{"report_id":"93194c1a-5c5e-4f3f-9e18-615c5a25d74c","version":6,"status":"done","tags":[],"date":"2026-03-06T10:40:37Z","url":{"schema":"https","addr":"cashconnect.us","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":0,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"cashconnect.us/home","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"title":"Cash Connect – Sign in to access your account","dom":{"size":31860,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27420)","md5":"8adf3525a9a197944a9964717921e807","sha1":"c3248049d302a7e6d98c6723085ecf8547717dc7","sha256":"87f31e0d936fb923a442b9d287399831a0b55c64bfe40dce2049744124b6acc6","sha512":"95037d350151c0bcea08494e9a44f0a60f478556329444b0d216052312cadd61edf49577d617a2458dd1142d87bdf66296b6651b4ab14e5cb4d1b8560134fb94","ssdeep":"384:GHJb/u7cXikPw7IHB0LfibsQIEbtO2uv66ILV/LGX6DkhCt5hRBhby8cBRylH1yH:Gpb/u54wsBDzHb02HLGXqhTLcBRylH1e","tlshash":"e6e2fafa932002f9b04347e4e4703a5677b6a4bedb778a4ce32c55913f43ca55988ee0","dom_hash":"domhash5e1c1c8e2dcc2bb0dec679c49368343e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cashconnect.us","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":0,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T10:40:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cashconnect.us","ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-06T10:40:37.776243Z","last_seen":"2026-03-06T10:40:37.776243Z","alert_count":0,"request_count":6,"received_data":1765485,"sent_data":2688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cashconnect.us/assets/index-CJ9hhE_-.js","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6e7312ebea0773b7058d1ea8300b705","sha1":"587125f84735328e40df2987096ca6e5b7e0f9c0","sha256":"7c52b0864212415a1afd5acf6f90ba0f77736b6cef1d88a8b4d1c9d476378861","sha512":"ce6bcbf3fd3bd70741e1cd6cdc53d84433a7222bb25cd55c7f725ac14f315c35d1cd64f61e57ad55e0cb65349a5ff41ec77a4084490f9d9da8e784f8d2e3e564","ssdeep":"6144:MkrBpfEBhtJvnSTiSf1O0SiFzMAV0BQ3Cn+6u5JAGUw7OFGC7KsBatPQh5xpk2AE:MkrBpM5JfSTiSf1O0SiFzMA6BQ3C+6u2","tlshash":"38742abd3296753303d549fa643b4087f3299949344f82d8b52dd8eb2d3a84a41fafb4","size":348905,"data":"","first_seen":"2026-03-06T10:40:40.616062Z","last_seen":"2026-03-06T10:40:40.616062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cashconnect.us/","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T10:40:15.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: text/html\r\ncontent-length: 325\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\netag: \"1f0-64c36ea4b1cc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ae72b4bf8ec9d206a69f88784737b9de","sha1":"860bc405e40f9f09c616ab75ebbcdea12bc84021","sha256":"a191f54c06bb58428a88f65b897284fa5e2b0031183ccd929150225c11331b45","sha512":"a5bf345a62656601508617d9cf92f276cbd9006c9e8fb0b6b6b898ea6e0cc7d8c95bdfbe96e08776ab8f3b1a851e7604e22106a08cb92d808eb46870995e53b5","ssdeep":"","tlshash":"f7f09e4694e08d0513304a556dc1f905da52ea878b495d0826dba47c5f90786cadf5bc","first_seen":"2026-03-06T10:40:40.610597Z","last_seen":"2026-03-06T10:40:40.610597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1278,"timings":{"blocked":624,"dns":579,"connect":17,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashconnect.us/assets/index-Bi5upNj1.css","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashconnect.us/","date":"2026-03-06T10:40:16.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET /assets/index-Bi5upNj1.css HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashconnect.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a8789b-14f4f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f6a9a5d9f1adb16d616da48aeb9b5aab","sha1":"4c5d090fc4a1569beb52ef66962ba2b9ee3709bd","sha256":"7ff4dec214348c51dd8b5c65858ba1cef2e5c0586a02cc4dbfcb9bd95e1b2a6b","sha512":"d085f254b6a31266338ff0a6307d188ca07a1350be1f0363d88e311ad521b55ecc616b5273d5bde8f1fbe9ef28beec1aa58cbe9e05a34948c6df53df46adbf7b","ssdeep":"1536:i1yXIrnrBBvLDkFGduYpcAJMe46dsOc+B:iQXIrnrBBvv1pcAJMKsOL","tlshash":"2483851caa15603f3c23d1f5d3d8aa5de12bb1c0de3e17f9b89251205ac63f61ea7618","first_seen":"2026-03-06T10:40:40.613267Z","last_seen":"2026-03-06T10:40:40.613267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashconnect.us/assets/index-CJ9hhE_-.js","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashconnect.us/","date":"2026-03-06T10:40:16.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET /assets/index-CJ9hhE_-.js HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashconnect.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a8789b-552e9\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41918)","md5":"b6e7312ebea0773b7058d1ea8300b705","sha1":"587125f84735328e40df2987096ca6e5b7e0f9c0","sha256":"7c52b0864212415a1afd5acf6f90ba0f77736b6cef1d88a8b4d1c9d476378861","sha512":"ce6bcbf3fd3bd70741e1cd6cdc53d84433a7222bb25cd55c7f725ac14f315c35d1cd64f61e57ad55e0cb65349a5ff41ec77a4084490f9d9da8e784f8d2e3e564","ssdeep":"6144:MkrBpfEBhtJvnSTiSf1O0SiFzMAV0BQ3Cn+6u5JAGUw7OFGC7KsBatPQh5xpk2AE:MkrBpM5JfSTiSf1O0SiFzMA6BQ3C+6u2","tlshash":"38742abd3296753303d549fa643b4087f3299949344f82d8b52dd8eb2d3a84a41fafb4","first_seen":"2026-03-06T10:40:40.616062Z","last_seen":"2026-03-06T10:40:40.616062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashconnect.us/assets/logo-DkswKT3q.png","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashconnect.us/","date":"2026-03-06T10:40:16.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET /assets/logo-DkswKT3q.png HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashconnect.us/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 189044\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\netag: \"69a8789b-2e274\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 487, 8-bit/color RGBA, non-interlaced","md5":"55e23e8146d412d0a4a0fc93f840708c","sha1":"9fa84b28207a986f37b2d7f980584176bc91ece7","sha256":"f8f36a0b4d0b8984be63dc6b4ffb4116b798fdcd4371ad7f71119f47e6b29da9","sha512":"902e59b48dd682a1b997d6e6d6bd7daa4019f0547231442a5974e9de8019bdd691acdd1833480754798f5fe34afba598439428d4d79a815520213c35e99383d9","ssdeep":"3072:sG6ZZH0GWzXHDrCA22Kb2evAyofqMm9r+jfnDaR2pXtzd+hl98uz/moCSf:CZiGeHDrCOybMmdeOm9zd+j98uqpI","tlshash":"19042292c6caa0510d6728a847dfc87bf50c389084b7694bffd2de4526fa4c0df09e98","first_seen":"2026-03-06T10:40:40.618597Z","last_seen":"2026-03-06T10:40:40.618597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashconnect.us/assets/credits-aR8394rK.jpg","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashconnect.us/","date":"2026-03-06T10:40:16.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET /assets/credits-aR8394rK.jpg HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashconnect.us/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1084970\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\netag: \"69a8789b-108e2a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1084970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Freepik Company S.L. - www.freepik.com], baseline, precision 8, 6088x3424, components 3","md5":"48f6732937a27033b0d62af3b70fb552","sha1":"5bd6f8b73e4b31dd06a8525da4e3e46e1893a229","sha256":"cf861428403dc24f50bc87b68da242ec0deffafd1280a9c7c94922451f0fb21f","sha512":"a61dabe164301f2d0b8ade2f0c6458501d18213b1493fb8dd0b55830993c3d8a47349bcb9a03084f025ee00a2f6a196442026beb6973501ccd6602bc9f8b40d8","ssdeep":"24576:qdmoRNhbfCFGmK7VKBEqa//k2xoB+PLkO7INvon:kfR7SGFJKBEqa//cM7n","tlshash":"9725020388555e83a51a87e4be4b0e9d5f613b3cf9923aef0553afcb38202126d9d17d","first_seen":"2025-08-05T14:32:50.954265Z","last_seen":"2026-03-06T10:40:40.620252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":21,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashconnect.us/favicon.svg","fqdn":"cashconnect.us","domain":"cashconnect.us","tld":"us"},"ip":{"addr":"23.137.249.67","port":443,"asn":210630,"as":"IncogNET LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashconnect.us/","date":"2026-03-06T10:40:16.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashconnect.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 19:42:07 GMT","end":"Tue, 02 Jun 2026 19:42:06 GMT"},"fingerprint":{"sha1":"71:EE:74:3F:83:32:E8:C0:0F:92:E8:6A:81:65:B1:B4:1E:AD:73:7D","sha256":"AC:BE:CF:17:CD:AE:A2:C6:1B:47:80:75:2E:6C:67:C2:BC:7D:BD:30:00:3F:71:70:DB:E9:A7:DC:FF:02:5D:B4"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cashconnect.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashconnect.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Mar 2026 10:40:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 18:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a8789b-d5d2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf2183af29d79786e4ab6280ec59efbd","sha1":"41a0d084eb239c09fdda81fb8437cb6fc7b61c91","sha256":"507db8b19b2f01338fba186a0f9459709479db7950876f75166179b0ce0d1635","sha512":"d0853b7d2c7e11e96a74d0ae3e293904eb3d022b20a9665bbd2e6c0cabd03921962f9f857852cac176b4a524066154c6cad412a5b69f320b4b4c893f0364690e","ssdeep":"768:4HYu5Z6DS0i3K1IYVh1ZSJVwHBUd7d37aI7UvUZfkTblWycs8YZYodtFWh4mGwDe:g8Dk3o5FZIVwgd3lUvvbis8QnEjGwe","tlshash":"633309e6333681d3e541dad4691274d4653f34aeefcd7384d480292f64264f88abee8b","first_seen":"2026-03-06T10:40:40.622151Z","last_seen":"2026-03-06T10:40:40.622151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}