e6809226dcef06c","ssdeep":"","tlshash":"92f0b48d2890b959d39224345bfa0153f5ee046329007a4274702284cbe5eb50469d9a","first_seen":"2023-09-16T22:50:22Z","last_seen":"2026-03-16T12:27:24.478737Z","times_seen":9,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/fonts/retinaicon-font/style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/fonts/retinaicon-font/style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4965\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74933,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c588a22496b2b3398ca77f1fd7ff0885","sha1":"4ffbc1e5f88c43f816ea8bccfc87f8f4d68ef98b","sha256":"2dd02d6158520540f052adf5c8a7027f0082c22a6bc28e85dd1ef339b556ee52","sha512":"848deee60a79fdce9c3030b8729e9d9bcbedc3057cb11d99dde74e43026db1797ee5c3ccd293fdaf55be2b77efa5aec47a0d4534f406798ce944fdcd1e35eb19","ssdeep":"1536:4J+TQyEtn2RQvjBGfOcl2mM7Utb43dPdqkjzLDr7zbCtzPtntHrrfnokUIoJDJvd:4QmF5tFD","tlshash":"d9732ce0c9fd49801301f5e562473320eb3cab799d566c4cc7ba3a9da5e2a10e1927df","first_seen":"2026-03-16T12:16:26.366733Z","last_seen":"2026-03-16T12:27:24.517476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/portfolios/big/css/style.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/templates/portfolios/big/css/style.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 532\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2286,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d665ecf2eed0b634904b13a1d286306b","sha1":"ed0e29e154a50dc41b3106b14407b5cdf1c3777e","sha256":"ff32fd1784f6e799241d652da168f22c8ce9148d304b86aace8099be610fea29","sha512":"6937f044b5701c581df754bc2fb4904aa4162f6444c9487b0ba182e173d61f7acb6d731f1e33dae7e2f8a131cb3a8463643d65e8ea0a3eb81934cfcf4a9bd948","ssdeep":"","tlshash":"29414c7f5a250c0349339e1a63d26631ed34b8e31fd6b0d637c4d3498f21e581582fa9","first_seen":"2025-12-02T01:19:05.420667Z","last_seen":"2026-03-16T12:27:24.508825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/lib/masterslider/masterslider.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/lib/masterslider/masterslider.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25997\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65353)","md5":"0056dd352472d65d7aecae35fbab7364","sha1":"54e72412e1c4eb9f9e2f856688334898828db83b","sha256":"95f67093146b967439bbde1231f47706a7cb9419fdba49cc60217c760dd3a908","sha512":"68b43dde7001ba74f5d368a0fe7fbf2a8f9cdea6a708ea834a6560cbddfb7d53810288234320547038723052e0762e0a17f358d1dcd4a010a7ce7f621c258c29","ssdeep":"1536:WmbarnaNv8gcdGX0cOHycZmYWINV2koBZE:dbaDPcOScZmYW+2koBe","tlshash":"8ac3ea4eb160622141eb91db523f8a4ea372a7155506c12c75b8edcead78c0d70afff8","first_seen":"2025-11-05T14:56:28.27946Z","last_seen":"2026-05-14T19:09:02.651136Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2133,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/theme/assets/js/woocommerce.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/theme/assets/js/woocommerce.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4786\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"66ddcce72dbf48c3d01e68925fd70ba7","sha1":"87f125ab4013757612d3e2f2851cca5ed16de821","sha256":"2d81a59d334af3b814033594907ab85f2d9d718f04ad94ea435b53549d4a1d80","sha512":"b8bfb1a4b035b4714ac38d25191aaf401248db7c6b32f876c1cf44aa83e50e6d405b55ed326655d446f02f07a849840f60293061c8bef3a793113e1968f1d256","ssdeep":"192:hHf1c/j00repItnXk3ZtKP4kGeF0CbgXdc++7ABe3P0jWz61EGuwBQL:le/jFPjGp+Y2L","tlshash":"5ea29589b0b35e6209bb32395d3aa4ccff25802752459b14bcad3af55fbc44443a5f8d","first_seen":"2026-03-16T12:16:26.370672Z","last_seen":"2026-03-16T12:27:24.552995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/testimonial/assets/css/yit-testimonial.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/plugins/yit-framework/modules/testimonial/assets/css/yit-testimonial.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:16:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1384\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b3f85554d6a3534dd8db9a036449b61","sha1":"b747c1c9078e1f60fd22a8634265a59fe25d0523","sha256":"0a7d7be8b815754fab82243aa9ddcdd451c3f338f5cff3ed43adce29b56219a5","sha512":"b26e1e690393ef89e9d9a7c3804914811374901c70c69ab8e5defbae2182b8d87f6defb56d01b1538b8cd3890e310a554ea11bbb721aed5e13ea7e7e4236fe8b","ssdeep":"96:QXm9r6OZknXScwdBuR9iqcdmk27s6vWvbKHYE11YEzYEaYEiEKL13Yv4vR2xTebG:QFnXXwdBuLX5/MeWJP","tlshash":"32d1449e4116120913335ba09bd9d704cdbc4057bd0269fcb8db7e498fba8784227fab","first_seen":"2026-03-16T12:16:26.371896Z","last_seen":"2026-03-16T12:27:24.470061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/blog.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:51.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/themes/nielsen/cache/wp-content/themes/nielsen/theme/assets/css/blog.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/wp-content/themes/nielsen/cache/ie_assets.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Nov 2018 06:17:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1633\r\ndate: Mon, 16 Mar 2026 12:15:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63b54e4d6a1dd636209f149ee0688219","sha1":"47545055abb1e6d503177482dfa8fc0fd151e68c","sha256":"fea317c394e525f987a73a19dd4312ef980c1b54241afb7ed454a1d0e919ccac","sha512":"074022d6c86774cffeda6766f21aec795d2cbe5b09be6434ca730ad25c95e5c0dfba36c77af9bb05fd8466fa9f7f4342369e277d0d30d8a5fc125b03f0a816f2","ssdeep":"192:3Bwhxj3NGH2yH/wvB/1og14dC66EW3pXKq7Jy0A:3uwH/BqHtKq7Je","tlshash":"90f1998ce77f1982a3775a3d6bf422e8ee8410136a858065fe943162dfbc76d0251f8d","first_seen":"2026-03-16T12:16:26.373145Z","last_seen":"2026-03-16T12:27:24.489439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-content/plugins/revslider/public/assets/css/settings.css","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/settings.css HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 02 Dec 2018 22:15:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6779\r\ndate: Mon, 16 Mar 2026 12:15:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29327), with CRLF line terminators","md5":"38294068fd7ca61921cdaf78fbbcdfc7","sha1":"4db17b8b2cc4783b7367a065c5292f0873d34b66","sha256":"0c8ee577df61fceaffb502fa9f0bf4437da3dec8d1e3a46acd7179a893089c48","sha512":"90dfb25c51b0c7192e3b60dde3571b466f1836ff6e01dc30422abbee40678dd5097af27762225bdc605bf15b9191b8ac614be4f2551fce64f88a1adb27e8370a","ssdeep":"384:eTd/MErw4TLT4ILX8sSeU1OWC7G7C5+TU1Zz80id48fq:eRME7LTPX8sSe+OWCy7wmU1h8D28C","tlshash":"81d2da70e98975f877a7c22573c0b76df02ad122ea521d6ef02f72f986d3086446e648","first_seen":"2026-03-16T12:16:26.374228Z","last_seen":"2026-03-16T12:27:24.476777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transcorpbank.com/wp-includes/js/masonry.min.js","fqdn":"transcorpbank.com","domain":"transcorpbank.com","tld":"com"},"ip":{"addr":"45.58.136.3","port":443,"asn":46844,"as":"SHARKTECH","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transcorpbank.com/","date":"2026-03-16T12:15:50.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transcorpbank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 19:31:12 GMT","end":"Mon, 18 May 2026 19:31:11 GMT"},"fingerprint":{"sha1":"38:0D:B6:2E:2A:92:0E:2E:19:71:CD:22:80:CD:94:B1:A8:80:9C:59","sha256":"C3:BE:49:73:CE:BB:1A:D7:E1:71:B6:EB:3D:91:D3:47:06:2C:B0:46:E1:AD:60:31:4D:51:A9:38:41:94:A4:80"}}},"request":{"raw":"GET /wp-includes/js/masonry.min.js HTTP/1.1\r\nHost: transcorpbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transcorpbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 12:15:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Nov 2018 06:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8269\r\ndate: Mon, 16 Mar 2026 12:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28817)","md5":"5420b6516c14245b504e7240a8310f2c","sha1":"bf6d46e754eca13c3074f002abb124e55ef4c3aa","sha256":"3ca3e467b7d4d6b403aa4619019d9250b11449c8ee9c91c90bcbc9acdd64fea2","sha512":"d072090ba5351427d1cd9113f00494faa967fdea3f6514fa66c5291907f1838b6fac45abd25db1ef66519c0b0d0c39375628438ab3908689d41b704444c27a2d","ssdeep":"768:S9+z0BFXYKby+HvOqvevgOkYtkdEvWBzigMPIW:SgKbbO0IkdEvPgS","tlshash":"d4d2b54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","first_seen":"2023-03-07T01:11:51Z","last_seen":"2026-08-09T21:31:56.078553Z","times_seen":1693,"resource_available":true,"data":null}},"time_used":2143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2137,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"transcorpbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}