{"report_id":"8f16ad5c-3f8d-47f8-9f29-013db1cbb12f","version":0,"status":"done","tags":["phishing"],"date":"2026-10-08T16:00:45Z","url":{"schema":"http","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"ip":{"addr":"192.163.197.193","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"title":"Webmail Portal Login","dom":{"size":10924,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1700)","md5":"9973c16b5e27d2c01256b9eddab88a8f","sha1":"4acd1cf6b53c7c52734072b087ef92e520421022","sha256":"95aaa352a100e504593657c689039fcd438971126774c705314d75679cb8c4a9","sha512":"df69f5a649d42a79000f7904004c116a206f6925aa52ef9dfdf8edbd22d2ec50ff22891d30759945cd2b728054ed628f079cc59e25d51be68a4071d813eb0bb2","ssdeep":"192:E7XYWaHdYkA/Luxx5QswkwE7k2Ro8rozIFXeqSFYx9rOLJ:soJhrHbwENo8rog8N","tlshash":"a6323971b9a820875567107cb3da86083c538093fb099914b8bc92a05fdcf79adf278e","dom_hash":"domhashf4477859b72feae65b229692d19e6697","first_seen":"2026-09-15T19:41:45.264595Z","last_seen":"2026-10-12T01:42:10.494094Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"ip":{"addr":"192.163.197.193","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T16:00:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":1,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"sabinegrant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.password_error_messages"}}]},"summary":[{"fqdn":"www.vhv.rs","ip":{"addr":"104.243.38.200","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"domain_registered":"2019-05-13","domain_rank":596217,"first_seen":"2018-01-29T12:16:41Z","last_seen":"2026-10-07T01:05:24.486742Z","alert_count":0,"request_count":1,"received_data":120832,"sent_data":596,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"alphatrade-options.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-10-23","domain_rank":0,"first_seen":"2020-08-05T06:26:24Z","last_seen":"2026-10-01T02:12:43.790713Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sabinegrant.com","ip":{"addr":"192.163.197.193","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2020-04-21","domain_rank":0,"first_seen":"2026-04-16T21:10:55.334182Z","last_seen":"2026-10-08T14:45:28.317383Z","alert_count":2,"request_count":1,"received_data":11338,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"firebasestorage.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":40974,"first_seen":"2017-01-30T02:42:50Z","last_seen":"2026-10-05T00:50:13.45558Z","alert_count":0,"request_count":1,"received_data":533,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-10-05T02:54:34.076069Z","alert_count":0,"request_count":1,"received_data":294119,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.password_error_messages"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"ip":{"addr":"192.163.197.193","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c26dd80f07967a0086e08bc46bc22fdc","sha1":"734be0a0822d41d653047672c02ce5da50de7318","sha256":"9766d47fc779432f96f22cc1edd0793e8ed31cb7613fe3b8955e1cf66df1e0dc","sha512":"c43a0b64dfb2bb94284c95bcca56732c049ed637f1fcfe9c6a87a8be31c3f19b17c6ac6239a0bda13d1909f2c0d6cc78193c098f37003d4e39225f21ac4059a8","ssdeep":"96:9M9FOM9m5ywRO7rYCFOUK1Oo8rozFmFXeqSFD9:WwkwE7k2Ro8rozIFXeqSFp","tlshash":"cfa162e4bdaa61d70373216c55ef410479a3d1e7771cd804b8bc91901f9cf28a8dab9e","size":4791,"data":"","first_seen":"2026-09-15T19:41:45.269757Z","last_seen":"2026-10-12T01:42:10.499966Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"ip":{"addr":"192.163.197.193","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a5db8da10e35349305830e209e3d06a","sha1":"825e6814a0afb62fb58e081c285b4ed33796e42f","sha256":"be059453c9aeb11cfc6caedb45b291ba551072aced06dc136f6a1ec051e7d0ae","sha512":"3d4451d778026aecc81f7b03c02acb278de5ab24ffb6ff69b25073a1dad2274f4f574dde9925000cea0d61024c6b2d05ffdf03fb337ff81d8385f7f2d488a6c7","ssdeep":"","tlshash":"c3d0226b36d688b084efbbbf238e9a48393140c3780876403c2c0e604f20d2547b6f50","size":219,"data":"","first_seen":"2026-06-09T13:05:34.129698Z","last_seen":"2026-10-12T01:42:10.501602Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.12.4.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb2d334dabf4902825df4fe6c2298b4b","sha1":"433836da7e015f2eb3fc386817de88b78248f6ef","sha256":"430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575","sha512":"8cac69ec91c437aa5e126ce683a6bb5c904e44d4c1d084c3d8f8bee85524735e8f09a340257d9a859d5e8e7d69d6e637ecfc728ab9ffd0e30d65b2136c48378f","ssdeep":"6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC","tlshash":"e754a4d8f78d112e4232316aad2f52cdbb7cd1b1561054aebd8d497c24a083d42faf7a","size":293430,"data":"","first_seen":"2023-03-07T01:16:13Z","last_seen":"2026-10-12T01:56:43.808026Z","times_seen":4558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.vhv.rs/dpng/d/494-4948700_mcafee-norton-accredited-business-hd-png-download.png","fqdn":"www.vhv.rs","domain":"vhv.rs","tld":"rs"},"ip":{"addr":"104.243.38.200","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sabinegrant.com/gsult/loginn.htm","date":"2026-10-08T16:00:15.463Z","timestamp":1791475215463,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vhv.rs","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 03:48:18 GMT","end":"Fri, 25 Dec 2026 03:48:17 GMT"},"fingerprint":{"sha1":"CB:B9:6B:25:8A:E4:ED:45:F8:D2:BE:9B:B0:35:97:2B:BB:6A:26:45","sha256":"AB:56:EE:56:26:6C:80:86:8C:93:EC:B4:C9:44:92:76:3C:39:01:AD:3C:72:34:1E:4D:22:21:FD:C1:6D:2E:8E"}}},"request":{"raw":"GET /dpng/d/494-4948700_mcafee-norton-accredited-business-hd-png-download.png HTTP/1.1\r\nHost: www.vhv.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabinegrant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 08 Oct 2026 16:03:10 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 15 May 2020 11:16:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5ebe79f8-1d6ee\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120558,"size_decoded":117396,"mime_type":"image/png","magic":"PNG image data, 860 x 478, 8-bit/color RGBA, non-interlaced","md5":"39e3b0a697596637e7fe2ba81df0f9e6","sha1":"18a837c1f0992f33d0340dfe5129d1f70b148d29","sha256":"a98f519f54bf5d0a7e3f586232946a1f3f832753ef5c7f7db008b04001b66931","sha512":"8333e68797dbfe5882d7e6a02c4ff12db61dfb546ae73c26af3d1f67a5840eb36ab8996ceac6f21e29d960e07e259f1df33e3a025c214207b9b456951739e214","ssdeep":"3072:awcAWusMjPn0rk10KIefG2LCeLxDaVYHxg6rWz2S9ZA:MjBMLn3WaG2LXDuExZAtu","tlshash":"64c3f1558216ef3070462eb6cef74a5b8e876880f29fd449da8fe0943cf5737a26109d","first_seen":"2023-04-11T20:37:38Z","last_seen":"2026-10-12T01:42:10.495521Z","times_seen":195,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":383,"dns":0,"connect":86,"send":0,"wait":175,"receive":174,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alphatrade-options.com/git/rand/favicon.png","fqdn":"alphatrade-options.com","domain":"alphatrade-options.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sabinegrant.com/gsult/loginn.htm","date":"2026-10-08T16:00:16.048Z","timestamp":1791475216048,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /git/rand/favicon.png HTTP/1.1\r\nHost: alphatrade-options.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabinegrant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T01:30:54.503287Z","times_seen":19042579,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabinegrant.com/gsult/loginn.htm","fqdn":"sabinegrant.com","domain":"sabinegrant.com","tld":"com"},"ip":{"addr":"192.163.197.193","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T16:00:14.308Z","timestamp":1791475214308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sabinegrant.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 14:11:54 GMT","end":"Fri, 13 Nov 2026 14:11:53 GMT"},"fingerprint":{"sha1":"35:ED:69:D3:14:39:34:9E:28:CE:18:F4:71:21:13:3D:07:C3:E9:F1","sha256":"60:4C:DC:A0:BE:99:8D:32:C5:4A:3E:4F:77:3D:FC:97:CD:AF:70:E9:7E:0B:FD:FF:A8:53:51:99:4C:E6:D4:78"}}},"request":{"raw":"GET /gsult/loginn.htm HTTP/1.1\r\nHost: sabinegrant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 10 Sep 2026 18:16:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11134\r\ncontent-type: text/html\r\ndate: Thu, 08 Oct 2026 16:00:14 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11134,"size_decoded":11338,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1700), with CRLF line terminators","md5":"62f03395ffc4fb6c7daf240d1b19fb68","sha1":"eccf720bdceb3bbc232de87d7bbd5b99311c008c","sha256":"8b5b1318f577ef9ec95dbb479346bb5854dcafd5461584830d7938159919830f","sha512":"c24a70d01f9f388de95e2abdb14f732221072711df3aacee73728dc681446756135ea24a14f1a34f9511756d6e47bbf462fed8e08c037c39948e9af1b940c956","ssdeep":"192:MhYWaXdYkA/Wuxx5Z3+AH6DyS82rHN8XNeH362k31T6O5:9JR+HiD9rN8XNQET6G","tlshash":"08323c71b858644a55b7527cb2e08608fc538193eb061214b8fc51a22ffdf69a9e2fcd","first_seen":"2026-09-15T19:41:45.26646Z","last_seen":"2026-10-12T01:42:10.498214Z","times_seen":4,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":44,"connect":136,"send":0,"wait":271,"receive":0,"ssl":281},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"sabinegrant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":{"engine":"luna_v2","pattern_id":"generic.legacy_phishing.javascript.password_error_messages"}}]}},{"url":{"schema":"https","addr":"firebasestorage.googleapis.com/v0/b/portal-aa363.appspot.com/o/jquery-1.js?alt=media\u0026token=be637750-133e-4219-9149-f23352276b75","fqdn":"firebasestorage.googleapis.com","domain":"firebasestorage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabinegrant.com/gsult/loginn.htm","date":"2026-10-08T16:00:15.451Z","timestamp":1791475215451,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /v0/b/portal-aa363.appspot.com/o/jquery-1.js?alt=media\u0026token=be637750-133e-4219-9149-f23352276b75 HTTP/1.1\r\nHost: firebasestorage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabinegrant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 \r\ncontent-type: application/json; charset=UTF-8\r\nx-guploader-uploadid: AP6rU82JgNjU045C6vzfLJ-9hPsWFUQXjKqokkFF1w1xSPMbZdxGgVd7WD95fbar69g_HWetgUpmWrU\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Range, X-Firebase-Storage-XSRF\r\naccess-control-allow-origin: *\r\ndate: Thu, 08 Oct 2026 16:00:15 GMT\r\nexpires: Thu, 08 Oct 2026 16:00:15 GMT\r\ncache-control: private, max-age=0\r\ncontent-length: 406\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T01:30:54.503287Z","times_seen":19042579,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.12.4.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sabinegrant.com/gsult/loginn.htm","date":"2026-10-08T16:00:15.454Z","timestamp":1791475215454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-1.12.4.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sabinegrant.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sabinegrant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-47a36\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 08 Oct 2026 16:00:15 GMT\r\nage: 636942\r\nx-served-by: cache-lga21970-LGA, cache-lga-kjfk8660065-LGA, cache-bma-essb1270074-BMA\r\nx-cache: HIT, HIT, HIT\r\nx-cache-hits: 2325, 4755, 1029\r\nx-timer: S1791475215.490293,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 87176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":293430,"size_decoded":87865,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fb2d334dabf4902825df4fe6c2298b4b","sha1":"433836da7e015f2eb3fc386817de88b78248f6ef","sha256":"430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575","sha512":"8cac69ec91c437aa5e126ce683a6bb5c904e44d4c1d084c3d8f8bee85524735e8f09a340257d9a859d5e8e7d69d6e637ecfc728ab9ffd0e30d65b2136c48378f","ssdeep":"6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC","tlshash":"e754a4d8f78d112e4232316aad2f52cdbb7cd1b1561054aebd8d497c24a083d42faf7a","first_seen":"2023-03-07T01:16:13Z","last_seen":"2026-10-12T01:56:43.808026Z","times_seen":4558,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":12,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}