{"report_id":"8c62d953-2425-41e3-a992-ff63e1665d8f","version":0,"status":"done","tags":[],"date":"2026-07-05T19:27:15Z","url":{"schema":"http","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"34.236.48.36","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"title":"ThePersonalLoanFinder","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"34.236.48.36","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-09T19:27:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ipqscloud.com","ip":{"addr":"172.67.179.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-22","domain_rank":1868977,"first_seen":"2025-01-07T04:10:46.524329Z","last_seen":"2026-07-02T06:56:07.655295Z","alert_count":0,"request_count":1,"received_data":149321,"sent_data":752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":5,"received_data":19871,"sent_data":2552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d196n3hla5536u.cloudfront.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-13T02:42:26.994761Z","last_seen":"2026-03-14T14:11:00.603268Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fn.us.ipqscloud.com","ip":{"addr":"155.254.26.207","port":443,"asn":397373,"as":"H4Y-TECHNOLOGIES","country":"United States","country_code":"US"},"domain_registered":"2024-11-22","domain_rank":1887532,"first_seen":"2025-01-07T04:10:46.523178Z","last_seen":"2026-07-02T06:56:07.49937Z","alert_count":0,"request_count":1,"received_data":306,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":3,"received_data":48261,"sent_data":1786,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thepersonalloanfinder.com","ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2023-07-21","domain_rank":7100767,"first_seen":"2026-01-09T00:19:29.128274Z","last_seen":"2026-03-14T14:11:00.423761Z","alert_count":48,"request_count":24,"received_data":1163799,"sent_data":36998,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/TermsText-UU8qMoBA.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7fac049f112de1a8993889fc3a06b67","sha1":"95640b1a8c9f57d52e9ad43b11226601a0a81525","sha256":"208fa9c88dec55873b30774ca12a632cd062c03fa740c442b366f062728605ba","sha512":"073ac891bd03a45270d69e0608997d04568fc3c095a7ee8e49acab686352a0596f1f00d0a8030786aabe245f0caba45d0f3ff9e86701d7873811b8966b8f772a","ssdeep":"3072:jv99sCVIExP0EdoJHdGBfHetR+0H0FvCgrLIh:jv9iCFMHdGpHeHHUCgf8","tlshash":"88a33a9bf3842272165303e4761b5fd2fb59a46873109c907cb9d2a807a5e2ce3377e9","size":105680,"data":"","first_seen":"2026-07-05T19:27:25.467661Z","last_seen":"2026-07-05T19:27:25.467661Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/Redirect-B0_iAyq9.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ba529f245bf28aee21d9f4bcf1705ba","sha1":"23426f491d32a73a8e7c98ab8797d1939b4cdde9","sha256":"600332957c6ba5d4aa5d5db46970311d10d2222653d3b33e652da21b435ec275","sha512":"241472cca0143faee43ea35e24242c9aca1c565bc2202c20b62a6fcbe12083cf381504c378d7583771eba2c39cf0888257bd3866ec4f2cea59d370bd512aa50b","ssdeep":"","tlshash":"5e51710e74d0a1387163049cf1851e0256532a5da22dadeee29803fc2fa6d24f95bb76","size":3073,"data":"","first_seen":"2026-07-05T19:27:25.456416Z","last_seen":"2026-07-05T19:27:25.456416Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9766dc783e5d59afb48fc2f27bf898ff","sha1":"14bf07f1eef9e83de1a3f77681abad8b801fc356","sha256":"ff093b3cb33e6c20108e0902b2f005f779f390acb3f5a1ad7c2b27915ea275ba","sha512":"fcdb430d08c83754b7936469a5afb62c688d17939fa74c2abb3f62eb4ac3dad3a56bf969e791004f694e016040a1923cdd9d8e02e815e75aae9197aa76656c75","ssdeep":"6144:caFXHFoRaEQW0fZt9rwxHsdeULtqg7KcB3+lXzZop4ZK:ca5HF00fZ6sH17FF+Xop4ZK","tlshash":"898439d971a5303353d606e550bb0102f7355954784e80a8f47cd9ef3eaa80aa2bbf7e","size":384924,"data":"","first_seen":"2026-07-05T19:27:25.424607Z","last_seen":"2026-07-05T19:27:25.424607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/home-BbtEPk9p.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c346595949553e0495892b2d65e9474e","sha1":"866ff39a9e600f61862b0f6d9725f078e47ac97c","sha256":"18da0d3aa280288973738bddd6e5fae92991f2cfa0e7f37791e2e23d8b823c47","sha512":"da7493c2bc6566e61e24b43d96c18d648cf6956b83d3b1d1351596ba8e02a3e10e6bbec81b445562a3f1f9899a4e89e019b8518688fb634fdda226acb99c976c","ssdeep":"1536:5iAkgRwROTo/0OY8ws6HH8hfrr0B6MjOsKPR0C9Wv7CV4PUp:cROTo/0OZwMsUX4g","tlshash":"89433a6ef13821797697029cf06b4b12330db586e70098a8b0bcce751794f59b972bf6","size":55180,"data":"","first_seen":"2026-07-05T19:27:25.439726Z","last_seen":"2026-07-05T19:27:25.439726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/js/globalParams.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f22d5a9b9021650d31b79d074554e64","sha1":"b21ba5a0595a080c29cb709f42b0af80f790f087","sha256":"08158b5a09bd8f200db13b066ff4047de8622aafa2c22ca84a5deeea06c7b9c5","sha512":"2117d96d787f53cdf21282b1761ee3ee29b43d3a25688ad70555d29bf111bccc8f9fccf22d210bb4860634ae9c95d5d77e6e4f361d0cb73e572cfd25a4e90074","ssdeep":"","tlshash":"edf0644209278d802390800f8eeca7e1251fd9835f483a3738844d086fcd70ea0b7bb3","size":651,"data":"","first_seen":"2026-01-09T00:19:37.120066Z","last_seen":"2026-07-05T19:27:25.422952Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"646ef50830f6d22cafca1eaeab3b5eca","sha1":"31b6aa4b76c0a6267dc330e25b113e515e1b08e6","sha256":"510e80160746e02f65e66e924b832e88b290df489bed25aa52e5411c1e3e2349","sha512":"284db016ab0070e6f0d5d5c41a3bd22a757291fe3207c74c35cfcce403d3507a8f8cce30e6eb35a7c76046467741e96a32ed8fc07ea105f0f2758de870f7b9c2","ssdeep":"3072:NncuLOfgE1yzWRxt7f/jUAmf2nE5K98JYbEFgc4:NnXOfgQCWx/jUAmfJ5Kyd4","tlshash":"3ee3e1fe18036499ff39e07b313e0b19615a6ef105b6b3073e6595ae2d1c1282dd2cb6","size":148387,"data":"","first_seen":"2026-07-05T19:27:25.469063Z","last_seen":"2026-07-05T19:27:25.469063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ff08cf27509dd677e8e1f0a60f947e1b","sha1":"2bfce95ab32718b7a0425cbdf43778a7b7f9c136","sha256":"9c4f7d9a524b1d5b5b4b29630f3df4f67a60f082c45509de5626bac58ae04e39","sha512":"44a3301e2eb7094db84ae5d586e73e99db559f0f15ce50265b77d9c68368a355e653bddc4bae5e99499000d6615aed21ff7fc98dd49ba438c845fcda45db5a8e","ssdeep":"1536:hAmjiIiJww/5gsAzGACzrfiAshqmsf68L6KQiOPgxuKk2ykv3F8PLQw/Vf8QUdY4:hVjiIdLYIWqH10lhaBe0jSSCxZ","tlshash":"6aa3b56d6785d80f0bce187bbe5a6ec674329271678432c3871eb98d26e8c43d109ded","size":107105,"data":"","first_seen":"2026-07-05T19:27:25.470568Z","last_seen":"2026-07-05T19:27:25.470568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/bootstrap.esm-C9VktGa0.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19cd9b4ce9a5c3d6dde9c788c44ee8b7","sha1":"6d29d6b9874eaf5b4e1989769cdfd7665b626d13","sha256":"33c9aeed925d03b231d7a34a07160f20fff78ec6471b7fd14bc921afa5fb49ec","sha512":"98ba062786b36e7f4f3bd5090d2cc870d9794e874d91fd3468e2aaa6480f80eccf05a92a6c282a22f6095725c2ec015aa11a37a0e7a5302ed3e052006967f738","ssdeep":"1536:Jx6nNy1sY55Cpm3XBJL8b5/HySQ6zn+6PTWMIVDo2MBplUOH+551Uqy:9vB6zNKMIVDo2OplUOezy","tlshash":"0c83f7593285b83306df85f6803b460bf2256c94b54a812cb5bcacde2a7dc857277f78","size":81824,"data":"","first_seen":"2026-07-05T19:27:25.426514Z","last_seen":"2026-07-05T19:27:25.426514Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/commonForms-YXFcILGd.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"348846725d4aa58016108d9c4da1ac24","sha1":"2e37f43b4e0011a0d93f9d5885962e61fa5a33ba","sha256":"c7df1a9f45c146b4c4b79777afe0c10aa856ea1481b0aed1abcb742d0b3865e4","sha512":"55b00e5e1aeb4fabf72918d3d1c113ab83e8efd041d767c593055c1a5b0a2593eebc0301687ba7cafcf9d3f16d29db7c8afc568369795b8406e01c9747e68b1b","ssdeep":"768:mLSk/pXpV+xNrDPx34WSdyMcxyvHuGM79n:s1/p/+/1Sd2WS9n","tlshash":"36d21a5a7338083892e3029df81267037715f695ef074464b1bc99f99768e9ef103bb9","size":29916,"data":"","first_seen":"2026-07-05T19:27:25.441143Z","last_seen":"2026-07-05T19:27:25.441143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/toastService-BRFf_twj.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38933add23c830c4fc914956feae50f7","sha1":"92f8467083cbfa33fc772ef8c8926cc44408e62d","sha256":"00a0b7c9e33c7f8df48a7b77587161498673acaba6e46be26a6576b5ebb9c74f","sha512":"8f98a73c377b1154bca0283a403c1dd4536a69e81eca04c00ecada7a141c8fdda50461a1ffa7ab4fd325f97eb84ac18bb1c20e71c4c1f5c7e6da3b23fe1cfae8","ssdeep":"1536:aWc+LenYPZkfToxK2uOvxSoODhgI01jbvhZ/XLreC:tKn41xK2uOZbODifH/XT","tlshash":"799328e43182b57653aa09e640b70006f36e2856380dc4e8b56dedcf3a7644951fbfbe","size":96881,"data":"","first_seen":"2026-07-05T19:27:25.419504Z","last_seen":"2026-07-05T19:27:25.419504Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ipqscloud.com/api/*/xbdu4OeWOch4I6lAX9UIvzqLUF5ot6tr3vlYu0MkUozGmFPPgnRDOCOOURD28Wbjt7NIyZYQxklGjWrQPPJjSaF9AdLCwYj0f88cLJhFdu79B7qcXvb2Vx7jnthZVCVUY4TQe06iHQvdYwUPHRODsrkQYRUr9NDS3AwJ8W0HriyNMjX4pvO5gaSR4gaZCU2xgB0sOEi1dCqIbSYihbK1D1zu7Clz4X2bvt8Luh2vyonQjanv3VkNWdLApzNKNg3Q/learn.js","fqdn":"www.ipqscloud.com","domain":"ipqscloud.com","tld":"com"},"ip":{"addr":"172.67.179.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf03c9c21560ff468e4bd7a07937001","sha1":"c4f451ddb856f0ee3be4c1a9968fc15690dff4a9","sha256":"ab03513193c4910696e100019d39921f5dd3f104894c220a47cd9a72029e7251","sha512":"85ad488b26429aa74e0794bc96a8aaa86fee1efc55fde1117f94d6aed89aaf1efc96bcdecbe7a902e74b72de14407d49c26e6e295e462b2761545f5f767b1526","ssdeep":"3072:LncuLOfgE1yzWRxt7f/jUAmf2nE5K98JYbEFgcc:LnXOfgQCWx/jUAmfJ5Kydc","tlshash":"b6e3e0fe18136499fb39e07b313e0b19615a6ef005b7b3073e6595ae2d1c1282dd2cb6","size":148477,"data":"","first_seen":"2026-07-05T19:27:25.434758Z","last_seen":"2026-07-05T19:27:25.434758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/validations-DUdYnIRM.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b47a3397262b2d5d3dde91f01a9c3eca","sha1":"ae2b5323a5b039667c95dc09d2426f998b0a726b","sha256":"3347f240dc604977ab4ff93adf2ac73d31906b3bca89c0b896c9608bfccedfa1","sha512":"3653eca06d8156b94dfffd9a664b860c20e2e6a6ec62744a3a418cd96a4c36026ff7ebae3059057b0b043799dc36b66ad2deac6e2da31967d05f4b22f6f3cc3f","ssdeep":"","tlshash":"6031cbcfb08b73e8d74268f986bf40216179b9f428dc0660d064b557aa20077d3bbec9","size":1551,"data":"","first_seen":"2026-07-05T19:27:25.451919Z","last_seen":"2026-07-05T19:27:25.451919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/WaitingPageSpinner-DCMjb-qY.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b202f318dd7cb4e7295b64d8bb6f618","sha1":"6428ae1c83e4efdf98c66758a59701b188279300","sha256":"8db0bfbf195d0766d5340a862470c943944633f3aa8b3310515f3ce5b0b42ec0","sha512":"c19bead3ab87cd422a3a021f9e627e8dac67218e28a4c14a071e5051230fb9ca79dc16b409ae033d118c22e04b643c2807119c252f1e0598887afd7918b538e7","ssdeep":"96:D6f/OrGtlK5aKm23s+Itvkaz40pboXoEM3wabo58g8GT:s/qGtlr123s+ItcaRbzEM3wab6PVT","tlshash":"b7b1b32cf03a9e75d6274cd8618d2149a51c7fa7d068c1be786ab1f10b91c49c32eb3c","size":5558,"data":"","first_seen":"2026-07-05T19:27:25.427949Z","last_seen":"2026-07-05T19:27:25.427949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/a3da1967-9fc6-43fb-921d-e9f80e3b95b2","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"b4c6cef170180a46c6131ca9cd147f47","sha1":"f0310f660b01e4fd45b4611b93b6f84ecd0cbbe7","sha256":"4c5d4f8b6ff3b956d705db60edb3fe424839f28f7ac3651d3f226eb1e53cad2b","sha512":"a09f23129a3cb96605519b7603c68f05a30e518a89edd9b89e6e158d60de1abdf0aae77e6bb5bf8c0415293e8ff4543c85457e185f96ecd9e088798319b40955","ssdeep":"192:d4w0BdvnTF04s9CGyYGOY5Us8I2NDFnFWpKJAV76OHtrswFZD2p/NYGtoUh:d4wCvh0LCD7OGUs8HDFnFMtV76QlZD2L","tlshash":"dd22076577923079439349e109af858aa17238627c0790acbb04d8d96cf5dcb60effbd","size":10194,"data":"","first_seen":"2026-05-25T18:27:04.543025Z","last_seen":"2026-08-19T20:45:38.94212Z","times_seen":1770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Setting up timeout loop to call sendRequestCheckStatusDecision every10000ms","filename":"https://thepersonalloanfinder.com/loan10000/assets/commonForms-YXFcILGd.js","line_number":5,"column_number":5121},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj63 class:Object extensible:true frozen:false isError:false ownPropertyLength:10 preview:map[kind:Object ownProperties:map[disclosuresText:map[configurable:true enumerable:true value:map[type:null] writable:true] educationStepNumber:map[configurable:true enumerable:true value:20 writable:true] emailDomain:map[configurable:true enumerable:true value:map[type:null] writable:true] formLinks:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj64 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] loginFirstField:map[configurable:true enumerable:true value:home_phone writable:true] loginFlowType:map[configurable:true enumerable:true value:short writable:true] loginSecondField:map[configurable:true enumerable:true value:dob writable:true] referringUrl:map[configurable:true enumerable:true value:map[type:null] writable:true] showDisclaimerText:map[configurable:true enumerable:true value:false writable:true] showEducationStep:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:10] sealed:false type:object]","filename":"https://thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","line_number":47,"column_number":2627},{"level":"log","text":"false","filename":"https://thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","line_number":47,"column_number":2627},{"level":"log","text":"false","filename":"https://thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","line_number":47,"column_number":2627},{"level":"log","text":"map[type:null]","filename":"https://thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","line_number":47,"column_number":2627},{"level":"log","text":"map[type:null]","filename":"https://thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","line_number":47,"column_number":2627}]},"http":[{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/toastService-BRFf_twj.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.890Z","timestamp":1783279607890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/toastService-BRFf_twj.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-17a71\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96881,"size_decoded":44238,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17563)","md5":"38933add23c830c4fc914956feae50f7","sha1":"92f8467083cbfa33fc772ef8c8926cc44408e62d","sha256":"00a0b7c9e33c7f8df48a7b77587161498673acaba6e46be26a6576b5ebb9c74f","sha512":"8f98a73c377b1154bca0283a403c1dd4536a69e81eca04c00ecada7a141c8fdda50461a1ffa7ab4fd325f97eb84ac18bb1c20e71c4c1f5c7e6da3b23fe1cfae8","ssdeep":"1536:aWc+LenYPZkfToxK2uOvxSoODhgI01jbvhZ/XLreC:tKn41xK2uOZbODifH/XT","tlshash":"799328e43182b57653aa09e640b70006f36e2856380dc4e8b56dedcf3a7644951fbfbe","first_seen":"2026-07-05T19:27:25.419504Z","last_seen":"2026-07-05T19:27:25.419504Z","times_seen":1,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/img/smartphone.png","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.664Z","timestamp":1783279629664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /img/smartphone.png HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 94822\r\nserver: nginx\r\nlast-modified: Fri, 30 May 2025 07:10:16 GMT\r\netag: \"683959d8-17266\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94822,"size_decoded":95485,"mime_type":"image/png","magic":"PNG image data, 440 x 800, 8-bit/color RGBA, non-interlaced","md5":"b588f3cee4a622822f6302d477437bc8","sha1":"75b4ca6354e798de70a0ac08b89a884b5256e9c7","sha256":"ea2ee9165e658f2e9779bdc714d47a4f5cab0402aa606c2a551236141efcac5e","sha512":"46f506f77f12c266676ef374c855770f31c4f9d38b3f9ac07c95bf5119ff09382cb9cd744ef33d8b0e6fbabab7e872186cf3109d385864349c2243accd891985","ssdeep":"1536:BjtmW8jFv7kv2aHXPWyjCQkbP9w3j7NtkhQvnvz3Pe+GcvHKgl+saczfW2qi5JPg:bmWojkv2a3P/LkbVUdfvz3PedUfD38bn","tlshash":"509301754e5bfd4495195a2bf587e4a4673fb11698c10cf18ab403deeaa4318f3403fa","first_seen":"2026-01-09T00:19:37.064595Z","last_seen":"2026-07-05T19:27:25.421015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/js/globalParams.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.522Z","timestamp":1783279607522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /js/globalParams.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 06 Aug 2025 11:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68933f1c-28b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":651,"size_decoded":969,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8f22d5a9b9021650d31b79d074554e64","sha1":"b21ba5a0595a080c29cb709f42b0af80f790f087","sha256":"08158b5a09bd8f200db13b066ff4047de8622aafa2c22ca84a5deeea06c7b9c5","sha512":"2117d96d787f53cdf21282b1761ee3ee29b43d3a25688ad70555d29bf111bccc8f9fccf22d210bb4860634ae9c95d5d77e6e4f361d0cb73e572cfd25a4e90074","ssdeep":"","tlshash":"edf0644209278d802390800f8eeca7e1251fd9835f483a3738844d086fcd70ea0b7bb3","first_seen":"2026-01-09T00:19:37.120066Z","last_seen":"2026-07-05T19:27:25.422952Z","times_seen":3,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/sentry-BEGw3_-t.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.886Z","timestamp":1783279607886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/sentry-BEGw3_-t.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-5df9c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384924,"size_decoded":151381,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39483)","md5":"9766dc783e5d59afb48fc2f27bf898ff","sha1":"14bf07f1eef9e83de1a3f77681abad8b801fc356","sha256":"ff093b3cb33e6c20108e0902b2f005f779f390acb3f5a1ad7c2b27915ea275ba","sha512":"fcdb430d08c83754b7936469a5afb62c688d17939fa74c2abb3f62eb4ac3dad3a56bf969e791004f694e016040a1923cdd9d8e02e815e75aae9197aa76656c75","ssdeep":"6144:caFXHFoRaEQW0fZt9rwxHsdeULtqg7KcB3+lXzZop4ZK:ca5HF00fZ6sH17FF+Xop4ZK","tlshash":"898439d971a5303353d606e550bb0102f7355954784e80a8f47cd9ef3eaa80aa2bbf7e","first_seen":"2026-07-05T19:27:25.424607Z","last_seen":"2026-07-05T19:27:25.424607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/bootstrap.esm-C9VktGa0.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.889Z","timestamp":1783279607889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/bootstrap.esm-C9VktGa0.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-13fa0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81824,"size_decoded":29950,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44542)","md5":"19cd9b4ce9a5c3d6dde9c788c44ee8b7","sha1":"6d29d6b9874eaf5b4e1989769cdfd7665b626d13","sha256":"33c9aeed925d03b231d7a34a07160f20fff78ec6471b7fd14bc921afa5fb49ec","sha512":"98ba062786b36e7f4f3bd5090d2cc870d9794e874d91fd3468e2aaa6480f80eccf05a92a6c282a22f6095725c2ec015aa11a37a0e7a5302ed3e052006967f738","ssdeep":"1536:Jx6nNy1sY55Cpm3XBJL8b5/HySQ6zn+6PTWMIVDo2MBplUOH+551Uqy:9vB6zNKMIVDo2OplUOezy","tlshash":"0c83f7593285b83306df85f6803b460bf2256c94b54a812cb5bcacde2a7dc857277f78","first_seen":"2026-07-05T19:27:25.426514Z","last_seen":"2026-07-05T19:27:25.426514Z","times_seen":1,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/WaitingPageSpinner-DCMjb-qY.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.892Z","timestamp":1783279607892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/WaitingPageSpinner-DCMjb-qY.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-15b6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5558,"size_decoded":2865,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5501)","md5":"3b202f318dd7cb4e7295b64d8bb6f618","sha1":"6428ae1c83e4efdf98c66758a59701b188279300","sha256":"8db0bfbf195d0766d5340a862470c943944633f3aa8b3310515f3ce5b0b42ec0","sha512":"c19bead3ab87cd422a3a021f9e627e8dac67218e28a4c14a071e5051230fb9ca79dc16b409ae033d118c22e04b643c2807119c252f1e0598887afd7918b538e7","ssdeep":"96:D6f/OrGtlK5aKm23s+Itvkaz40pboXoEM3wabo58g8GT:s/qGtlr123s+ItcaRbzEM3wab6PVT","tlshash":"b7b1b32cf03a9e75d6274cd8618d2149a51c7fa7d068c1be786ab1f10b91c49c32eb3c","first_seen":"2026-07-05T19:27:25.427949Z","last_seen":"2026-07-05T19:27:25.427949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ipqscloud.com/api/*/xbdu4OeWOch4I6lAX9UIvzqLUF5ot6tr3vlYu0MkUozGmFPPgnRDOCOOURD28Wbjt7NIyZYQxklGjWrQPPJjSaF9AdLCwYj0f88cLJhFdu79B7qcXvb2Vx7jnthZVCVUY4TQe06iHQvdYwUPHRODsrkQYRUr9NDS3AwJ8W0HriyNMjX4pvO5gaSR4gaZCU2xgB0sOEi1dCqIbSYihbK1D1zu7Clz4X2bvt8Luh2vyonQjanv3VkNWdLApzNKNg3Q/learn.js","fqdn":"www.ipqscloud.com","domain":"ipqscloud.com","tld":"com"},"ip":{"addr":"172.67.179.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.900Z","timestamp":1783279607900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipqscloud.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 18:35:46 GMT","end":"Thu, 06 Aug 2026 19:34:15 GMT"},"fingerprint":{"sha1":"72:88:88:A6:D6:1C:25:95:D9:70:01:97:44:6C:73:68:46:0E:85:09","sha256":"64:B4:96:73:1C:4A:A6:83:81:9E:EA:15:BA:61:3A:C6:BF:59:3A:33:AA:DD:39:24:F4:0A:31:06:18:83:5A:C6"}}},"request":{"raw":"GET /api/*/xbdu4OeWOch4I6lAX9UIvzqLUF5ot6tr3vlYu0MkUozGmFPPgnRDOCOOURD28Wbjt7NIyZYQxklGjWrQPPJjSaF9AdLCwYj0f88cLJhFdu79B7qcXvb2Vx7jnthZVCVUY4TQe06iHQvdYwUPHRODsrkQYRUr9NDS3AwJ8W0HriyNMjX4pvO5gaSR4gaZCU2xgB0sOEi1dCqIbSYihbK1D1zu7Clz4X2bvt8Luh2vyonQjanv3VkNWdLApzNKNg3Q/learn.js HTTP/1.1\r\nHost: www.ipqscloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nOrigin: https://thepersonalloanfinder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTTsxbgyXuJv982AW1HRucd%2FIIFQn9idQM4Idlop73TBwHPV3frRrzhhfl2qrmKF65Kpysk4gwMeg%2B0QpIALGdGEY5RTdRUWMMNpHHzmt6%2BsW6PQANB6mplCdPmILHqvKywtpQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nx-robots-tag: noindex\r\nexpires: Mon, 06 Jul 2026 15:26:48 GMT\r\ncache-control: max-age=86400\r\npragma: cache\r\naccess-control-allow-origin: *\r\nx-powered-by: IPQualityScore\r\nx-lb-id: LB-1\r\nx-upstream-id: N-197\r\nlast-modified: Sun, 05 Jul 2026 19:26:48 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a168c36d8ed1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148477,"size_decoded":73891,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2bf03c9c21560ff468e4bd7a07937001","sha1":"c4f451ddb856f0ee3be4c1a9968fc15690dff4a9","sha256":"ab03513193c4910696e100019d39921f5dd3f104894c220a47cd9a72029e7251","sha512":"85ad488b26429aa74e0794bc96a8aaa86fee1efc55fde1117f94d6aed89aaf1efc96bcdecbe7a902e74b72de14407d49c26e6e295e462b2761545f5f767b1526","ssdeep":"3072:LncuLOfgE1yzWRxt7f/jUAmf2nE5K98JYbEFgcc:LnXOfgQCWx/jUAmfJ5Kydc","tlshash":"b6e3e0fe18136499fb39e07b313e0b19615a6ef005b7b3073e6595ae2d1c1282dd2cb6","first_seen":"2026-07-05T19:27:25.434758Z","last_seen":"2026-07-05T19:27:25.434758Z","times_seen":1,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":9,"connect":16,"send":0,"wait":719,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/home-CFetriLR.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.881Z","timestamp":1783279607881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/home-CFetriLR.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-463c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17980,"size_decoded":4143,"mime_type":"text/css","magic":"ASCII text, with very long lines (17979)","md5":"38594f9c3aa02c78f5f6342b95e53e99","sha1":"1ec478f0d35b1b8b80ad2b8277c44ef234ebd617","sha256":"8d7f74d46e673c2d3fe4693354034c424c67e35efd6db62c5271328d2245a6d0","sha512":"f49bb41441cbdf57f491744e63e59571976be8f5e9ec0e15eca3c071ebf0ec6a00598a9b25fb14879efb238c54b43786816266f734eebb1f9011b878efc2c5cf","ssdeep":"384:wQmVdmTOnYu/nP3Ma3a706U7w+G2J3AO8UUuy:wgO1khghy","tlshash":"33828611b16cb42b6c37a25d70c085d82924f51333cf8ab7af65b31eade634e69369c4","first_seen":"2026-07-05T19:27:25.437873Z","last_seen":"2026-07-05T19:27:25.437873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/home-BbtEPk9p.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.884Z","timestamp":1783279607884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/home-BbtEPk9p.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-d78c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55180,"size_decoded":20555,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55107)","md5":"c346595949553e0495892b2d65e9474e","sha1":"866ff39a9e600f61862b0f6d9725f078e47ac97c","sha256":"18da0d3aa280288973738bddd6e5fae92991f2cfa0e7f37791e2e23d8b823c47","sha512":"da7493c2bc6566e61e24b43d96c18d648cf6956b83d3b1d1351596ba8e02a3e10e6bbec81b445562a3f1f9899a4e89e019b8518688fb634fdda226acb99c976c","ssdeep":"1536:5iAkgRwROTo/0OY8ws6HH8hfrr0B6MjOsKPR0C9Wv7CV4PUp:cROTo/0OZwMsUX4g","tlshash":"89433a6ef13821797697029cf06b4b12330db586e70098a8b0bcce751794f59b972bf6","first_seen":"2026-07-05T19:27:25.439726Z","last_seen":"2026-07-05T19:27:25.439726Z","times_seen":1,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/commonForms-YXFcILGd.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.895Z","timestamp":1783279607895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/commonForms-YXFcILGd.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-74dc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29916,"size_decoded":10853,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22495)","md5":"348846725d4aa58016108d9c4da1ac24","sha1":"2e37f43b4e0011a0d93f9d5885962e61fa5a33ba","sha256":"c7df1a9f45c146b4c4b79777afe0c10aa856ea1481b0aed1abcb742d0b3865e4","sha512":"55b00e5e1aeb4fabf72918d3d1c113ab83e8efd041d767c593055c1a5b0a2593eebc0301687ba7cafcf9d3f16d29db7c8afc568369795b8406e01c9747e68b1b","ssdeep":"768:mLSk/pXpV+xNrDPx34WSdyMcxyvHuGM79n:s1/p/+/1Sd2WS9n","tlshash":"36d21a5a7338083892e3029df81267037715f695ef074464b1bc99f99768e9ef103bb9","first_seen":"2026-07-05T19:27:25.441143Z","last_seen":"2026-07-05T19:27:25.441143Z","times_seen":1,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/api/v1/get_captcha","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.568Z","timestamp":1783279629568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /api/v1/get_captcha HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nX-XSRF-TOKEN: eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 994\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3353,"size_decoded":3114,"mime_type":"application/json","magic":"JSON text data","md5":"d7b7cfa46a01668789320dc8e19d2da7","sha1":"f1fdfa7f18ae66f715658ac2c2950510511eb492","sha256":"a1ad3894a6ef01e76563e7e67f9ad8560da6fcf0f0b8b67d16f69d2bdcb287e7","sha512":"f031a739443ebe59ad06dfb27c7b30a8d31b0b0bcebc8fdb12b4433aaa64331cef7e08b0a86dc673fd3afb8f1b14f3fa4f6b083b29dea3668c8e35e463959678","ssdeep":"","tlshash":"bc613bb43fca201fc4c0be69d02070d55e1938db9668cbdaeed516a108ad4a2727e01f","first_seen":"2026-07-05T19:27:25.442469Z","last_seen":"2026-07-05T19:27:25.442469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/api/v1/count_visitor?sub_ids=null\u0026click=0\u0026ref_url=\u0026flow_id=1\u0026cookie_mark=0\u0026current_url=https:%2F%2Fthepersonalloanfinder.com%2F\u0026site_type=loan","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.728Z","timestamp":1783279629728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /api/v1/count_visitor?sub_ids=null\u0026click=0\u0026ref_url=\u0026flow_id=1\u0026cookie_mark=0\u0026current_url=https:%2F%2Fthepersonalloanfinder.com%2F\u0026site_type=loan HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nX-XSRF-TOKEN: eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800; visit=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 993\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8,"size_decoded":633,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"78a6fda4b8ec930ad33559780d12eeaf","sha1":"c788f9600734f0f9a3b07f1faa3d1f21e8fc6ad2","sha256":"1ff833b17a1c3c7808cac5b1155df32a8dcef891947b44edb276490a6690c858","sha512":"a79e13fa3730ab9fc0491b5027eea73097c143720fabf13ea137bc1d28635d45abcb6b667a07f1310f65d210e2823dca5b6721aa47f294e8db6910c4622ac04c","ssdeep":"","tlshash":"9f5000c0000000000c000cc00000000030000030000000000c00c0033c003000030000","first_seen":"2026-07-05T19:27:25.443689Z","last_seen":"2026-07-05T19:27:25.443689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Comic+Neue","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.935Z","timestamp":1783279607935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Comic+Neue HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 19:26:48 GMT\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390,"size_decoded":961,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51bd4ed24bf0d7784e86a4ea2ff519fd","sha1":"0e22b7f9198ac88f8063bdb696a19e9fa2946a03","sha256":"ccc76798ea45d85041b41b9c350782a40482037b0bca06e8f6fe94452facc5ed","sha512":"de4800d860bba683a797b9515ee901dd128587a335dee4061ad42135883863d3b01f0cae1122727882d048e74d78117274c71215add7fa38b02f93adb59a77d7","ssdeep":"","tlshash":"8de06841482aa900e7a31cc103deb932df0ea2442451a9349efa18d8bd52d1b5352b2c","first_seen":"2025-11-02T13:56:22.033888Z","last_seen":"2026-07-19T17:56:06.97573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:bold","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.937Z","timestamp":1783279607937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Rubik:bold HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 19:26:48 GMT\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2548,"size_decoded":1431,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"48a3af7227f5ad97699053e9e5ef2c14","sha1":"0d80487ca7c3854a11e5abba0320830c2f3df4de","sha256":"17c4de02053374908f0e4fb1ebcb562273f834f638631f41388fa02a93095b63","sha512":"50b9bb4cf0728a3b87f09d47d9efebfa81c701a0dba7bbd27df4d087a150b54eca93d4b3c0bc2b16833165679135d9c4b4c1c0d101fabff83c74d740b066a5f6","ssdeep":"","tlshash":"3051c0d1881e4050bb4b1cd263ce2d27de0e62547094852997fe1baeac97c2673b13de","first_seen":"2025-10-17T04:20:52.208205Z","last_seen":"2026-07-11T04:29:32.593699Z","times_seen":30,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d196n3hla5536u.cloudfront.net/common/app/sites/thepersonalloanfinder.com/favicon.ico?time=1783279606","fqdn":"d196n3hla5536u.cloudfront.net","domain":"d196n3hla5536u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:51.468Z","timestamp":1783279611468,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/app/sites/thepersonalloanfinder.com/favicon.ico?time=1783279606 HTTP/1.1\r\nHost: d196n3hla5536u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/api/v1/user","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.566Z","timestamp":1783279629566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /api/v1/user HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nX-XSRF-TOKEN: eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 996\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":206,"size_decoded":741,"mime_type":"application/json","magic":"JSON text data","md5":"448b6e651d0c165d14774d7b91b540af","sha1":"b7ab8a86e10c5cf5a2aca289853817a733edc9ca","sha256":"b8d41c6c841cc2a068fde733756837c22f37b42b545edffd251f8b0106af43ae","sha512":"1884b62b82220e6131e8909f776713a4e108262873685a65e582fe50144504efb8716d950b583ca620e9d54a9e221581353c0bee3475ad654d641d73a4a623d5","ssdeep":"","tlshash":"18d0125629080af6ec8c63516635fe005f6a3407b754cf75042cce2ccd41ac9ab0f1d6","first_seen":"2026-07-05T19:27:25.448417Z","last_seen":"2026-07-05T19:27:25.448417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/validations-DUdYnIRM.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.893Z","timestamp":1783279607893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/validations-DUdYnIRM.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-60f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1551,"size_decoded":1415,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1501)","md5":"b47a3397262b2d5d3dde91f01a9c3eca","sha1":"ae2b5323a5b039667c95dc09d2426f998b0a726b","sha256":"3347f240dc604977ab4ff93adf2ac73d31906b3bca89c0b896c9608bfccedfa1","sha512":"3653eca06d8156b94dfffd9a664b860c20e2e6a6ec62744a3a418cd96a4c36026ff7ebae3059057b0b043799dc36b66ad2deac6e2da31967d05f4b22f6f3cc3f","ssdeep":"","tlshash":"6031cbcfb08b73e8d74268f986bf40216179b9f428dc0660d064b557aa20077d3bbec9","first_seen":"2026-07-05T19:27:25.451919Z","last_seen":"2026-07-05T19:27:25.451919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.931Z","timestamp":1783279607931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 19:26:48 GMT\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":2169,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2f4913b2d4249ba3d87180173c5f9121","sha1":"9bf4027becc81e05db16739d9ea242b37105cd4f","sha256":"ae14e6cdbd03f18a4fa37ba5b905bd7e39ae0162d519ca372985aa209e8c42b2","sha512":"0d96229362f39ed14d6e1f353b1f85a53442f419241cecb63d338d97176202941e8166d253b8a306dd1a6f64ee07f3c5ef40bf48574336c00f2da780a2fd62ac","ssdeep":"96:1OEMNslOEMN3FZKOEMNTOEMNoTOEMNEy+aZjzBrgOEMNfubqGIFuV4yOEMN3ROEi:cNssNzNWNoWNEq5N2bqGIwV4DNINCyNX","tlshash":"dfb11d910417044097835ce227ce7e35fe1f92006185d0b5ebfc9b6bedebda652a836e","first_seen":"2026-02-19T23:02:43.131523Z","last_seen":"2026-08-19T21:24:24.601933Z","times_seen":12942,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fn.us.ipqscloud.com/udid/udid.json","fqdn":"fn.us.ipqscloud.com","domain":"ipqscloud.com","tld":"com"},"ip":{"addr":"155.254.26.207","port":443,"asn":397373,"as":"H4Y-TECHNOLOGIES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:49.027Z","timestamp":1783279609027,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fn.us.ipqscloud.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 08:39:53 GMT","end":"Fri, 14 Aug 2026 08:39:52 GMT"},"fingerprint":{"sha1":"6A:9C:93:52:A2:7C:51:4E:D7:2B:4C:E5:74:FA:F0:FE:D1:37:B6:5E","sha256":"6C:70:70:5B:9D:6F:2C:DA:29:BB:CD:FB:E9:DC:24:0B:4C:9F:65:D3:F5:B7:24:16:F5:6D:FF:E9:78:63:98:20"}}},"request":{"raw":"GET /udid/udid.json HTTP/1.1\r\nHost: fn.us.ipqscloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nOrigin: https://thepersonalloanfinder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=31536000\r\nContent-Type: application/json\r\nExpires: Mon, 05 Jul 2027 19:26:49 GMT\r\nLast-Modified: Sun, 05 Jul 2026 19:26:49 GMT\r\nDate: Sun, 05 Jul 2026 19:26:49 GMT\r\nContent-Length: 28\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":306,"mime_type":"application/json","magic":"JSON text data","md5":"1474ddf1ea13145073e1f93af666e9fd","sha1":"c668cc21d4881770dd7f52f6237a045272ef3b0d","sha256":"cefeafb1f28c55c4471dad106802cec56aba41edc670fa06443a01db8423ab47","sha512":"457d09efd2ee85b8021e80a243fe986186d56ec03821dc2f114b1b58063cfd3b65a10254b37088e01e6bdc4acaff6d0517bb3af2dac41b08309f0aa927502b8b","ssdeep":"","tlshash":"248000bc800808a00cb2c2200838aa80280c8b3e3b8808e33282230008202222c20000","first_seen":"2026-07-05T19:27:25.453773Z","last_seen":"2026-07-05T19:27:25.453773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":7,"connect":101,"send":0,"wait":101,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/app-CR3p07Sq.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.520Z","timestamp":1783279607520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/app-CR3p07Sq.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-39b87\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236423,"size_decoded":44836,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65045)","md5":"c2a9654012645b5e469ed5349af2fb74","sha1":"dde4e479ec2dc02bf831e76e92d9c56b211b39b4","sha256":"40d874f50b03ef551c17d347e0e75d2e2cd1ccdadb2f104a19dba58986e391f8","sha512":"4538b6f17d9007895f58e93929f4ac7dddafa3f7d4d2989a428e57d8649142b67c97bbbee222e39e92f9cdec2737f6a3931aa8c69ce5d47e6d4b7ab25382f84d","ssdeep":"1536:Usn419Vf+vYvGvh7IIFsmd2wLqQ7ysYv6lCoFVqQpz600I4Tb18JQb9/:NnK9VfwuQ7ExoFVqQpz600I4Tb18Jq/","tlshash":"8c3491d6f590317daca7c149a680fefd8a6f6985cb124daaf003776807c97d309629cc","first_seen":"2026-07-05T19:27:25.455087Z","last_seen":"2026-07-05T19:27:25.455087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/Redirect-B0_iAyq9.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.897Z","timestamp":1783279607897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/Redirect-B0_iAyq9.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-c01\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":2195,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3024)","md5":"9ba529f245bf28aee21d9f4bcf1705ba","sha1":"23426f491d32a73a8e7c98ab8797d1939b4cdde9","sha256":"600332957c6ba5d4aa5d5db46970311d10d2222653d3b33e652da21b435ec275","sha512":"241472cca0143faee43ea35e24242c9aca1c565bc2202c20b62a6fcbe12083cf381504c378d7583771eba2c39cf0888257bd3866ec4f2cea59d370bd512aa50b","ssdeep":"","tlshash":"5e51710e74d0a1387163049cf1851e0256532a5da22dadeee29803fc2fa6d24f95bb76","first_seen":"2026-07-05T19:27:25.456416Z","last_seen":"2026-07-05T19:27:25.456416Z","times_seen":1,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:bold","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.933Z","timestamp":1783279607933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Roboto:bold HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 19:26:48 GMT\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":2189,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"89f190f4202ada5f496395e45bf7ef52","sha1":"6bc2eb98840d9995bcfd56d1e258587b78e13296","sha256":"ccaad51279a263f54e778ffec43ff6b8b1a837ab0496a73125b8ef42b82538b7","sha512":"be35fc9962e53088145b8daa8cab12ba1b95d9be73cb8b267b01fb5a0c00b4211cc47683737cd5e12f86cd8969ccaaf6a24bfda06ec9addbb1ef29a755f90bde","ssdeep":"96:1OpMN1lOpMNcFZKOpMNGOpMNFTOpMNFy+aZjzBrgOpMNYubqGIFuV4yOpMNuOpMU:lN11NTNSNFLNFqgNPbqGIwV4ONqNj3NI","tlshash":"dbb10c91041b044097435ce223ce7e35fe0f92107185d0b1abfc9b6bedeada653a936d","first_seen":"2026-02-22T06:09:02.061426Z","last_seen":"2026-08-19T15:40:25.897881Z","times_seen":460,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":48,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:49.660Z","timestamp":1783279609660,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://thepersonalloanfinder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.533Z","timestamp":1783279629533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://thepersonalloanfinder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 02:37:07 GMT\r\nexpires: Fri, 02 Jul 2027 02:37:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319802\r\nlast-modified: Tue, 09 Sep 2025 18:36:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24356,"size_decoded":25189,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"8ca0a51552960933d0fd52c19175cbe9","sha1":"5197a7aeb22454110aa1f3ef3ed4c98ca7ef1ba1","sha256":"6f56409fd3d64bb85f7d070bce20749db2d66b6d63cec586cc22d1c761be2491","sha512":"90ab60c6717c27109e8b818e17a696f8665b2fa6247dfcd13a8eb22027aad26ab7becf08e3260bffa8ab3e97d7b1e09830f7d59652c28ec6af13cf925a176393","ssdeep":"384:18j7oxsH+H811z2d2GksjGcVQbNTw4W0LclnfWf7xN5mmOFbxOBAeVLLRIDqGrdt:Y7B1h20GkXRTw70L/pmmybCAaBZGBprf","tlshash":"d9b2e07b99dfeba1dde7def5252e0480ca6c80d06380a6fa135c51b7f50b80710af989","first_seen":"2025-09-20T14:27:23.117722Z","last_seen":"2026-08-19T14:17:49.76912Z","times_seen":5113,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":16,"receive":6,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/api/v1/user","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.553Z","timestamp":1783279629553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /api/v1/user HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nX-XSRF-TOKEN: eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 996\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206,"size_decoded":741,"mime_type":"application/json","magic":"JSON text data","md5":"448b6e651d0c165d14774d7b91b540af","sha1":"b7ab8a86e10c5cf5a2aca289853817a733edc9ca","sha256":"b8d41c6c841cc2a068fde733756837c22f37b42b545edffd251f8b0106af43ae","sha512":"1884b62b82220e6131e8909f776713a4e108262873685a65e582fe50144504efb8716d950b583ca620e9d54a9e221581353c0bee3475ad654d641d73a4a623d5","ssdeep":"","tlshash":"18d0125629080af6ec8c63516635fe005f6a3407b754cf75042cce2ccd41ac9ab0f1d6","first_seen":"2026-07-05T19:27:25.448417Z","last_seen":"2026-07-05T19:27:25.448417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/api/v1/user","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.562Z","timestamp":1783279629562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /api/v1/user HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nX-XSRF-TOKEN: eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; ipqsd=608018085885680800\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:27:09 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 994\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":206,"size_decoded":741,"mime_type":"application/json","magic":"JSON text data","md5":"448b6e651d0c165d14774d7b91b540af","sha1":"b7ab8a86e10c5cf5a2aca289853817a733edc9ca","sha256":"b8d41c6c841cc2a068fde733756837c22f37b42b545edffd251f8b0106af43ae","sha512":"1884b62b82220e6131e8909f776713a4e108262873685a65e582fe50144504efb8716d950b583ca620e9d54a9e221581353c0bee3475ad654d641d73a4a623d5","ssdeep":"","tlshash":"18d0125629080af6ec8c63516635fe005f6a3407b754cf75042cce2ccd41ac9ab0f1d6","first_seen":"2026-07-05T19:27:25.448417Z","last_seen":"2026-07-05T19:27:25.448417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/WaitingPageSpinner-B2-QPZvZ.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.532Z","timestamp":1783279607532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/WaitingPageSpinner-B2-QPZvZ.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-398\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":920,"size_decoded":1130,"mime_type":"text/css","magic":"ASCII text, with very long lines (919)","md5":"439fd58541a568f83dc7c2eb7e75700e","sha1":"04c9e651b6818536a5f14c1bb0d73bbce72e9395","sha256":"9add2269da42b83133a05898d9dc6135f8762ccbbb1071ba92c50716e9dbb335","sha512":"66afdd267b6fd013dc24f00b631470599566d42177f74ddbe2f93170ad29d70217c12ea318a519123aaee577be8f8ec046094c48620c6251d834e79c59917aea","ssdeep":"","tlshash":"8211cb75370851a8d96fb31067d54b8d122ce603a613485d43ad720a04dbaf713a57c9","first_seen":"2026-07-05T19:27:25.458957Z","last_seen":"2026-07-05T19:27:25.458957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:27:09.532Z","timestamp":1783279629532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://thepersonalloanfinder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:07:54 GMT\r\nexpires: Mon, 05 Jul 2027 10:07:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33555\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22240,"size_decoded":23072,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22240, version 1.0","md5":"10a07810f28f8ff9a071a88dc2255bbb","sha1":"0a5c6fbc071198f9f844e882523c9c2e695cbd2d","sha256":"b9d66d1708156f765ada51939bc24ed259dafa69eb631b36e443680fe9e15879","sha512":"de9f6ddb50ee3830baeb1e1f6bb4c9d10d10bbc32022474cd3d15ce0de1f8f3f8abece8d30a58fbfd0b1a7c8d2f1e9bc4ad2f11e73ce712e6894ff09c7d76680","ssdeep":"384:dBqp4Xkc4lyUzhkLmg9DIKNEhDB+xFFR8njA5mhD0jDn1fPesWEaAG92BTIYrMm6:dC4Xkc4lyzLmeHNEJBOFRijAS017WzA0","tlshash":"99a2e1d301e57bd0c6a0be7e54c9305c2e7985ba3d7764028d19418c68828f2706caff","first_seen":"2026-02-20T12:52:01.602576Z","last_seen":"2026-08-19T21:12:34.177903Z","times_seen":3213,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":16,"receive":5,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-05T19:26:42.538Z","timestamp":1783279602538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; expires=Sun, 05 Jul 2026 21:26:46 GMT; Max-Age=7200; path=/; samesite=lax\ncerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; expires=Sun, 05 Jul 2026 21:26:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax\nflow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D; expires=Sun, 05 Jul 2026 20:26:46 GMT; Max-Age=3600; path=/; httponly; samesite=lax\r\ncontent-security-policy: frame-src self, upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17279,"size_decoded":5841,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10678)","md5":"960d510824ebe2e326e00476a0ffbba7","sha1":"3b565e087280e6b3b2d8dff5b89c8991c27cda5a","sha256":"59394b9ec26cc914336f76b2bfe1129a4c365d6d720e44126b0dd8befe2aa980","sha512":"8efef927358e342a07311ca79c99321d5b6f60cfb5e9381ff8993036a24a44633ae60352ea7ccb2a33391f7772796de3b413e93c0cccf5e76114b1c000bbaaac","ssdeep":"96:Do0Q5AofnfebzMFBChzBnPZ1nJffmfLe8UDJT/S4jfw9ucAM3NsawCFuQyNwtzQ+:DoP/8LepiSB5idbtrglciIgHtfV","tlshash":"2072da46838220b77d4141ed6cb0ee7c49cf2d6bd5a48e64b10c8db6af618f40eb61f9","first_seen":"2026-07-05T19:27:25.460829Z","last_seen":"2026-07-05T19:27:25.460829Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4468,"timings":{"blocked":-1,"dns":4003,"connect":93,"send":0,"wait":185,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/TermsText--lzbPH5y.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.530Z","timestamp":1783279607530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/TermsText--lzbPH5y.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-743\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1859,"size_decoded":1364,"mime_type":"text/css","magic":"ASCII text, with very long lines (1858)","md5":"0420d607184a450acbeb7374e08aca16","sha1":"de84d25c58b797c761f4a41dea2e2483e77093e1","sha256":"25c4e24ae9993b399e3002e3f8667e9745e41d362acc3b28b8bcc29e77b72618","sha512":"2e50dab3ff82c28377d8cabb56ee8726032fa613e3ec6718961359e2f59fdc74174384e0fa5779974a9af8db80ef61c582f0051e307007b382c39133260c1029","ssdeep":"","tlshash":"8b3146d0f65d22168823f94ca653a77fc4b6fa82cf400768f66a77688fcb6db601101c","first_seen":"2026-07-05T19:27:25.462144Z","last_seen":"2026-07-05T19:27:25.462144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/Redirect-Da9hG5lk.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.879Z","timestamp":1783279607879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/Redirect-Da9hG5lk.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-557\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1367,"size_decoded":1205,"mime_type":"text/css","magic":"ASCII text, with very long lines (1366)","md5":"98decb4714b3228feb8cde50e0c7b522","sha1":"dd40bd96bc25515f8f388bbe6a1f46cb34a71b13","sha256":"1d20c9c68cef9ed5e075a97c5ad1fd0627014e416d30e9d183923c2214579cf7","sha512":"45cb910feee592384bb0b866a852152aeba3c23ff234cb905353268531e0f35cae631055f934643c4f156b1a377b20e2e8ab422dbdb61bf27ec4167974719420","ssdeep":"","tlshash":"c4216c4039986821f877c63d1aea0525a8037a63920e4aeffc911b3fcc871d23d1172f","first_seen":"2026-07-05T19:27:25.463321Z","last_seen":"2026-07-05T19:27:25.463321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/Header-D_uBGwuu.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.883Z","timestamp":1783279607883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/Header-D_uBGwuu.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-12cf\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4815,"size_decoded":1939,"mime_type":"text/css","magic":"ASCII text, with very long lines (4814)","md5":"1292c4a7f7785aa8ab507a07eb6906fc","sha1":"d4094ae29bc8b209965ba16ff10c5e3ce263b9ad","sha256":"270a3bc54a71d9defd456df19b6b79fe8dbacb01442c40afdfa8c27dae4b9be8","sha512":"b8a1797e47d9744bfcf9da204ec93c451f04984da320b3ad60f98ed33ac99eb5783c70349ff88bb24843e4911b7c0eb37ad45ccf764a7b8ceace0f3e6d0fab33","ssdeep":"48:MbVpeVMaCAzNGPF2r+io7CfXIevddxqeSoc4G2FVDFV49o50QPn0aQfamc535P8t:MxpKMaJz4d2EerJPcU1/G","tlshash":"b0a1bb91f26e22ac79b7d006d6a0977c7738f343970109aa961363e58ecb2d33469d7c","first_seen":"2026-07-05T19:27:25.464578Z","last_seen":"2026-07-05T19:27:25.464578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:bold","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.939Z","timestamp":1783279607939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Inter:bold HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Jul 2026 19:26:48 GMT\r\ndate: Sun, 05 Jul 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2437,"size_decoded":1306,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ddcc7bbdb3584f7f755e64577d482a2a","sha1":"452e8f8b8f0b5673f4cdcbf03b6328040b917602","sha256":"fab4131feba9e709217e767511d1a279a28cd25c493a83912734395d3bc9f016","sha512":"0e30f16f985a8dc24b93ca984a14e47f83effe815477fa4636815b8ec6504aa23e46ccbd11159d293ceadddec465efe5a11884194b402317aac28fa31e237a8d","ssdeep":"","tlshash":"6c41d091002f95005b4b2dd663cf3e369ece21482085d5aa9bfe0dc59ceae36436979e","first_seen":"2025-09-30T20:46:54.830507Z","last_seen":"2026-07-19T20:08:07.647099Z","times_seen":21,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":49,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/commonForms-B1pU4S_z.css","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.877Z","timestamp":1783279607877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/commonForms-B1pU4S_z.css HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-806\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2054,"size_decoded":1428,"mime_type":"text/css","magic":"ASCII text, with very long lines (2053)","md5":"7cbdd72f90452b41dc99a938a9224b2f","sha1":"f9e7dc69bf3b892fdd1723291e3165f2882476d0","sha256":"922d0d98e903998cb6731a61184c218edd6ad1c8e2ab5f6cdca324b6b5523994","sha512":"dbc7b59fd4b4daed207545eae43bd1a664793087fab2f1b2ff61297b939123459d7c70dcfc47d94ed9e26c243693282501b25b6dcc5a26da742e2f6439571d03","ssdeep":"","tlshash":"f241cb20fa8c210d70bfd6ddb4d2a1d82835a6731a7e4b797d6e30add5f31c27862240","first_seen":"2026-07-05T19:27:25.466516Z","last_seen":"2026-07-05T19:27:25.466516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thepersonalloanfinder.com/loan10000/assets/TermsText-UU8qMoBA.js","fqdn":"thepersonalloanfinder.com","domain":"thepersonalloanfinder.com","tld":"com"},"ip":{"addr":"35.153.154.134","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepersonalloanfinder.com/","date":"2026-07-05T19:26:47.887Z","timestamp":1783279607887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thepersonalloanfinder.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:2E:87:1E:98:8B:C4:E9:AC:D0:A2:E8:4F:FC:AE:CC:39:53:34:35","sha256":"A6:B4:6E:89:5A:5C:E6:5E:3E:3D:38:65:61:C2:0A:DD:6B:91:4E:88:3D:EE:F2:73:F3:4C:C5:5B:3B:B0:3F:2E"}}},"request":{"raw":"GET /loan10000/assets/TermsText-UU8qMoBA.js HTTP/1.1\r\nHost: thepersonalloanfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thepersonalloanfinder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InhrT3J1cFd0QlRXanluMGZZdGtZVGc9PSIsInZhbHVlIjoiRGxlZ0xWM08vTHd2WWZlUXZDVG5LMFJtVmtXTHJTQXR0VzQyMmxPaGJjNFAvWGhvM3haSnpHMDFHMGx4Z2FKRjYrR2FFY3RwYUFTTkVWcERQOFFxc3d5eFM1eWg1Q0M3bllHekpReDliMDZTN0F6cHQ5Qm9OemxiRGtTa2poeVoiLCJtYWMiOiI0NzJhZWI0ZGRiYjgyZTM2YWMwNGE0MGQ4MTkxOTIyMTQzYTA5ZDRjMTdlMDVmNGI3MjNkZDMyMWU3ODdjZDM3IiwidGFnIjoiIn0%3D; cerebrofront_session=eyJpdiI6Ink0SkRTbU9xc3hYZm1rK2FpWDJqWkE9PSIsInZhbHVlIjoiR3RsZ1dNYkxVQ3RiV1AvTURBUTV4TzE3ZURZM1hKOGlkZUNiR09qRFVCZ3NBV0VYOVJRYm9XWlNjeHZVUXBFMjlYY0NXSzlwSjd2Q05CYVBWN0RSM01hMm40WHpuWW54Y1ptS29hb2pSWFJHRFk2eTArekU4bkNPWmlrWGpSdDgiLCJtYWMiOiI1OTUyZmNiMjI0OTgyMjFkN2I3OTI3MzNkNDNjMmRjYjM0NGU4MWVhZDIwZDg4NWRjZDJjM2M1NDVjZWNjNGM2IiwidGFnIjoiIn0%3D; flow_id_internal=eyJpdiI6ImVXVkdTVWNkcEphWDN3RGVDOEdBN3c9PSIsInZhbHVlIjoidWNCekh4Vkwzek9zUm5IdEUxNEQrK2NlL3F5Q29BRGMrdXE5bnVYQmluTkFHQ25oM1pMU0ZMaG80TGZuQ0xVMyIsIm1hYyI6ImRlNGUyMWIwNDUyNWJjMjU1NmY4MjRjYWU3NGIyZGRjYzZiZDBhZjk1OWI3YzFkZmQ5NTNkMWMzMTIyMzUzMjgiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 05 Jul 2026 19:26:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 03 Jul 2026 10:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47918b-19cd0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, Range, Accept, Content-Type\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105680,"size_decoded":39452,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51877)","md5":"b7fac049f112de1a8993889fc3a06b67","sha1":"95640b1a8c9f57d52e9ad43b11226601a0a81525","sha256":"208fa9c88dec55873b30774ca12a632cd062c03fa740c442b366f062728605ba","sha512":"073ac891bd03a45270d69e0608997d04568fc3c095a7ee8e49acab686352a0596f1f00d0a8030786aabe245f0caba45d0f3ff9e86701d7873811b8966b8f772a","ssdeep":"3072:jv99sCVIExP0EdoJHdGBfHetR+0H0FvCgrLIh:jv9iCFMHdGpHeHHUCgf8","tlshash":"88a33a9bf3842272165303e4761b5fd2fb59a46873109c907cb9d2a807a5e2ce3377e9","first_seen":"2026-07-05T19:27:25.467661Z","last_seen":"2026-07-05T19:27:25.467661Z","times_seen":1,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"thepersonalloanfinder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}