{"report_id":"8cdb0c58-1166-4c58-9746-1cf7a16cbc47","version":6,"status":"done","tags":[],"date":"2026-03-31T14:07:35Z","url":{"schema":"http","addr":"dash-uat.absa.one","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"dash-uat.absa.one/","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"title":"Absa Merchant Portal","dom":{"size":10018,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (740)","md5":"4f66f2deff7ce31c02d5b171e086b59e","sha1":"eb7c6f115948767b4c4ece8a4815594bdc20936d","sha256":"20254bd50a2a48ccce9ce3eceb82ee720b72011b588062800b024ef2fa360100","sha512":"fed6abdc509b612701b41647f56a99a4cf0b619e7ac68aa4ce6aa53537bbe212690e9fe05bcffcacff5bb3d5c902b1766400a63768af03a817d4320cd64e5cf3","ssdeep":"192:OZDI7n20CPfMgGBhRfnTE+qtpJj7ItRZygKW7tq4T3/oEXUTzUWL3/Z5:OZkb20CP09hRYxktXnBbwt5L37","tlshash":"0f2262f59cd5402b2313a8cab1b1f71af8a2840fd95de84a76fd87645fe2e888847149","dom_hash":"domhash9eba29c4a86e1ad387d183eb6cc631a7","first_seen":"2026-03-31T14:07:49.547907Z","last_seen":"2026-03-31T15:01:52.858608Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dash-uat.absa.one","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T14:07:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":4,"received_data":926189,"sent_data":1812,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":3,"received_data":46973,"sent_data":1667,"comment":"","tags":null,"fingerprints":null},{"fqdn":"absa-za-uat1d1ccda7.service.signalr.net","ip":{"addr":"102.37.160.43","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"domain_registered":"2011-05-13","domain_rank":0,"first_seen":"2026-03-31T14:07:45.007812Z","last_seen":"2026-03-31T14:07:45.007812Z","alert_count":0,"request_count":3,"received_data":1378,"sent_data":3306,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dash-uat.absa.one","ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"domain_registered":"2023-04-18","domain_rank":0,"first_seen":"2026-03-31T14:07:45.008923Z","last_seen":"2026-03-31T14:07:45.008923Z","alert_count":105,"request_count":35,"received_data":15454243,"sent_data":16344,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"html2canvas:1.4.1","description":"Screenshots with JavaScript.","website":"https://html2canvas.hertzen.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Blazor","description":"","website":"https://dotnet.microsoft.com/apps/aspnet/web-apps/blazor","common_platform_enumeration":"","icon":"Blazor.png","categories":["Web frameworks"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":4,"received_data":59008,"sent_data":2059,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dash-uat.absa.one/_framework/blazor.server.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae9f1a6d98a5e41c5d407c139695c2db","sha1":"ba5bb59c1cf9f6948a181b7bfe43abd1aee16a64","sha256":"7a0d0e9d4b209d848c0786c6102d9e58a1d565961fe8fb32aeedbeb250aa1256","sha512":"8a6740324a4722f80c036a94a2fb0e765c2b87af993d95cce8640c88da0cad96eb319d3744d9e48faf90aa509420938bd35ef8d07725239e3561c98a0cfe7a8e","ssdeep":"3072:z2G5q5ZgI59LqRttcZ7Gl9dcDNgazssgYIYsFR:SZgIlqRteZ7WqG","tlshash":"d6f318923391613643dba5e341361203f33554587a09446cb62c98ffae7dac4b2bbfb9","size":164838,"data":"","first_seen":"2026-03-29T10:33:01.858694Z","last_seen":"2026-05-13T04:50:22.468754Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/custom-functions.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"54fe0b182e4fb879e8f3012146c3fd8e","sha1":"ead4a67cc566e405368dd394e1dd938a843c5275","sha256":"6a81a8d3ccf889c70a520e60e0242038840ed87c81bc55fe1bcfe61a45f8cebf","sha512":"4eafd07e8c9eaaeb31830cbe75c09c669f9428cc0dfb7dc4df1cb4d02634e31bc987fb4a11754dbc266d2c67cfb107f906f8aca019c4578601533c547ad021af","ssdeep":"768:yvlV97gRg0on7gvN0GvzhW7q2L3ja34U/ObLObPka2irk8L4JvQcm2kV6eEmrjSl:yJ6g0on7yaGvzhW7q2zaoU/ObLObPkam","tlshash":"54d2962435752121466f24ae47876389b110900f731addc47adfc2286fe4f56a2fbeea","size":29860,"data":"","first_seen":"2026-03-31T14:07:49.578138Z","last_seen":"2026-03-31T15:01:52.895696Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/maps.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc907d489cb15d6562ead46c7a12af38","sha1":"9cc70a3673633da2e16ed74c17d039af0690d9c3","sha256":"35a266cd85e8cf573a9a59171f2226c1125b5088435f71e2f74ba621e8f88736","sha512":"9611d1b21992de13f717c40fb15d97583c9a75157d33b9c601c36336078462f459848954db4bfc9ef58dcce81add8c2ebc3492026dd8a3e2f0403c5272a2b738","ssdeep":"","tlshash":"d9e0265882f335b24c2f12080b7f218291b18113680eef103f8ce3598f9926695856cc","size":401,"data":"","first_seen":"2026-03-31T14:07:49.619414Z","last_seen":"2026-03-31T15:02:16.96465Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/js/transaction-alignment.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6ca0e2fbe57db1a1409c026b7715d50","sha1":"efacf4d588456a88e6bbbca54f6c489f179cfa25","sha256":"87d2b3935b391e2200de35ee44005ba21bb596dec5099c78ecbb9c9eae081cd5","sha512":"4da34cd8c67e888d486cbd092833df96b4aeb84c7f87be7148bebbbcea3dea709865e895a366a9e7948ce01d01d13ed2952faa12828282f6c64193b1fb2c520c","ssdeep":"","tlshash":"1071005132723030806aa2bee3cb691a3b7581033807da8579ddc2925fd58fed663ddc","size":3586,"data":"","first_seen":"2026-03-31T14:07:49.593655Z","last_seen":"2026-03-31T15:02:16.965212Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jspdf/2.5.1/jspdf.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b083e75a84a5c0aa7ba119726129b49","sha1":"d5d92368d247d0b3d5fb299492824faaa1d1ebdf","sha256":"b02ca86f6c738a957c8aef1b131a623663523e34b4fad060a92fd62ee8226fd1","sha512":"91b59e9f07ce11fd6c4fdc2868a5e118a9990a5a53f59c4fefe89fe1724224c4b0f55b3306baa5ecec8e062df2d1e661e9e084068ea9b914f5bfb17300986177","ssdeep":"3072:2T1KrwHaOc78sdqarwMRxm4OwseUjv601L+00ZpD7DFTMftrf6ydO0QLcfouYak7:28M69Rh6y0TIT6foR","tlshash":"80743a9632907065429395b0102f010eb23a762a6b8ac45df776ddd6ecb89ded07bf38","size":364462,"data":"","first_seen":"2023-05-02T14:45:50Z","last_seen":"2026-08-10T04:14:37.664106Z","times_seen":2369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.SfPdfViewer/scripts/syncfusion-blazor-sfpdfviewer.min.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fbba5c42361ef28a8e13c817692a67a","sha1":"d2dcb117347cb214af40e67c2418cf650240e8c6","sha256":"633f3bb10ddd3e161e131a54bd74fb23b0e6c3aae03c5dd2dd881553267182f2","sha512":"a0d410abbb65a2f59e27cc569f375ce744916e3ed9e6b8cc0fc1876dbb398bee11a854fe2a89d0d9b3fe622f71689c6cfd53a58453650596fb07137b00fb4429","ssdeep":"49152:9NeAE0Nt/Wu2nFZxe7odsqUUuF9dTtvsQ1pZoGEUK1bBslIffC1iQgDdLkRSfm6s:MQgDdLkRSO8ovGD+3reBXpwj1Yhm1JX7","tlshash":"3dd509ac722035714edf42d7a0aa0645a672609e90d191ecb72dd4da2c78c9233eff77","size":2855138,"data":"","first_seen":"2026-03-31T14:07:49.635047Z","last_seen":"2026-03-31T15:01:52.949881Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/js/performance-optimizations.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a69408d42cf60642664fbf3ebf07e7","sha1":"c803bd34683547fdb990c1eff6cde8ca4457b3b9","sha256":"0322250ee4fd2e84f9441c520f936e0c9b4d4161234844791a646b320421d775","sha512":"502287c20113996276f4cee681f54658d31fa775e42a3ee10698df6df54933d962e1ae9e4356a933a3cebee2d43518e9f79a6c296aae751f7f1d9994b1364958","ssdeep":"48:MwGxXMEifQhe7F6H850RbjixuD8P0k3D1RL4s7iSfRDfgGFFdeQ:MwDE87F6cGbmxdMknL17FsQB","tlshash":"1ca11e3865f7607a4633bcbdf7cf0105bb7540132408da257e6c86849f82a6867e5b9f","size":4723,"data":"","first_seen":"2026-03-31T14:07:49.583828Z","last_seen":"2026-03-31T15:02:16.952412Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/custom-charts.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"36b837a7a47b6a4eba5dc06be398be3a","sha1":"debdfc26129430a11b8484b7da4368ca3e5224be","sha256":"2cf94a6d3427c309b97d1feae4217bdf797cd2386e8e953c2d3dc6568c679d2e","sha512":"85a61d02e2c8ba814eb16f8de0b82ee20174b6584a684284491072b0ec6ce4d0306974b96f5412432ac9a187bd101177b3ec50027cf1e895797ac0b76d94e824","ssdeep":"","tlshash":"99417868d5f390592523256f873f460ba8b0411b6a0cbc357e8ce2a49f4d22d5eb8fd4","size":2042,"data":"","first_seen":"2026-03-31T14:07:49.581326Z","last_seen":"2026-03-31T15:02:16.957169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.Core/scripts/syncfusion-blazor.min.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3bb65265f2e26e15512ec426498a22d","sha1":"dd3819b24c355a4bfd7fe20a5b5af93597558387","sha256":"0ccaede9fefcf07f9d6e59a6cbf3b7f658b1a2d380d783f0318a635ad2e9a81e","sha512":"d4321b371f51937e783915ce51cde4676822d5836bfce73145394bd8e447df5c2d5c598a6c7ebe7fc37e437caf923da1d42481041ba2c1563c3be0ec45cf52c7","ssdeep":"49152:kg7ATnO6jqZpHzTJ+/uu2nKZ+kT775HCi4v16dS9U3slN5rVZZm7wSLr+yti7C5i:lK1UYmN4TKzSTmoRY","tlshash":"66462a1d7610393653de56db509a0bc9773715aee40180bcfa2dc8de2cb8c86326bbb5","size":5442052,"data":"","first_seen":"2026-03-31T14:07:49.637237Z","last_seen":"2026-03-31T15:01:52.948431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","size":198689,"data":"","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-08-10T01:57:00.660166Z","times_seen":6582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/dom-to-image-more/3.5.0/dom-to-image-more.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b15e27c1e02b9fb6a8cf3777194399d3","sha1":"d081a657034a7914aaf3ac0e4e7becb7819cea30","sha256":"a76f750ffe50c8f5f8517cd5fab758c168f29b23ceefb207859bf144481d40f8","sha512":"a5f5c6b3e9fec0f9ff8ec5430155c209c77d6176d06b6de62ccd7381d7a197a59f4df6c0c311f4d70141b0ea815ba0742d9549042cbfd33cfa4f56190f517d79","ssdeep":"768:kvWeUQs/XGjvG29cZcoBWFZ3EUWZ7TNEYRqqz2OIADidEFrcl:kzyAvGccZcoBWFREU27F0qaLfdEFgl","tlshash":"5e43945c39f32211419770bcab8f910875349213661cde94bead83a06f65a78e6f3bdc","size":57461,"data":"","first_seen":"2026-03-31T14:07:49.579384Z","last_seen":"2026-03-31T15:02:16.961108Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Radzen.Blazor/Radzen.Blazor.js?v=10.0.5.0","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20b4742978822f5f144d501eebf0c93","sha1":"111a7d963246ab09c313060ad1493f4932cfd031","sha256":"63fb8e7cb3ab28f728352faea3464e4864f9ad640b99c3bf02cf68d04267d50e","sha512":"cb95948fe4cba5bee78814ad485848c9662e2417b578c573c509be5c5784bc7b8902d797528fe9f0e922ad5f972a3a51e2a529b3cb3d9a7bed16f8db931d2dae","ssdeep":"1536:kJWZ5fX4+S2UGGLIgL5fe6cxO5hqVneIyzhv+Z3EvSPnyxYpCx8:kJWZ5GI0efOuVCk/PnyxU","tlshash":"aac3931d6be720b2559bb27e97ef824876724083500add103e1c96809fd0db15afafed","size":128690,"data":"","first_seen":"2026-03-31T14:07:49.56015Z","last_seen":"2026-03-31T15:01:52.905083Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2pdf.js/0.8.0/html2pdf.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9957ab8295f42b0bfa54be369ee1d1a0","sha1":"2a295fd5d354dfa6d122f5c31c9be2dd54743fb1","sha256":"f7ba2f8fd350023673618dcba91954b72275413419f49b74c36f501c14a4607b","sha512":"c37bbdabf0de9de092c140e386230d89b4d187fd62fe049c055a768a635500c0ade9c507230eb1ce1cdc3c521a2f743511b23697e9eed7bab668b2492e8e1962","ssdeep":"3072:AG+dLv/bYhv/f5PAeOqONQnbxlV6pe2blsBPQufV8ToNZeCxhu/ghZ8Yb:Rn0YouGTOecu4hJ","tlshash":"5a543ba871853429439795b5606f120ea3376429614bc46cf378e9eaacf898dd03ff3d","size":301519,"data":"","first_seen":"2025-10-17T22:38:28.775398Z","last_seen":"2026-07-16T02:44:49.372747Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.Core/scripts/sf-utils.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ae72e734cbce7d48b4410021dc63be9","sha1":"506168fc91ac08148fa50f2ecb380766377e4cb4","sha256":"ba92b2b1cdc3f81d4017ab455a9711117bab5a835d2faab9a843e98774889509","sha512":"6f55d01b99932eb77631dd5e65eb2127916562b62d55d718b9d25e5c774d1a49f515f0d3192fa5a690fd81a24c49a72f40e812d78d140ab66a9593da57a20be0","ssdeep":"192:jxcBpAIsFfl1RxIhJ7TUsZjcPYizcWgo5pQTYDNmPHNfkUCIUxOX9OA:98kzIhZw7cWlrNmvG5oX9OA","tlshash":"cd729454ba8102320c7722bddb07b189fe79522b233152947ebe83755f34a5861e6fc9","size":17199,"data":"","first_seen":"2026-03-31T14:07:49.554974Z","last_seen":"2026-04-01T17:53:19.761484Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/qr-functions.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"36796b797904745e9248e7e21c608fb6","sha1":"52692a23d3f0d507a5b04a8c1daac06d448f6925","sha256":"e655fe49388a13ae32d32fe971e9ec8449f73008794e28abe7a4173a124fa539","sha512":"433afdd4dcb31b97ccafcdfe7cab56c28e5c3458dd8ddc92168dc55ea4baf5fe8e42bf922fd5152fe52bde94b7eb1b7d9ca51233953f564ab812f57590a40226","ssdeep":"","tlshash":"8be0c22f31a108c00b6f207be41f820ce0a22027980c8608fd0c4719ff78b3db0a2b96","size":376,"data":"","first_seen":"2026-03-31T14:07:49.582719Z","last_seen":"2026-03-31T15:02:16.976954Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/js/session-monitor.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b8e77d58432ca70f32e171e0761650","sha1":"6900db56d931685d55cefae15a7d5a0c37767c1a","sha256":"461d9c837c1b6460c4b5268afab58bd284c7c2d529551547870c82f4d813319c","sha512":"b055fbc53a7929a4da8f40251bb881e581ad30c475b72579ff861e16059182e31eabe8b52edc068c73b135c7253fffdeff95caa92c309b96b38ed183979aae1b","ssdeep":"","tlshash":"1711ce2783af25369e6fe2250b8fb2922727a093720285443f4fc7855f54b9390e07c9","size":891,"data":"","first_seen":"2026-03-31T14:07:49.549932Z","last_seen":"2026-03-31T15:02:16.953144Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c460f0cb0d35960c06c2c04f7205f24c","sha1":"ab85dfee681fed59eeca3baabc83ac3a73e4c894","sha256":"5247e1687ec317c984b3605ebf0ea55997ae92eb62c802d0c90e21468c271279","sha512":"635c1222668b543874a8541302a2e97658a0aa84a07e746e1b0ff8623a5ebba09fe4e1076e97fff89406a38f89736f5ee1a490cbb6d4b07b2e29fae0b76edf96","ssdeep":"","tlshash":"70e061112147194e49731852236f31512737a213b3479c047e5f878c5fc7465914b6cf","size":421,"data":"","first_seen":"2026-03-31T14:07:49.638841Z","last_seen":"2026-03-31T15:02:16.981455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dash-uat.absa.one/js/session-monitor.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /js/session-monitor.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcbd0e3c1d0afb\"\r\nexpires: Tue, 07 Apr 2026 14:07:13 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 134a69e77dc545019305f1e1c13710fb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f4b8e77d58432ca70f32e171e0761650","sha1":"6900db56d931685d55cefae15a7d5a0c37767c1a","sha256":"461d9c837c1b6460c4b5268afab58bd284c7c2d529551547870c82f4d813319c","sha512":"b055fbc53a7929a4da8f40251bb881e581ad30c475b72579ff861e16059182e31eabe8b52edc068c73b135c7253fffdeff95caa92c309b96b38ed183979aae1b","ssdeep":"","tlshash":"1711ce2783af25369e6fe2250b8fb2922727a093720285443f4fc7855f54b9390e07c9","first_seen":"2026-03-31T14:07:49.549932Z","last_seen":"2026-03-31T15:02:16.953144Z","times_seen":4,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/icons/alert_icon.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/icons/alert_icon.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5700\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d1fc4\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: e1e7e9e0e61a475fbd0c4cefe00f99df\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"6db2aeef843922f69b582bef0c87e5f1","sha1":"a62c8d0e074901855ed29d3480d6e40f25d02b76","sha256":"bc6fb69c444d9f4928be2d0888ae461335ca2391d542dd395bfd54506aac851c","sha512":"01017e3dec79ce18bf7248e76566d84517414f51e78bebc3ab317027ff256d2683dfdfc26ed68917f96692327e31703cd2141af0071609f9d876bee35c575536","ssdeep":"96:jCzXXx8pJX80hSHzo1k0jpLGwHw2Gq5yye9Yu4Ox4StPur9EUhL5YTeEiulIJJWJ:2XX6p58gpLnHdyye9NFtc26uAJWbMmMS","tlshash":"e6c17dbf6ca6dddbc44d6bbde213099c764e0982cbd285f075b56a38085f6122b3d312","first_seen":"2026-03-31T14:07:49.551233Z","last_seen":"2026-03-31T15:02:16.965837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/icons/success_icon.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/icons/success_icon.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 6187\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d11ab\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: aff3fd1dc3354e7c83e45af83c762b2b\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"9247aad482d0d1342dee5f56ad6d9b1b","sha1":"cd0e13141e68ac4b4f0f69c08b2f44ffcf5e158d","sha256":"3eba531fbeb86f0f906b83b9933a6a17ba15289794883b47b000883fa8405aa0","sha512":"b78a640a9d2cf07755c8f1ff12b146b9187e24bd298cbe401d636f27a8295678b74db21689480b5ab48bdd4e0e4cbc2c1a09ed1db6f6758bec44e8eeb37d3b7b","ssdeep":"96:f1+jE//hmfIFV0uBP9p35u7TQxPAQb8NhXaZkY7k5ZVhJt2sxy/9cIiTJ:gIhmfYVe7/Q1ZkY4ZJtS1qJ","tlshash":"edd1ae9591ae64fcfa0f3eb1db97019e9940005f8c17e607df38169c287418d725be86","first_seen":"2026-03-31T14:07:49.553693Z","last_seen":"2026-03-31T15:02:16.977587Z","times_seen":4,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.Core/scripts/sf-utils.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Syncfusion.Blazor.Core/scripts/sf-utils.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcb2e034a67832\"\r\nexpires: Tue, 07 Apr 2026 12:11:22 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:54:54 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 70b0006ae7d5439eabac061704e86653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9ae72e734cbce7d48b4410021dc63be9","sha1":"506168fc91ac08148fa50f2ecb380766377e4cb4","sha256":"ba92b2b1cdc3f81d4017ab455a9711117bab5a835d2faab9a843e98774889509","sha512":"6f55d01b99932eb77631dd5e65eb2127916562b62d55d718b9d25e5c774d1a49f515f0d3192fa5a690fd81a24c49a72f40e812d78d140ab66a9593da57a20be0","ssdeep":"192:jxcBpAIsFfl1RxIhJ7TUsZjcPYizcWgo5pQTYDNmPHNfkUCIUxOX9OA:98kzIhZw7cWlrNmvG5oX9OA","tlshash":"cd729454ba8102320c7722bddb07b189fe79522b233152947ebe83755f34a5861e6fc9","first_seen":"2026-03-31T14:07:49.554974Z","last_seen":"2026-04-01T17:53:19.761484Z","times_seen":4,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/Error?httpStatusCode=404","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /Error?httpStatusCode=404 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 3295ee8cee1445cd922ba69a1bf022db\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 14:07:12 GMT\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-10T12:48:00.985226Z","times_seen":60899,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":119,"dns":0,"connect":26,"send":0,"wait":34,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jspdf/2.5.1/jspdf.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jspdf/2.5.1/jspdf.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 95394\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61f43d69-174a2\"\r\nlast-modified: Fri, 28 Jan 2022 19:00:57 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 556851\r\nexpires: Sun, 21 Mar 2027 14:07:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKebUERF6tWUfuxIVN1tDOnLQA7z3Czz58STEGmM2fCO1wUw8i%2FEIt6yXsU2iw6e5uNqLGuuv7O%2Bw0aeO9RHt%2B1TYIBdqvYo6gdtqN5vz3Wt0XAP%2BhdpDhIUq3M2iJKTR3WYU9Em\"}]}\r\ncf-ray: 9e4feb489d230883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":364463,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"0b083e75a84a5c0aa7ba119726129b49","sha1":"d5d92368d247d0b3d5fb299492824faaa1d1ebdf","sha256":"b02ca86f6c738a957c8aef1b131a623663523e34b4fad060a92fd62ee8226fd1","sha512":"91b59e9f07ce11fd6c4fdc2868a5e118a9990a5a53f59c4fefe89fe1724224c4b0f55b3306baa5ecec8e062df2d1e661e9e084068ea9b914f5bfb17300986177","ssdeep":"3072:2T1KrwHaOc78sdqarwMRxm4OwseUjv601L+00ZpD7DFTMftrf6ydO0QLcfouYak7:28M69Rh6y0TIT6foR","tlshash":"80743a9632907065429395b0102f010eb23a762a6b8ac45df776ddd6ecb89ded07bf38","first_seen":"2023-05-02T14:45:50Z","last_seen":"2026-08-10T04:14:37.664106Z","times_seen":2369,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":8,"receive":7,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_framework/blazor.server.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_framework/blazor.server.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcab49d21524e6\"\r\nexpires: Tue, 07 Apr 2026 14:07:13 GMT\r\nlast-modified: Tue, 03 Mar 2026 20:10:46 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 7dbe740dcfdf4235b7d888eb168016b6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ae9f1a6d98a5e41c5d407c139695c2db","sha1":"ba5bb59c1cf9f6948a181b7bfe43abd1aee16a64","sha256":"7a0d0e9d4b209d848c0786c6102d9e58a1d565961fe8fb32aeedbeb250aa1256","sha512":"8a6740324a4722f80c036a94a2fb0e765c2b87af993d95cce8640c88da0cad96eb319d3744d9e48faf90aa509420938bd35ef8d07725239e3561c98a0cfe7a8e","ssdeep":"3072:z2G5q5ZgI59LqRttcZ7Gl9dcDNgazssgYIYsFR:SZgIlqRteZ7WqG","tlshash":"d6f318923391613643dba5e341361203f33554587a09446cb62c98ffae7dac4b2bbfb9","first_seen":"2026-03-29T10:33:01.858694Z","last_seen":"2026-05-13T04:50:22.468754Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Radzen.Blazor/Radzen.Blazor.js?v=10.0.5.0","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Radzen.Blazor/Radzen.Blazor.js?v=10.0.5.0 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 128690\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb6f2e1bf06b2\"\r\nexpires: Tue, 07 Apr 2026 12:08:50 GMT\r\nlast-modified: Wed, 18 Mar 2026 16:18:40 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 56da080ce2374beea9e1b4c289591312\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (317)","md5":"f20b4742978822f5f144d501eebf0c93","sha1":"111a7d963246ab09c313060ad1493f4932cfd031","sha256":"63fb8e7cb3ab28f728352faea3464e4864f9ad640b99c3bf02cf68d04267d50e","sha512":"cb95948fe4cba5bee78814ad485848c9662e2417b578c573c509be5c5784bc7b8902d797528fe9f0e922ad5f972a3a51e2a529b3cb3d9a7bed16f8db931d2dae","ssdeep":"1536:kJWZ5fX4+S2UGGLIgL5fe6cxO5hqVneIyzhv+Z3EvSPnyxYpCx8:kJWZ5GI0efOuVCk/PnyxU","tlshash":"aac3931d6be720b2559bb27e97ef824876724083500add103e1c96809fd0db15afafed","first_seen":"2026-03-31T14:07:49.56015Z","last_seen":"2026-03-31T15:01:52.905083Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_blazor/initializers","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_blazor/initializers HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 0c2ff8069fe1416abc5f8144741f3513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-10T12:53:15.698409Z","times_seen":315531,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/walkthrough_banner_one.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/walkthrough_banner_one.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 394670\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1b0c2e\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 03aed35ec8e74573a3781fb42cfe173a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1072 x 433, 8-bit/color RGBA, non-interlaced","md5":"41dbf162ada5575a997764255947831e","sha1":"f27d3219a787ba67e6e56f7bb1299615927a0440","sha256":"5a666849cf545bdb0bab56a484b4159dbaa3843bd28d3b6e49ceaf3c7ea8037d","sha512":"0a54fb0ac8d54ae626072af1f862f4139fc1836a174b2ebacf547c07791230fc77916af837ba26265186d4f4b462650ce4cc809b0ca28320de2526797cbdefc8","ssdeep":"6144:O1EShL8m1kkEKtQMwi1tqSCfy1QGHpEvI0KpGWg8D4Jf5qnkfHGWuQreD6k:nSdQgHTqVy1QG6AtVu8nuHZDqOk","tlshash":"a8842309a59a437f33337456417614ba2a2d66195e1cce36bc79dcf4fee2a329cf0902","first_seen":"2026-03-31T14:07:49.562499Z","last_seen":"2026-03-31T15:02:16.950576Z","times_seen":4,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/icons/exclamation_icon.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/icons/exclamation_icon.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4061\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d065d\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 7a5b5635b1e84ba2a6c2d7f5ef430e84\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"9ef590e642b6a1b4b8d28d95cf5db10e","sha1":"a640045e1dbced5a08de3e55256b589c8ff631fe","sha256":"bd1a292ddeb067622e474d070eb9e528a27367bf29ce88560bd7758eaaf2bbb0","sha512":"4c9fe1f0069598ce3121a20a084dced96378bd24f1daf3bc97fb885837d0a4ab26421bff3ff5775607581acc97606853cb5622627fddc5dc0ff9ddd908b00e76","ssdeep":"","tlshash":"00815ddcb73e0c58a44a84b75238468f320e66e6671a7ef9c8d3377b7937694320a641","first_seen":"2026-03-31T14:07:49.564826Z","last_seen":"2026-03-31T15:02:16.959232Z","times_seen":4,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/absa_logo_filled.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/absa_logo_filled.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 6528\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d1000\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 0decce003d0f48ed8ebc48eabc69155d\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 145, 8-bit/color RGBA, non-interlaced","md5":"343e71a37bf616f8803aa93a5d70a03a","sha1":"97fa2ee7d568139ecee15fe8d476b1237b765923","sha256":"1a7f0f693dca7e16536f593a7b1af6e1f3e36cc0d42c9e4f1b2708a43be7848c","sha512":"f17d0b26a081242be6a9c14cc77bd39d35226c1136143036b5f667bd5fb29aee55caa65df8366d4c98c68103811758b68e743ca7259279d5238adacb30908b45","ssdeep":"192:cd/qoPfb4BsZ0yesQxsjGT7A+ki6jXZL6:cdi9sJnQypxi6LZL6","tlshash":"4dd1bf5285356c0a9f59263efd2e85597c040fd7f8845fcfb719c2aa9e15525b80047c","first_seen":"2026-03-31T14:07:49.566613Z","last_seen":"2026-03-31T15:02:16.955233Z","times_seen":4,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Source+Sans+Pro:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 14:07:12 GMT\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10360,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"df8ac1425696ca60c8094197ab44e309","sha1":"9cd325eb0d19fa7eef6a44b5bb027ad49ab57901","sha256":"f97cd5df7ad589b201ecef5634a5e69875dbd8433a9caa08c848c1e38247c340","sha512":"9c00ccbf77e23252be343d20c2ccf1863c1ed37cfd34eb11431d56751f85253fe70480079a3338031a9c2930c479b22ea47478ebe93788fafcfbe3d53ac99d97","ssdeep":"192:nnXgJ63qyItlq+cJ83LZXgrV05QU3tzGqGHbE9a3u2oZq:nxjW0MG1N","tlshash":"82228df2411aa404dba31cc633de3f6aad4e60216155c27adffd5858acaac2a4364f1d","first_seen":"2025-09-15T07:15:54.931669Z","last_seen":"2026-08-10T13:27:56.719756Z","times_seen":975,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":138,"dns":0,"connect":12,"send":0,"wait":31,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2pdf.js/0.8.0/html2pdf.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/html2pdf.js/0.8.0/html2pdf.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 64879\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e9d-499cf\"\r\nlast-modified: Mon, 04 May 2020 16:11:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 70412\r\nexpires: Sun, 21 Mar 2027 14:07:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hfdn6tzfV9ilMERjGThNqYGnOMTtOkJSBGjqOxoXeLFKEsDaIXDReDW%2FKwgd2RI7XAOx1QWG1iXSj1QSiVuloqwEOZJ%2Bj7y9saRADPfdF0IGplTagiglozpsSbD%2Fso4qNLW3aEnm\"}]}\r\ncf-ray: 9e4feb48bd710883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301519,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65438)","md5":"9957ab8295f42b0bfa54be369ee1d1a0","sha1":"2a295fd5d354dfa6d122f5c31c9be2dd54743fb1","sha256":"f7ba2f8fd350023673618dcba91954b72275413419f49b74c36f501c14a4607b","sha512":"c37bbdabf0de9de092c140e386230d89b4d187fd62fe049c055a768a635500c0ade9c507230eb1ce1cdc3c521a2f743511b23697e9eed7bab668b2492e8e1962","ssdeep":"3072:AG+dLv/bYhv/f5PAeOqONQnbxlV6pe2blsBPQufV8ToNZeCxhu/ghZ8Yb:Rn0YouGTOecu4hJ","tlshash":"5a543ba871853429439795b5606f120ea3376429614bc46cf378e9eaacf898dd03ff3d","first_seen":"2025-10-17T22:38:28.775398Z","last_seen":"2026-07-16T02:44:49.372747Z","times_seen":15,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":37,"dns":3,"connect":9,"send":0,"wait":12,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.Core/scripts/syncfusion-blazor.min.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Syncfusion.Blazor.Core/scripts/syncfusion-blazor.min.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5442052\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb2e034f53104\"\r\nexpires: Tue, 07 Apr 2026 12:08:42 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:54:54 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: ed818e2598464709967e3a4daa2d35ef\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5442052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64995)","md5":"e04caea6e392cb1cb369118961a78b31","sha1":"0563439d91d4745e8ed01e390d5c33badc2c1a71","sha256":"bb921f1f83c83915f2cc8419524c99ba663e1ac368376c5d835d783261f5f758","sha512":"39a115525a767add226123cb2794549e1b99afb0118186f6ca309bc2f1f34cac0b3051d0297261ad20a5a6efe30de50f4822320c0c1b375ed9929bd9cb8a3ed0","ssdeep":"12288:kxu7ATtV/OdojX6E1gSGlXkX8NpHD19+Kjs:kg7ATtdO6jX6fyXmpHz+KA","tlshash":"9725094db665343252de12e7486f2a897337156da40940bcf96dccea2c7cd87232bb78","first_seen":"2026-03-31T14:07:49.571519Z","last_seen":"2026-03-31T15:01:52.908623Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1365,"receive":856,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/Error?httpStatusCode=404","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:14.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /Error?httpStatusCode=404 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/css/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 31 Mar 2026 14:07:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: d540facecae44d08b497f8209162e61d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 20:36:35 GMT\r\nexpires: Sun, 28 Mar 2027 20:36:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\nage: 235841\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14868, version 1.0","md5":"a870ee3703f35f3b772e1ea3aff0abea","sha1":"2f73bac27e4fca1630d90813a858d7b815faf5c2","sha256":"691491f1fc8badab623e1be56f92cc2d98c462b16617c67e1e288d6b061444bc","sha512":"eb7e106769da2737a2d128f7b5ffeb145c03ecb3e0d120ea8e48f66b54ccc92b3657c9ba44385b355643e344329318c3d4eddde64b060ef580b419ac09d48add","ssdeep":"384:mVyQfY5SLPyg3mKvJU/rtyXWtnpeb0qY9X3cCI1Ll62yQ:2YS7fWKvJ2tyqM0PXINl62yQ","tlshash":"7562e0e9d92843e74d2019387b4b78df360adbed631a4878e995c49b6014af79122c1e","first_seen":"2025-09-11T17:07:37.667838Z","last_seen":"2026-08-10T12:55:36.578845Z","times_seen":72285,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":54,"dns":0,"connect":7,"send":0,"wait":13,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/~/js/performance-optimizations.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /~/js/performance-optimizations.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-length: 0\r\nserver: nginx\r\nlocation: /Error?httpStatusCode=404\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 72d21a9a71824f5cad6a9dfdd0c39b0e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/Icons/font/absa.woff2?27709816","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /Icons/font/absa.woff2?27709816 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dash-uat.absa.one/css/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5852\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d1f5c\"\r\nexpires: Tue, 07 Apr 2026 14:07:18 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 2c3438a96d914ba9bcc8177ea3d8f238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5852, version 1.0","md5":"903c5113a28f9dc7882f3a564059b11b","sha1":"561757b17c21ff176657f02c844a99d9a8613054","sha256":"aa5e323f4fbe6f18cfe220519f43b52ee1d3a22886b15c121275ae7b81ff0d18","sha512":"2499466140379b79ae34620c96c3a1a6c960ac5092e491edd526c14478e67a538be1faa9b398e0ce3d3f7fcefdcb0f66d1df5058c5722b01eab3a5ba5b317d28","ssdeep":"96:NiTmVAxxUtDi9HVGzFHggVzD+tVbAFk7IIKjLLnPF4CLK7/yK9A26mso0W:NiTmVASDi9H/gVWtVh7IIKf7d4b//36K","tlshash":"4bc18fdd0ba65537fe51517c2541108a61cd75a822385bb0aed88f2700927dab6b6922","first_seen":"2026-03-31T14:07:49.574428Z","last_seen":"2026-03-31T15:02:16.969577Z","times_seen":4,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 19:54:09 GMT\r\nexpires: Sun, 28 Mar 2027 19:54:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\nage: 238389\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-08-10T12:30:46.174899Z","times_seen":52596,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.SfPdfViewer/scripts/syncfusion-blazor-sfpdfviewer.min.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Syncfusion.Blazor.SfPdfViewer/scripts/syncfusion-blazor-sfpdfviewer.min.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2855138\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb2e0348dabe2\"\r\nexpires: Tue, 07 Apr 2026 12:08:41 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:54:54 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: cc00d11ed3aa4ef58fe58a826facc122\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2855138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64983)","md5":"2fa7c4077c090f310ae8654e83b24588","sha1":"ce939627b4496ea7e0d69136d6250152346072a9","sha256":"7a1c65cbfaa742ac24c29f8ba4736da4598ebf28eb56273bf5637eac377c59c9","sha512":"679cdf6686603a1f92f075f6b0d98125a3facbfa093b50c868a29fbd7559ed40eb6e27f139ee6334bebe0ec319f4dc557398e008ef0491650f5655ffaa7a2e7d","ssdeep":"24576:9NeAEvcNt/Wu2nFZxe7odsqUUuF9dTtvsQ1pZoGEUK1bBsj:9NeAE0Nt/Wu2nFZxe7odsqUUuF9dTtvb","tlshash":"f625098c721035714ecf01dba0aa0645b672649e9585a1ecb62ce4de2c78d8533eff7b","first_seen":"2026-03-31T14:07:49.576724Z","last_seen":"2026-03-31T15:01:52.945258Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/custom-functions.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /scripts/custom-functions.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29860\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e80107a24\"\r\nexpires: Tue, 07 Apr 2026 12:08:45 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:51:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 383d73c9ab184436b3dd18cfd8be8a3f\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29860,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"54fe0b182e4fb879e8f3012146c3fd8e","sha1":"ead4a67cc566e405368dd394e1dd938a843c5275","sha256":"6a81a8d3ccf889c70a520e60e0242038840ed87c81bc55fe1bcfe61a45f8cebf","sha512":"4eafd07e8c9eaaeb31830cbe75c09c669f9428cc0dfb7dc4df1cb4d02634e31bc987fb4a11754dbc266d2c67cfb107f906f8aca019c4578601533c547ad021af","ssdeep":"768:yvlV97gRg0on7gvN0GvzhW7q2L3ja34U/ObLObPka2irk8L4JvQcm2kV6eEmrjSl:yJ6g0on7yaGvzhW7q2zaoU/ObLObPkam","tlshash":"54d2962435752121466f24ae47876389b110900f731addc47adfc2286fe4f56a2fbeea","first_seen":"2026-03-31T14:07:49.578138Z","last_seen":"2026-03-31T15:01:52.895696Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1357,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/__bundles/absa-icons-png.css","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:13.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /__bundles/absa-icons-png.css HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/__bundles/Blazor.PortalTheme.Global.B20543A86BFF5CE111659659AF2CE4B8.css?_v=639105470049034954\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-length: 0\r\nserver: nginx\r\nlocation: /Error?httpStatusCode=404\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 19e1aa353f4d4a118527f1c120bdec5e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":550,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/dom-to-image-more/3.5.0/dom-to-image-more.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/dom-to-image-more/3.5.0/dom-to-image-more.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10480\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"67104e95-28f0\"\r\nlast-modified: Wed, 16 Oct 2024 23:39:01 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Sun, 21 Mar 2027 14:07:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F1h%2BSBJW%2FUzb%2B81cmv8eAgUTZNEF817oJYSgAcZoNRO%2FBmm%2FId%2FGi35F64i7fjO7vrvH6sohiAeNBmpkJ0KIrR5APO3tPz1Z5s%2BKRPAKaGg6sr80iPq30B4L9Z3gJw1rPMHOXxQ\"}]}\r\ncf-ray: 9e4feb489d370883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57461,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b15e27c1e02b9fb6a8cf3777194399d3","sha1":"d081a657034a7914aaf3ac0e4e7becb7819cea30","sha256":"a76f750ffe50c8f5f8517cd5fab758c168f29b23ceefb207859bf144481d40f8","sha512":"a5f5c6b3e9fec0f9ff8ec5430155c209c77d6176d06b6de62ccd7381d7a197a59f4df6c0c311f4d70141b0ea815ba0742d9549042cbfd33cfa4f56190f517d79","ssdeep":"768:kvWeUQs/XGjvG29cZcoBWFZ3EUWZ7TNEYRqqz2OIADidEFrcl:kzyAvGccZcoBWFREU27F0qaLfdEFgl","tlshash":"5e43945c39f32211419770bcab8f910875349213661cde94bead83a06f65a78e6f3bdc","first_seen":"2026-03-31T14:07:49.579384Z","last_seen":"2026-03-31T15:02:16.961108Z","times_seen":4,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":22,"dns":1,"connect":3,"send":0,"wait":94,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/custom-charts.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /scripts/custom-charts.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2045\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e8010097d\"\r\nexpires: Tue, 07 Apr 2026 12:08:45 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:51:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 9a991f1e391146e1bd9e0b7f28d190e4\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"36b837a7a47b6a4eba5dc06be398be3a","sha1":"debdfc26129430a11b8484b7da4368ca3e5224be","sha256":"2cf94a6d3427c309b97d1feae4217bdf797cd2386e8e953c2d3dc6568c679d2e","sha512":"85a61d02e2c8ba814eb16f8de0b82ee20174b6584a684284491072b0ec6ce4d0306974b96f5412432ac9a187bd101177b3ec50027cf1e895797ac0b76d94e824","ssdeep":"","tlshash":"99417868d5f390592523256f873f460ba8b0411b6a0cbc357e8ce2a49f4d22d5eb8fd4","first_seen":"2026-03-31T14:07:49.581326Z","last_seen":"2026-03-31T15:02:16.957169Z","times_seen":4,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/qr-functions.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /scripts/qr-functions.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 376\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e80100ff8\"\r\nexpires: Tue, 07 Apr 2026 12:08:47 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:51:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 247e7117deb5470dac1e1f5b5de70f6e\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"36796b797904745e9248e7e21c608fb6","sha1":"52692a23d3f0d507a5b04a8c1daac06d448f6925","sha256":"e655fe49388a13ae32d32fe971e9ec8449f73008794e28abe7a4173a124fa539","sha512":"433afdd4dcb31b97ccafcdfe7cab56c28e5c3458dd8ddc92168dc55ea4baf5fe8e42bf922fd5152fe52bde94b7eb1b7d9ca51233953f564ab812f57590a40226","ssdeep":"","tlshash":"8be0c22f31a108c00b6f207be41f820ce0a22027980c8608fd0c4719ff78b3db0a2b96","first_seen":"2026-03-31T14:07:49.582719Z","last_seen":"2026-03-31T15:02:16.976954Z","times_seen":4,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/js/performance-optimizations.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /js/performance-optimizations.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcbd0e3c1d1bf3\"\r\nexpires: Tue, 07 Apr 2026 14:07:13 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 73ae833e63074595b3a5b12cdc7cbc0a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e7a69408d42cf60642664fbf3ebf07e7","sha1":"c803bd34683547fdb990c1eff6cde8ca4457b3b9","sha256":"0322250ee4fd2e84f9441c520f936e0c9b4d4161234844791a646b320421d775","sha512":"502287c20113996276f4cee681f54658d31fa775e42a3ee10698df6df54933d962e1ae9e4356a933a3cebee2d43518e9f79a6c296aae751f7f1d9994b1364958","ssdeep":"48:MwGxXMEifQhe7F6H850RbjixuD8P0k3D1RL4s7iSfRDfgGFFdeQ:MwDE87F6cGbmxdMknL17FsQB","tlshash":"1ca11e3865f7607a4633bcbdf7cf0105bb7540132408da257e6c86849f82a6867e5b9f","first_seen":"2026-03-31T14:07:49.583828Z","last_seen":"2026-03-31T15:02:16.952412Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/css/styles.css","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcbd0e3c1a5ed9\"\r\nexpires: Tue, 07 Apr 2026 14:07:12 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: a45cc5bcc9fe45088bf0332af7c13120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":481113,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (705)","md5":"7a9d3b03d1ca5e726888edcafae40af5","sha1":"6dc97e9e02dadf26489b4425b179da3c42092d38","sha256":"94b9bf411bed0b5e29540ed9f3bf71b0a4e4f42f83f15fdeef161b778f973ded","sha512":"09ebbcbfa782f64780ba9d18e9edd070d6587f879780584a34a51bfe55b87b7f912d571eedeb029eac1fa1e772b3eade4a02b1ba6fb7daf35d6f88f011fe2567","ssdeep":"6144:PwJtC9ENphPnw4VVVN68DaDTD4DdUPCli:h4VVVN68DaDTD4DdUPCli","tlshash":"8ca48555fdf12438386b915965dbbff87b3d9082c609ce75b9d23228cf853e11862ac8","first_seen":"2026-03-31T14:07:49.590044Z","last_seen":"2026-03-31T15:01:52.925306Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/html2canvas/1.4.1/html2canvas.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37629\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61ec4640-92fd\"\r\nlast-modified: Sat, 22 Jan 2022 18:00:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 436802\r\nexpires: Sun, 21 Mar 2027 14:07:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMIy4lgNUvVgMNUn3MzgVOcUCg0IWk%2Fh%2FPYbsrdSiDs%2FM49MNPE62Yq4ee1HWAgGzo9SHO0MFLe8ROHi53Df9P7CVc84xgVj7BHvQxwCVXobEHVjTDKrQC72vjWXLkBp%2F7Zs29Ow\"}]}\r\ncf-ray: 9e4feb48bd7a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64372)","md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-08-10T01:57:00.660166Z","times_seen":6582,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":41,"dns":3,"connect":3,"send":0,"wait":12,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/js/transaction-alignment.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /js/transaction-alignment.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcbd0e3c1d0782\"\r\nexpires: Tue, 07 Apr 2026 14:07:13 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: fc60fc32909c44dd9694d2ff515324cc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3586,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a6ca0e2fbe57db1a1409c026b7715d50","sha1":"efacf4d588456a88e6bbbca54f6c489f179cfa25","sha256":"87d2b3935b391e2200de35ee44005ba21bb596dec5099c78ecbb9c9eae081cd5","sha512":"4da34cd8c67e888d486cbd092833df96b4aeb84c7f87be7148bebbbcea3dea709865e895a366a9e7948ce01d01d13ed2952faa12828282f6c64193b1fb2c520c","ssdeep":"","tlshash":"1071005132723030806aa2bee3cb691a3b7581033807da8579ddc2925fd58fed663ddc","first_seen":"2026-03-31T14:07:49.593655Z","last_seen":"2026-03-31T15:02:16.965212Z","times_seen":4,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:15.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 14:07:15 GMT\r\ndate: Tue, 31 Mar 2026 14:07:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44732,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6ab956c83bd39ea6620ae8e0d50fe25b","sha1":"b5a5181faed0bb1847961a6664eb608b486ac157","sha256":"d4e76be678021bf44a9495e41c7f4c09c8df249b5d0abbb987e0915617a5b991","sha512":"87fb32e1ef06a75430de4053474c66945aa78bd232f7e99a42ae759657e86078d50619f20845512779235b91e6c4118c8fe087fe7c93de98fda9586ff775a054","ssdeep":"768:yDdD9DADNDgBDUKD7DnDkZ5epgNU4/b3DZDCDHDHDY4DRLDuDWDyDS99YURRuWDR:GAtxyllff","tlshash":"be132fa1041754409b834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526836d","first_seen":"2026-03-28T17:34:16.925461Z","last_seen":"2026-07-22T05:13:25.051337Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/verify-user-session","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /verify-user-session HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncache-control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 5890e7ad4a124313a4d10ee4d4a363ef\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"html2canvas:1.4.1","description":"Screenshots with JavaScript.","website":"https://html2canvas.hertzen.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Blazor","description":"","website":"https://dotnet.microsoft.com/apps/aspnet/web-apps/blazor","common_platform_enumeration":"","icon":"Blazor.png","categories":["Web frameworks"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5782,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (876)","md5":"9f7db111917c7eef739efcd479329f9b","sha1":"a91ac0972560495d063a00e2b28a0790ee7056ad","sha256":"f45a8661e6bf571b910c5f51ee6d37b1147a809906b6f2ed6fc99d827e533637","sha512":"18cd44c231bf9bf8484bfbc3946914b683d18c5af2543543d974ee663b1706ddde6ec6665f8c4ae77f89d8380256f6039d93917be0e3e29cf2dec114c1efb164","ssdeep":"96:yKPsVe/L2vURICPfMgw3BhRq0nTE+qtpJjKP/JYp1Aj0b3HfNv9:dEVQ2DCPfMgGBhRfnTE+qtpJjC/JkI0z","tlshash":"69c1a55a2c91c05b31122d8abaf6f51d9856110be2b8dd4831feca398fe538c8d57986","first_seen":"2026-03-31T14:07:49.601468Z","last_seen":"2026-03-31T14:07:49.601468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"absa-za-uat1d1ccda7.service.signalr.net/client/negotiate?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05","fqdn":"absa-za-uat1d1ccda7.service.signalr.net","domain":"signalr.net","tld":"net"},"ip":{"addr":"102.37.160.43","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:17.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.service.signalr.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 13 Mar 2026 12:13:20 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:24:AB:D3:68:8E:A9:F2:81:B6:8C:DB:AC:2C:A8:1A:01:63:09:46","sha256":"15:D1:FD:AE:4A:CB:B1:CC:F4:EA:02:DE:76:B5:D8:35:59:A5:BB:FB:BB:0E:7A:DF:76:EE:2C:7C:48:E0:F8:F1"}}},"request":{"raw":"POST /client/negotiate?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05 HTTP/1.1\r\nHost: absa-za-uat1d1ccda7.service.signalr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Requested-With: XMLHttpRequest\r\nX-SignalR-User-Agent: Microsoft SignalR/10.0 (10.0.5; Unknown OS; Browser; Unknown Runtime Version)\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InQtNzVhMmUxYjAtMmVhMi00ZWQ0LWE1MGYtMDBlNTMxNTYxMTZkLTE3NzUyOTM0In0.eyJhc3JzLnMuc24iOiJ2cC1jb3JlLWRhc2hib2FyZC13ZWItLTAwMDAxMjUtNjg1YzQ3ZjdkNS10NWJtOV9mOWFjMDQ3YzQ4NGU0NzFjOGQ0N2VlMDI3ODQyNDIyYiIsImFzcnMucy5zc3RpY2t5IjoiUmVxdWlyZWQiLCJhc3JzLnMuY2h0IjoiMzAiLCJuYmYiOjE3NzQ5NjYwMzYsImV4cCI6MTc3NDk2OTYzNiwiaWF0IjoxNzc0OTY2MDM2LCJpc3MiOiJhenVyZS1zaWduYWxyIiwiYXVkIjoiaHR0cHM6Ly9hYnNhLXphLXVhdDFkMWNjZGE3LnNlcnZpY2Uuc2lnbmFsci5uZXQvY2xpZW50Lz9odWI9Y29tcG9uZW50aHViIn0.EYSt7gWc34-chL7mY4cuXTix6-hjVnMaqRjmQLTbGwQ\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:17 GMT\r\ncontent-type: application/json\r\ncontent-length: 334\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dash-uat.absa.one\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"01c889afe797012b7666703a3b1907b1","sha1":"0385f5bd98b879d750f641d78e47cd5788eb1df5","sha256":"45a0d60e2bdad3db78057380041e6255baee19b690774a1ffb8d2a925e4b70d0","sha512":"880f56bd9e1bec3f0508e1d5e4cd7343469c79fbdd99eae78513db34dc9f8f16b4f6024ad71ac0da1367ed9048347b1248e242a8ccc02ecc80598a6dc381685b","ssdeep":"","tlshash":"9ce0268cc88c286a64032452f3c28c0733bcc21087a50004e3f04d6f171be6e0bcb6eb","first_seen":"2026-03-31T14:07:49.603823Z","last_seen":"2026-03-31T14:07:49.603823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":24,"connect":184,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Radzen.Blazor/css/standard-base.css","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Radzen.Blazor/css/standard-base.css HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 687823\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb6f300b7fccf\"\r\nexpires: Tue, 07 Apr 2026 12:08:35 GMT\r\nlast-modified: Wed, 18 Mar 2026 16:19:32 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 619d5e6c5d7e4cb8b1e5495621bb22de\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"87487c1573c324749f1c27f0f1b3aeea","sha1":"13385f637044b2c64b9d10aefbd5c5a6609b3ade","sha256":"b10f6e54c5f16e09d6af1529cd742e02e99a10018b339821b1cf720de76a320f","sha512":"09b1ec055362cef86f9c3aa87876c0f26a9825341634a562da891ef91430df870f63974c2d5c329d0242a0749b3ae45f19e061e2accc9fa35f20f477e6c4a583","ssdeep":"6144:k6cB0FJ7dLht+fTLMsz17kvxZT9sOwrHIk:WLMsz17kv3T9sLrok","tlshash":"24e452f9f498653d6827fb1d8778bf6e2b1b9550ca025bfaf403621c42c66f160a271c","first_seen":"2026-03-31T14:07:49.615805Z","last_seen":"2026-03-31T15:01:52.937587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":777,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/scripts/maps.js","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /scripts/maps.js HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 404\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e80100f14\"\r\nexpires: Tue, 07 Apr 2026 12:08:46 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:51:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 1a851c87af134ae5a77bebb5dcc4ca7b\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bc907d489cb15d6562ead46c7a12af38","sha1":"9cc70a3673633da2e16ed74c17d039af0690d9c3","sha256":"35a266cd85e8cf573a9a59171f2226c1125b5088435f71e2f74ba621e8f88736","sha512":"9611d1b21992de13f717c40fb15d97583c9a75157d33b9c601c36336078462f459848954db4bfc9ef58dcce81add8c2ebc3492026dd8a3e2f0403c5272a2b738","ssdeep":"","tlshash":"d9e0265882f335b24c2f12080b7f218291b18113680eef103f8ce3598f9926695856cc","first_seen":"2026-03-31T14:07:49.619414Z","last_seen":"2026-03-31T15:02:16.96465Z","times_seen":4,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/css/absa-icons-png.css","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:13.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /css/absa-icons-png.css HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/css/styles.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 31 Mar 2026 14:07:14 GMT\r\ncontent-length: 0\r\nserver: nginx\r\nlocation: /Error?httpStatusCode=404\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 1389c38b16ff45b08eb81e8391f6c222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_blazor/negotiate?negotiateVersion=1","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Requested-With: XMLHttpRequest\r\nX-SignalR-User-Agent: Microsoft SignalR/10.0 (10.0.5; Unknown OS; Browser; Unknown Runtime Version)\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: application/json\r\nserver: nginx\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 6b0f776513f847d18dd3953acc0b3347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":782,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9dcc8010ea038d3ee0323e8f538b6b0b","sha1":"7ee0d17f3b6fa248352bb638a6d07780a13a0e30","sha256":"e01ccc09518344a45d13f5b7b827162c4682cea1036ab0c28c19f27097beedd4","sha512":"2f2e8531a8b82abb5d707ed1e615c240caae7a9149a9edd9472c13697133d03ee740e966d1d2f01e26850075f1f9fc4da2bebef7b6a0ffb4008eecae872ebe90","ssdeep":"","tlshash":"490141ef73896c1ab246c1045f682f801bb830125ca49135eaaf5a886e3268af10c962","first_seen":"2026-03-31T14:07:49.622147Z","last_seen":"2026-03-31T14:07:49.622147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/favicon.ico","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3262\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d053e\"\r\nexpires: Tue, 07 Apr 2026 14:07:16 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 555f4583e2d4407daceb9df0b8046f18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3262,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 24 bits/pixel","md5":"830fd617ff8b5b8a8ac6713cd0c1d02f","sha1":"0357369c0516e195cfa22b1eb2372831557b9c82","sha256":"88a44fa39621aa19944ef9e13e88853f445d772b5f49fe0758738e06c8fa20da","sha512":"cd8a217ac5c636a186f1e2f4135544a5133afe7827316d8e9b9c7240735d62469230a02b68f1bbd0e46d79e3f7a572e6f99fd204ff4d6b01517bb9f312e8b6aa","ssdeep":"","tlshash":"206175d87e890823c394dbbcacefcc6e71658a9c46049107d3210e69a8e32b33859dc4","first_seen":"2023-07-01T20:02:05Z","last_seen":"2026-05-14T19:06:07.262573Z","times_seen":37,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"absa-za-uat1d1ccda7.service.signalr.net/client/?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05\u0026id=bgwPsdzpK98QYMEoYVFJHQ12sKPAl02\u0026access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InQtNzVhMmUxYjAtMmVhMi00ZWQ0LWE1MGYtMDBlNTMxNTYxMTZkLTE3NzUyOTM0In0.eyJhc3JzLnMuc24iOiJ2cC1jb3JlLWRhc2hib2FyZC13ZWItLTAwMDAxMjUtNjg1YzQ3ZjdkNS10NWJtOV9mOWFjMDQ3YzQ4NGU0NzFjOGQ0N2VlMDI3ODQyNDIyYiIsImFzcnMucy5zc3RpY2t5IjoiUmVxdWlyZWQiLCJhc3JzLnMuY2h0IjoiMzAiLCJuYmYiOjE3NzQ5NjYwMzYsImV4cCI6MTc3NDk2OTYzNiwiaWF0IjoxNzc0OTY2MDM2LCJpc3MiOiJhenVyZS1zaWduYWxyIiwiYXVkIjoiaHR0cHM6Ly9hYnNhLXphLXVhdDFkMWNjZGE3LnNlcnZpY2Uuc2lnbmFsci5uZXQvY2xpZW50Lz9odWI9Y29tcG9uZW50aHViIn0.EYSt7gWc34-chL7mY4cuXTix6-hjVnMaqRjmQLTbGwQ","fqdn":"absa-za-uat1d1ccda7.service.signalr.net","domain":"signalr.net","tld":"net"},"ip":{"addr":"102.37.160.43","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.service.signalr.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 13 Mar 2026 12:13:20 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:24:AB:D3:68:8E:A9:F2:81:B6:8C:DB:AC:2C:A8:1A:01:63:09:46","sha256":"15:D1:FD:AE:4A:CB:B1:CC:F4:EA:02:DE:76:B5:D8:35:59:A5:BB:FB:BB:0E:7A:DF:76:EE:2C:7C:48:E0:F8:F1"}}},"request":{"raw":"GET /client/?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05\u0026id=bgwPsdzpK98QYMEoYVFJHQ12sKPAl02\u0026access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InQtNzVhMmUxYjAtMmVhMi00ZWQ0LWE1MGYtMDBlNTMxNTYxMTZkLTE3NzUyOTM0In0.eyJhc3JzLnMuc24iOiJ2cC1jb3JlLWRhc2hib2FyZC13ZWItLTAwMDAxMjUtNjg1YzQ3ZjdkNS10NWJtOV9mOWFjMDQ3YzQ4NGU0NzFjOGQ0N2VlMDI3ODQyNDIyYiIsImFzcnMucy5zc3RpY2t5IjoiUmVxdWlyZWQiLCJhc3JzLnMuY2h0IjoiMzAiLCJuYmYiOjE3NzQ5NjYwMzYsImV4cCI6MTc3NDk2OTYzNiwiaWF0IjoxNzc0OTY2MDM2LCJpc3MiOiJhenVyZS1zaWduYWxyIiwiYXVkIjoiaHR0cHM6Ly9hYnNhLXphLXVhdDFkMWNjZGE3LnNlcnZpY2Uuc2lnbmFsci5uZXQvY2xpZW50Lz9odWI9Y29tcG9uZW50aHViIn0.EYSt7gWc34-chL7mY4cuXTix6-hjVnMaqRjmQLTbGwQ HTTP/1.1\r\nHost: absa-za-uat1d1ccda7.service.signalr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dash-uat.absa.one\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wWrrIgJEaXlk73NHZXPa1w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 31 Mar 2026 14:07:18 GMT\r\nConnection: upgrade\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://dash-uat.absa.one\r\nupgrade: websocket\r\nvary: Origin\r\nsec-websocket-accept: WrT8d5k1p9CefpS5HkuTCssRhDI=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":1,"connect":186,"send":0,"wait":190,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T14:07:11.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncache-control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: cb15e1d1d66142beb0d768406ea215e4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"html2canvas:1.4.1","description":"Screenshots with JavaScript.","website":"https://html2canvas.hertzen.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Blazor","description":"","website":"https://dotnet.microsoft.com/apps/aspnet/web-apps/blazor","common_platform_enumeration":"","icon":"Blazor.png","categories":["Web frameworks"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5797,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (891)","md5":"0dbe7a34967649abd72512c84d0ccece","sha1":"1b2a23b080c016fe7c20de346d8be36241504e7e","sha256":"61c92801c99af3314c8ec9a1e9b7f5cf9fed23bbae47f675f7332e71d8a4b16d","sha512":"c01cb3be43576940e21e890a96c201461e3102ff7cfdfd77cb6374b2f441711979227e33ce4ce34d1f9db68b3a1a7709844d45dcda533a93ff0a186be99f901b","ssdeep":"96:yKPsVe/L2vURICPfMgw3BhRq0nTE+qtpJjKPRCbcrp9t53HfNv9:dEVQ2DCPfMgGBhRfnTE+qtpJjCRv/3/X","tlshash":"3ac1c66a2cd5c41731122c86b9f2f51d9c66510bd2b8dc8871feca39cfa53dc8e17986","first_seen":"2026-03-31T14:07:49.627006Z","last_seen":"2026-03-31T14:07:49.627006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":425,"dns":31,"connect":195,"send":0,"wait":207,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/__bundles/Blazor.PortalTheme.Global.B20543A86BFF5CE111659659AF2CE4B8.css?_v=639105470049034954","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /__bundles/Blazor.PortalTheme.Global.B20543A86BFF5CE111659659AF2CE4B8.css?_v=639105470049034954 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccept-ranges: bytes\r\ncache-control: public,max-age=604800\r\ncontent-encoding: gzip\r\netag: \"1dcc0f2d1401159\"\r\nexpires: Tue, 07 Apr 2026 14:07:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 09:43:24 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 05f665df2c5b4e2187b6963737e584fa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481113,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (705)","md5":"7a9d3b03d1ca5e726888edcafae40af5","sha1":"6dc97e9e02dadf26489b4425b179da3c42092d38","sha256":"94b9bf411bed0b5e29540ed9f3bf71b0a4e4f42f83f15fdeef161b778f973ded","sha512":"09ebbcbfa782f64780ba9d18e9edd070d6587f879780584a34a51bfe55b87b7f912d571eedeb029eac1fa1e772b3eade4a02b1ba6fb7daf35d6f88f011fe2567","ssdeep":"6144:PwJtC9ENphPnw4VVVN68DaDTD4DdUPCli:h4VVVN68DaDTD4DdUPCli","tlshash":"8ca48555fdf12438386b915965dbbff87b3d9082c609ce75b9d23228cf853e11862ac8","first_seen":"2026-03-31T14:07:49.590044Z","last_seen":"2026-03-31T15:01:52.925306Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 14:07:12 GMT\r\ndate: Tue, 31 Mar 2026 14:07:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"59e871c7411005b944d04654e6c3f9ee","sha1":"272ace3237d30d8ffba3a028b1122222d6c78cc8","sha256":"4780218bcfa45ea295219ca639578e28bc021749ff9df1c7807b1ee2d25df2d5","sha512":"1736364f7b31f937161c15497bc307eca9f41a66fe287d6a7e0866d232f01536a948be32020f99e58c68750006e0d4e10d626ab985117ea93b1e7e6a768d7b9f","ssdeep":"","tlshash":"1ef0ac586a1a5805a1150c87330f3f220e1d451f294ad8feaf410d0c9efe4774345b0f","first_seen":"2026-03-26T21:52:41.119692Z","last_seen":"2026-04-02T20:04:23.928096Z","times_seen":261,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":131,"dns":0,"connect":23,"send":0,"wait":35,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/Error?httpStatusCode=404","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:14.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /Error?httpStatusCode=404 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/__bundles/Blazor.PortalTheme.Global.B20543A86BFF5CE111659659AF2CE4B8.css?_v=639105470049034954\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 31 Mar 2026 14:07:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 11754778a702445cb5c3d62880ea092b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/images/absa_logo_filled.png","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /images/absa_logo_filled.png HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 6528\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcbd0e3c1d1000\"\r\nexpires: Tue, 07 Apr 2026 10:53:25 GMT\r\nlast-modified: Thu, 26 Mar 2026 10:49:35 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 0decce003d0f48ed8ebc48eabc69155d\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 145, 8-bit/color RGBA, non-interlaced","md5":"343e71a37bf616f8803aa93a5d70a03a","sha1":"97fa2ee7d568139ecee15fe8d476b1237b765923","sha256":"1a7f0f693dca7e16536f593a7b1af6e1f3e36cc0d42c9e4f1b2708a43be7848c","sha512":"f17d0b26a081242be6a9c14cc77bd39d35226c1136143036b5f667bd5fb29aee55caa65df8366d4c98c68103811758b68e743ca7259279d5238adacb30908b45","ssdeep":"192:cd/qoPfb4BsZ0yesQxsjGT7A+ki6jXZL6:cdi9sJnQypxi6LZL6","tlshash":"4dd1bf5285356c0a9f59263efd2e85597c040fd7f8845fcfb719c2aa9e15525b80047c","first_seen":"2026-03-31T14:07:49.566613Z","last_seen":"2026-03-31T15:02:16.955233Z","times_seen":4,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"absa-za-uat1d1ccda7.service.signalr.net/client/negotiate?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05","fqdn":"absa-za-uat1d1ccda7.service.signalr.net","domain":"signalr.net","tld":"net"},"ip":{"addr":"102.37.160.43","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:16.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.service.signalr.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 13 Mar 2026 12:13:20 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"15:24:AB:D3:68:8E:A9:F2:81:B6:8C:DB:AC:2C:A8:1A:01:63:09:46","sha256":"15:D1:FD:AE:4A:CB:B1:CC:F4:EA:02:DE:76:B5:D8:35:59:A5:BB:FB:BB:0E:7A:DF:76:EE:2C:7C:48:E0:F8:F1"}}},"request":{"raw":"OPTIONS /client/negotiate?hub=componenthub\u0026asrs.op=%2F_blazor\u0026negotiateVersion=1\u0026asrs_request_id=0HNKF17PC55JK-00000015-C1926F05 HTTP/1.1\r\nHost: absa-za-uat1d1ccda7.service.signalr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,x-requested-with,x-signalr-user-agent\r\nReferer: https://dash-uat.absa.one/\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 31 Mar 2026 14:07:17 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: authorization,x-requested-with,x-signalr-user-agent\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://dash-uat.absa.one\r\naccess-control-max-age: 60\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T12:49:06.798387Z","times_seen":17817633,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":496,"dns":20,"connect":187,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dash-uat.absa.one\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14876\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:19:48 GMT\r\nexpires: Sat, 27 Mar 2027 21:19:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:50 GMT\r\ncontent-type: font/woff2\r\nage: 319650\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14876,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14876, version 1.0","md5":"f3123e85194abd443cce2d67011a2492","sha1":"fb82ae035f301d2c2d47b64abe0e4f28fdc46a6d","sha256":"156650610835fe32914722ecfc8dab0ebbb84795e201b842158afa0ea873cfa4","sha512":"1aab412233d01ef623e349dcbfd387b930e42c6fc80a2e1f892cc19979db2e59f5f5dced33c69b32db2716286b454b8c2368d3e42644377aa10e196952122655","ssdeep":"192:qJ5lReG9wrdpmtTUniXkMpzKdTVVANX27iPr0xesgwH+Y2oBmTp8w4t0F3qJTQky:SReDrmgnixp2dZmiEKf2owfF3qy9yY","tlshash":"6362d04f3513af70e15ee777d0fb7d292443bfda600c9d9891a395b4a44a01d207bb42","first_seen":"2025-09-11T17:21:57.325452Z","last_seen":"2026-08-10T12:30:46.185124Z","times_seen":21161,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Radzen.Blazor/fonts/SourceSans3VF-Italic.ttf.woff2","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:18.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Radzen.Blazor/fonts/SourceSans3VF-Italic.ttf.woff2 HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://dash-uat.absa.one/_content/Radzen.Blazor/css/standard-base.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 137996\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb6f2e1bceb0c\"\r\nexpires: Tue, 07 Apr 2026 10:53:26 GMT\r\nlast-modified: Wed, 18 Mar 2026 16:18:40 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 6eba25f0e8ce449cb54c3e858bfb8973\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 137996, version 3.3408","md5":"1c789ed6386bd18ee23f00c84c2a1320","sha1":"8b9020d160ec14a468f4589b06746823ef17e4be","sha256":"b4959abc0569392f87c6c6ac612f90e3fe0104d283724189b7d8b6f61af347d3","sha512":"80b7c231b390d0da4c26cd6e31fdcea229105c54f91f8b887cc1d25f12bdf79234e0e90d410ccf6f44271b66f89367aab557311fe5c6df581cb8dae3635c5a69","ssdeep":"3072:rQajl2uW1ItH5D4O9Ycw7dyX7PQ8JyjPBGzSltmk2ibXTwst/w:5l2uiWtw7dELL0zBGImk2ziw","tlshash":"63d32286ae12d7683c876f3481b7914acf2ebf9cc75b43a9e860540e9021e5d4cf95bc","first_seen":"2025-07-03T02:45:31.032074Z","last_seen":"2026-08-09T20:59:23.381463Z","times_seen":23,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash-uat.absa.one/_content/Syncfusion.Blazor.Themes/material3.css","fqdn":"dash-uat.absa.one","domain":"absa.one","tld":"one"},"ip":{"addr":"4.221.199.89","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dash-uat.absa.one/","date":"2026-03-31T14:07:12.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"absa.one","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 06:51:44 GMT","end":"Mon, 06 Apr 2026 06:51:43 GMT"},"fingerprint":{"sha1":"07:3F:3F:36:4B:1B:58:11:DB:51:B9:4F:20:89:77:4C:08:20:4F:4C","sha256":"94:09:48:F8:48:F0:E5:35:3F:17:14:53:1F:5D:39:93:F4:E1:AC:7F:2A:6C:62:63:96:C6:B0:98:91:50:22:A9"}}},"request":{"raw":"GET /_content/Syncfusion.Blazor.Themes/material3.css HTTP/1.1\r\nHost: dash-uat.absa.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dash-uat.absa.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:07:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 4544510\r\nserver: nginx\r\ncache-control: public,max-age=604800\r\netag: \"1dcb2e004b264fe\"\r\nexpires: Tue, 07 Apr 2026 12:08:37 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:53:34 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'none'\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=self, geolocation=self, gyroscope=(), magnetometer=(), microphone=self, payment=self, usb=self\r\nx-correlation-id: 3005838e6a254773ab505e7e388e6cf5\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4544510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65170)","md5":"4da0f88d894133dff319212e099e7d9a","sha1":"2bbd6f9ed38b75a7d2a1ca471611cb851d3734b6","sha256":"aa186df0f90f8d75474cc6d101bf4b2fdcc612e83e8f2703a41f3454d70f7356","sha512":"dd7ebff8ada265d158ab72e035a5d9114e6c6df5860d1474d4b5f6b405dac82739f6295f719d228034f66a463951e7c40e1acb44de3a9f10632200095e77c443","ssdeep":"3072:nmMKzikO7P+nRgdck0HMKel+iRFz25lf4Zg0g1U56XzMESulGW8HvdIVQAN/u5FH:nd9iBYBjKBWwQ+Jv9O","tlshash":"34250109af523c77a2f05efab9c481169d24c25a89a188dde91d1c08f95485fbb3fcf4","first_seen":"2026-03-31T14:07:49.632311Z","last_seen":"2026-03-31T15:01:52.924714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1184,"receive":1484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"dash-uat.absa.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"dash-uat.absa.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}