{"report_id":"944f938e-21df-476d-9a80-15e2b5193b69","version":6,"status":"done","tags":[],"date":"2026-01-05T00:16:56Z","url":{"schema":"http","addr":"app.hsbcoffshorebank.com","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/user/login","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"title":"HSBC - Login","dom":{"size":13023,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (321)","md5":"55d305a1033aef6e6ec1ac3a62a7f7f6","sha1":"14f676d46940294c2a0b47f6502cedd81a14125b","sha256":"48303ba27d52c1920aa8a9ff540deb5d127ddbd826feba8e7a65169e847d9a44","sha512":"2058faede0ae2f4548ce7a96edcf95ad043af15f2e8c4614b930c3c59ae95c8a4a0d2c9d90f6aa565c229c63abb2c13725204ccba2ffc35a74725b36a381e55d","ssdeep":"192:eQxdCmmc4B4kEepCOrquazw52fMt3It1Wp5j6kCLdz0L6tEb8gNIi3gsXjR:zxwmCrjO9khAg7R","tlshash":"4f42662271f05422557760ec79e6770ea992c403cf06cd44b9ec46a42faade5e8e7f2c","dom_hash":"domhash5661a838e57d0d7e72ede2c6f884f1c0","first_seen":"2026-01-05T00:17:01.89767Z","last_seen":"2026-01-05T00:17:01.89767Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.hsbcoffshorebank.com","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T00:16:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.hsbcoffshorebank.com","ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2023-05-09","domain_rank":0,"first_seen":"2026-01-05T00:16:56.890866Z","last_seen":"2026-01-05T00:16:57.359649Z","alert_count":100,"request_count":25,"received_data":1986556,"sent_data":15021,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":88097,"sent_data":597,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1118,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/iziToast.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-10T21:27:40.698308Z","times_seen":3428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/slick.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","size":53179,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-10T14:18:06.478655Z","times_seen":2532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/js/main.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b49e429d093298aa2916c060352d1c87","sha1":"551ba1979af7944bd28bc56e9098b2b14a7a5b7e","sha256":"f7f9a7bb7c2ad9c6631a8169962d0703e2c46cf96af13c3ed9da2510c1d71f5b","sha512":"82c8cd2b72cf6bd28671b3a44ef6a5e9ad1ddcf24969172c27f054aaaa1520e189d38ac7a50035c080302024d09e88c0b6e0d0e7ed287a644d8021a5e8e6a97b","ssdeep":"48:k3qSyIqxyyMCkiq4ykt9D9WyaH5y5butnCUGeHWEc7ylDJEcYy3VwyWyxVy3Bd82:ixpibtNsyE5gbutP9mBL9YtA","tlshash":"54d1ae99b02121b094bf37709b4b7214f969096b8310ce007c6e55ce2fb97a493e2fde","size":6495,"data":"","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-08-09T17:50:50.475039Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/jquery-3.7.1.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-11T01:53:44.634908Z","times_seen":30874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/user/login","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"90684535f459421260927ed59f70e4c9","sha1":"388f43f170c1dcf4d7c6fb3768cf3c1db2486b04","sha256":"5949ccdf961507730b09c5211558421caf3bb3394d6a69cc7e58c016a2d2a8d0","sha512":"a61769808cdf0622d8c67c9120f918c234ea6b1345584eb2bccadd02e0ff2d344541eb2d8ef49099525043b00cfd65d5779e14c2d12d359b8742fc0a4e691f08","ssdeep":"","tlshash":"2731ca685e6254060d2b30bd298f1516ae3708075d1bb67abdcc52400f9987cdbf5fa8","size":1463,"data":"","first_seen":"2024-07-18T03:39:19Z","last_seen":"2026-06-06T14:57:44.554289Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/user/login","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f39597ff36289094a9fe1aceedcd5e55","sha1":"e25b6dceb73a78ee33e6591072dc005978b5f82c","sha256":"4cd69b38ab35b53f935c4d6201e81732ad7d0be1730632468a738207b52193ca","sha512":"0238b218a89edf97ee7f71ebc8e74638bd9e7466791686cb378337bd47573a26695d482aeee0e2a6cb17dcf999419acda7060a56c1ef1f7531e13de416451765","ssdeep":"","tlshash":"eb51d02ab4f5d03664bb71af56fb4586b667040b4108cf04fe4c0a801fb55a96dd1b5d","size":2827,"data":"","first_seen":"2026-01-05T00:17:01.923394Z","last_seen":"2026-01-05T02:59:57.708675Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80420,"data":"","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-08-10T16:22:12.003347Z","times_seen":9479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/jquery.validate.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd7d52879bd864e62e9b6a06f88b8086","sha1":"84ce4e5ac168ca6c37e8111f15c05ff700617bee","sha256":"84026e4d1231690805132178d157da4b7bb7906548ca9cfdc7e1176432bc1200","sha512":"d61294cdd6ba70f7d689b0eb6fd252a6ab208ba78ca9b27dd2663bb9e9620bfd73ecbfd563a0e52fb2ce82a473e32943727c4d5c0485b76b899329e4c97c1c2a","ssdeep":"1536:wJRM/JWZPv12/1Kb6K495zMvHjHG+Nn5VX9Y4jcyAtrU7XF8:wzHHDn5U018","tlshash":"76733f4e3a5a10194d3b73feef8b914ef7a6412b410295187cac42902fb5db462e5fec","size":76359,"data":"","first_seen":"2023-04-11T09:53:40Z","last_seen":"2026-08-09T17:50:50.460013Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/slick.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/slick.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 10 Aug 2023 14:12:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7dd6efe7556ca666dca0126387feed72","sha1":"8bbd779ec8580ec0f0b8233eaafdb1bb5090671b","sha256":"2ea14b8011f2330241a3f98a5b444db57214f133728ca671c86fa0d160ec5324","sha512":"a8d94b842400f96aa98f2d739f435b9f386f45693f50e2ed23ae380e9eb5426ac6b82e85879ae00d31969d144557d01d50e0b800955bd48db6aaa0811958bad6","ssdeep":"","tlshash":"ad41fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-08T04:13:47Z","last_seen":"2026-08-11T01:51:47.618509Z","times_seen":2626,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20800\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80420,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-08-10T16:22:12.003347Z","times_seen":9479,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/jquery.validate.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/js/jquery.validate.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 21 Nov 2022 07:29:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12391\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76360,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (491), with CRLF line terminators","md5":"dd7d52879bd864e62e9b6a06f88b8086","sha1":"84ce4e5ac168ca6c37e8111f15c05ff700617bee","sha256":"84026e4d1231690805132178d157da4b7bb7906548ca9cfdc7e1176432bc1200","sha512":"d61294cdd6ba70f7d689b0eb6fd252a6ab208ba78ca9b27dd2663bb9e9620bfd73ecbfd563a0e52fb2ce82a473e32943727c4d5c0485b76b899329e4c97c1c2a","ssdeep":"1536:wJRM/JWZPv12/1Kb6K495zMvHjHG+Nn5VX9Y4jcyAtrU7XF8:wzHHDn5U018","tlshash":"76733f4e3a5a10194d3b73feef8b914ef7a6412b410295187cac42902fb5db462e5fec","first_seen":"2023-04-11T09:53:40Z","last_seen":"2026-08-09T17:50:50.460013Z","times_seen":290,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/js/main.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/js/main.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Sep 2023 12:36:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1324\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6495,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b49e429d093298aa2916c060352d1c87","sha1":"551ba1979af7944bd28bc56e9098b2b14a7a5b7e","sha256":"f7f9a7bb7c2ad9c6631a8169962d0703e2c46cf96af13c3ed9da2510c1d71f5b","sha512":"82c8cd2b72cf6bd28671b3a44ef6a5e9ad1ddcf24969172c27f054aaaa1520e189d38ac7a50035c080302024d09e88c0b6e0d0e7ed287a644d8021a5e8e6a97b","ssdeep":"48:k3qSyIqxyyMCkiq4ykt9D9WyaH5y5butnCUGeHWEc7ylDJEcYy3VwyWyxVy3Bd82:ixpibtNsyE5gbutP9mBL9YtA","tlshash":"54d1ae99b02121b094bf37709b4b7214f969096b8310ce007c6e55ce2fb97a493e2fde","first_seen":"2024-05-12T01:27:04Z","last_seen":"2026-08-09T17:50:50.475039Z","times_seen":131,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/iziToast.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4432\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-08-10T21:27:40.698308Z","times_seen":3428,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft_ExtraBold.otf","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft_ExtraBold.otf HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 05 Aug 2023 08:47:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104772\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104772,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"ca23721ad3c224613015ed89913e1484","sha1":"f4deade6aa17a9b77ffeecc4a21e6fa45aad8d6b","sha256":"ceb187aad727d073783aab510c864e66149b24d7cd4b1fb1366ffef15b63a2a0","sha512":"bb99cf69d712ac9671916ea4ad5184080c011e634df474ccf2f40b8b039f91930e4be8f27a35ee171ee51bd84747a0494824219e2462f9c5b0634dcdbc71467a","ssdeep":"3072:uh+kkTuX4jedPwm2LfRQ51sG07yMsji+x105Uf9QX:XbjNm2LK51sEIOfy","tlshash":"53a31697324bb38ae322663d066481189f65bec6daf9166646e34dfe32df1434ce3701","first_seen":"2023-05-23T13:21:02Z","last_seen":"2026-08-09T17:50:50.486726Z","times_seen":138,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/all.min.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18892\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-11T02:01:16.267278Z","times_seen":34544,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/main.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/main.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Apr 2025 08:53:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15033\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117384,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5e4ba960d57e38754637996ab3fa94ef","sha1":"97800b56ef6e03e68967f853885266315071cf2c","sha256":"82fad45173a1ee16a78739ac544ebfa472a18bb75fb42117f5c9c236de60b7b4","sha512":"77c54846e4d5d0c37a49fc3ad05bea91e401c906abd61a82834761748d5a0ffa87dc339160a230dae03309d672279ef4a15bc442aab79259098a22b0ec0b6ece","ssdeep":"3072:wB9ExwYGngrmLfPWFH81VWTOfEN/iMD86NYHh:wB9ExwYGngrmLfPWFH81VWTOfEN/iMDu","tlshash":"e1b354a6aef51428351bb41a659f976c732d50819b0ecfa9b6d5216cefc43f00123f8e","first_seen":"2025-09-21T13:45:38.982316Z","last_seen":"2026-07-02T16:38:56.516184Z","times_seen":27,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/images/thumbs/account-bg.png","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/images/thumbs/account-bg.png HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 29 Aug 2023 14:01:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6452\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1039 x 1067, 4-bit colormap, non-interlaced","md5":"52de261351de65729d0ee17c4c64f1b8","sha1":"8136a0dc978187d9532725c4a82e97c17ac53c03","sha256":"d84a7422c07841cefe860ebf2d0e842abc0eda08b0866cbf986a463f26240f32","sha512":"2f2153f75684a2df68e0907b96d9c1b62e0c181af4d105eb1fa58f86061375523328197e000f469144f18d550262ed7f4f10b0af7e15af8bde0f3fb114120276","ssdeep":"96:d6S3bAbvY1xe6v1GkNTMyBWat3+4gkGha8iGLFXYkb+Kxnvt++uOuHWXpE:d637YxxdMuVgkGg8iGpoEhzu25E","tlshash":"5bd19e90e0132a575bf2e12101151291dbbf4d0ee9e67694f0cd2fbabc9a87dd471f48","first_seen":"2025-02-10T18:40:59.151258Z","last_seen":"2026-01-05T02:59:57.688188Z","times_seen":5,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/images/logoIcon/logo.png","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Nov 2025 11:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 83851\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 607, 8-bit/color RGBA, non-interlaced","md5":"78dd3c112113836f97ab69edd3f6ecd7","sha1":"bfcb490a20a3e88123962bce4ee565c2a1542c24","sha256":"4eccec59dbd82483a244a2e75be26282500c5c92eeb6991c5738d6694dd8f4f9","sha512":"0964a22ba388b91f84cf9ea393d4433615a6a9c6a6d75ed5edc5e1962e5a85f1aac32851570c0b3cecdb8d731e4a37eb72c40139df868fb879ff55f99f924f99","ssdeep":"1536:sFTokVdKmWYa/nBs5jU4N5puSH3Ui3fznGE2lFUakF0cmh0SZUqIL97+GXZFFw1y:sFTokVdFa/nBsFXkiPznGfeakpVS3epT","tlshash":"718312b79471d5547aba02b7c4844f9244f4d053c6fdd86e4899b96ca9e8e3ca2c0ca3","first_seen":"2026-01-05T00:17:01.908979Z","last_seen":"2026-01-05T02:59:57.702457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/bootstrap.min.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20638\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":194900,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"a535cda6f21335f130c892d0444a7902","sha1":"95c895180f4103e47281f2dc59524adc05b22dcf","sha256":"ef110c50e64cb77ff4adcec1cff87821f8bb31e56ccf14d85a8bcce0eb65e19e","sha512":"bf30a7e68070b7617a7fc9d84bf73512dc00f48625e23d092493889fe912ec53e42297e1e903b3880e088d5c8089d8648c3bfb85fa5d2a3907d35c72a10c3a1e","ssdeep":"1536:htGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:htGg9JfWD9kVkpz600I4lp","tlshash":"711482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-06-18T01:05:12Z","last_seen":"2026-08-10T01:50:13.976055Z","times_seen":803,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/custom.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/custom.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Apr 2025 08:14:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1183\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4917,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e5a880ce0b9fd3b04a72c8a332c8df8e","sha1":"47b858353d0994d9e0b93df10b9fe9b28c44ffdb","sha256":"541599ce10d14bf7ce4ca95b1470584b2d8307c16a8a7507eea11463ea151dfe","sha512":"80f30c36f1481c1837fde1137a709398a5b76510545210b8d203f0174e1a16563c7894da2fdcf2f978f506af775f90ab1ec05908b2dac833335dee0b266dee80","ssdeep":"96:qvAZsbx27M+yjYi0a3VXterU6GTBnmg5XyAxQ0QJDx4Dx3:RZsQA+6WuJtjmgdQJDx4Dx3","tlshash":"d8a15368da4661022537db78abc28bad7f381052ef130bbdbbc1205907885ac4775fed","first_seen":"2025-09-21T13:45:38.984053Z","last_seen":"2026-07-02T16:38:56.509998Z","times_seen":31,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/images/logoIcon/logo_dark.png","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/images/logoIcon/logo_dark.png HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Nov 2025 11:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 83851\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 607, 8-bit/color RGBA, non-interlaced","md5":"78dd3c112113836f97ab69edd3f6ecd7","sha1":"bfcb490a20a3e88123962bce4ee565c2a1542c24","sha256":"4eccec59dbd82483a244a2e75be26282500c5c92eeb6991c5738d6694dd8f4f9","sha512":"0964a22ba388b91f84cf9ea393d4433615a6a9c6a6d75ed5edc5e1962e5a85f1aac32851570c0b3cecdb8d731e4a37eb72c40139df868fb879ff55f99f924f99","ssdeep":"1536:sFTokVdKmWYa/nBs5jU4N5puSH3Ui3fznGE2lFUakF0cmh0SZUqIL97+GXZFFw1y:sFTokVdFa/nBsFXkiPznGfeakpVS3epT","tlshash":"718312b79471d5547aba02b7c4844f9244f4d053c6fdd86e4899b96ca9e8e3ca2c0ca3","first_seen":"2026-01-05T00:17:01.908979Z","last_seen":"2026-01-05T02:59:57.702457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/jquery-3.7.1.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27471\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-11T01:53:44.634908Z","times_seen":30874,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/js/slick.min.js","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/js/slick.min.js HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 10 Aug 2023 14:12:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10053\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53179,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (53179), with no line terminators","md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-10T14:18:06.478655Z","times_seen":2532,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/iziToast_custom.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/iziToast_custom.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 410\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9357db0a076fb39c51171dd008533397","sha1":"3a30fbf23506580ec8ed3e19fe91bf5c4eca491d","sha256":"08373c1b5b174aa870fe86e090d0d7fff5faf78c0d107464a3554edf8912a168","sha512":"393ceea49f00392e2e558dbadb1213bef9c2a3e7adc78104acd557b46030ae8fc146594abfc7c83355a170607ee3c09d31a3f0c252c4b38ead4f3bc41ad80cf7","ssdeep":"","tlshash":"de3108c651f228d1edcab4d44f7b6681653f5c43b1cdc865badc31488fa130538a1b78","first_seen":"2025-01-15T11:03:51.171939Z","last_seen":"2026-08-10T03:19:18.538141Z","times_seen":414,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 00:16:34 GMT\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87411,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"729fffa27867b2fc88fea882fa12ed83","sha1":"17ca1ccc1c50cbb36721e4bdfa782e28872908a5","sha256":"63d281e9c685c992b10f4b9217132958ea6a9bef4afa76cce44ef9ccf79b57e3","sha512":"dd5f832e57935d2c1a451a6d43ac266f2c4a04aa02c768ea381f96ea2a86e12e5d36e4d3791260f3bda7fcfa97e09a2660bf16a4f1c16961734fc8485b6341e0","ssdeep":"768:BDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uB8zXF+aq:05YRdvI0rAwyl","tlshash":"4c830ca1041b90409b834ce233cf7e35fe4e92553141c0b9abfd9b9baddad66136876c","first_seen":"2025-11-29T08:16:26.50232Z","last_seen":"2026-02-15T05:10:18.196355Z","times_seen":12,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":162,"dns":0,"connect":20,"send":0,"wait":38,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.hsbcoffshorebank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449638\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-11T01:51:47.561295Z","times_seen":961354,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":156,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/user/login","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T00:16:33.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /user/login HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; expires=Mon, 05 Jan 2026 02:16:33 GMT; Max-Age=7200; path=/; secure; samesite=lax\nhsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi; expires=Mon, 05 Jan 2026 02:16:33 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":12854,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"5a0ad32fcaa584b1246f895db41c2588","sha1":"b33233b03ea138272dc46e7a1f846a236020796b","sha256":"2dcdfac4ae8240cb264294b10e8b25d4553f62b2af7854ed81de7d6006f4d241","sha512":"51d783c09fd16ad896944561ae2bf932e361f116bd0b94ab476a48cd0554e58a0dd791c22660fd9e7a4022af68d4aed1087a2eee7ea0c8f8068850581c7f4f05","ssdeep":"192:hSRdCmmc4B4OdSrqDazw52fMt3jtdp5j6kCLdz0L6tEb8gNIi3gsXjfAu:QRwmSk0okhAg7Iu","tlshash":"eb42882271f05422557760ec79e6770fa9928403cf0add44b8ec46942fa6ed5e8e7f2c","first_seen":"2026-01-05T00:17:01.915128Z","last_seen":"2026-01-05T00:17:01.915128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/custom-fonts.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/custom-fonts.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Aug 2023 08:02:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 410\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"85f00abe211d9e44e4e6663144066281","sha1":"baa3415a9c9f311f17a15f0369387fca3b9765b9","sha256":"290803224d01fe2a0ef0644c03a0fae7188dda82dc349a195c06bf6730e5e114","sha512":"a9f12e0aa4f94b54688093a02bcc97ee47881715e204fd8482c5fb7e13bbcd4a7a5993ba7d1300a4bba057d1931226382a7229c0abf0563d6ed11ebbbaede9b2","ssdeep":"","tlshash":"1321d0a0e8bc1455a7105cc533573b20bf0e92229c856cceb797285caff771682d635d","first_seen":"2024-08-19T14:13:23.672801Z","last_seen":"2026-08-09T17:50:50.470382Z","times_seen":117,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/color.php?color=f70000\u0026secondColor=14233c","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/css/color.php?color=f70000\u0026secondColor=14233c HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-encoding: gzip\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"9ad0f0ea2db0fd3ce83657ac644037ed","sha1":"6c74048288d9ed8d15205fcc4ddf69c2889a3334","sha256":"d2bf9bd0569e4b33d74926a11f76d1fd5cb2409e2efcb44c3b650a2155f706db","sha512":"21c874abbd85cd8817d25e899aa47ba0d906de44e257b0a70c853d67284ad5c0bcc6f372b0f6fdb003c5fe829f7a10d6eef67a05dcc0d7e882c211dcbf55f8bd","ssdeep":"","tlshash":"96c0924a02287d7d07308323b3c00bafd13400631b503ec538d8043f8f719323067884","first_seen":"2026-01-05T00:17:01.916869Z","last_seen":"2026-08-09T17:50:50.470937Z","times_seen":9,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/images/frontend/login_bg/64f85aa4e4c9a1693997732.png","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/images/frontend/login_bg/64f85aa4e4c9a1693997732.png HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Sep 2023 22:55:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 677027\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":677027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 730, 8-bit/color RGBA, non-interlaced","md5":"720af0a6060f03b7743da7653bae3a43","sha1":"cf78df9e6a6c3960a0dda25964a0f4f481433a45","sha256":"0459f0cc0bd323a922dfdfad4166cc95e5fdc8a7a86bd7048f1018beaeff028d","sha512":"07f97a37ff363b9323c331d6fc0131860b104c64259d2a189ffb9514ad25c55b75185d1cb3fc2068580624987360d555e8d3f5713dbaa933431f3b77ebb41059","ssdeep":"12288:XFBInd0JPhbLTC4vaIOpqOy2X56gsgD81A5f5+WsCxmUS7aIAhJ:XPs0tM4CIOP5CKYyf557x87aRJ","tlshash":"cee423eddf87601cda8cc1645e3fbc6c19c9b611879c76097b80d9e61da867980e8f32","first_seen":"2025-02-10T18:40:59.139166Z","last_seen":"2026-01-05T02:59:57.705885Z","times_seen":5,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/iziToast.min.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9392\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-08-10T21:27:40.59695Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Regular.otf","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/templates/crystal_sky/fonts/custom/MADE-Tommy-Soft-Regular.otf HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/assets/templates/crystal_sky/css/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Sat, 05 Aug 2023 08:47:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107300\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107300,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"8f7acd078b2ba775933de1fed4ffed8b","sha1":"0af0656522831c6a697894a6e802730c927af942","sha256":"cfe416e2397540aa9862277938c28e3d9920958b51c1a81dcb4b5a5ae40bef56","sha512":"1cc0bb955cb668b8336f7731dd9dfd7b7672e593bf50de6d8ceb79a4561f9202c5988dfaeb160b8287bd05849231aa87a0d28b7c8735db97e945297099e1589b","ssdeep":"3072:OkSlZbTunbrxvsmAgfopKjBOwNGs78Mpe+ni73uJmS:KlRTuSmA4QZarNmS","tlshash":"e3a3e69b328bb28be325b03d06a440189f64bd66d9f5095656e38efe35ef1130ceb744","first_seen":"2023-05-21T16:14:09Z","last_seen":"2026-08-09T17:50:50.472993Z","times_seen":147,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.hsbcoffshorebank.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449638\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-11T01:51:47.561295Z","times_seen":961354,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":75,"dns":0,"connect":7,"send":0,"wait":8,"receive":9,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/images/logoIcon/favicon.png","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:34.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Nov 2025 11:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8932\r\ndate: Mon, 05 Jan 2026 00:16:34 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6a7dbda7bd72302d6499aa7350709092","sha1":"6d556e2fba45a2e5e61e124a4daad730c819331c","sha256":"1c814207c8ec8748ec309b43784d60650c17868a5190470c6538b8af38cc2889","sha512":"39275bcd9c985977b12dc854cf109e4d432d2e44b79cd9c1ee6b68182572c45d8494e71ce06920a6d0824b27cdab59d10cca6fc16a603faa0137971afefa16a9","ssdeep":"192:q8TlSLJ9EOzH3lca3BIfjz/fR2gtSltQWh4jS:EtLP32jTfR4nQW9","tlshash":"16026d79b235a0f8cbb5f588cf47f0a2497a04e10d99e0c7d0cf8738eee4186955952b","first_seen":"2026-01-05T00:17:01.92044Z","last_seen":"2026-01-05T02:59:57.70521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T00:16:33.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nlocation: https://app.hsbcoffshorebank.com/user/login\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":12854,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":146,"dns":7,"connect":64,"send":0,"wait":64,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hsbcoffshorebank.com/assets/global/css/line-awesome.min.css","fqdn":"app.hsbcoffshorebank.com","domain":"hsbcoffshorebank.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hsbcoffshorebank.com/user/login","date":"2026-01-05T00:16:33.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.hsbcoffshorebank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 13:45:11 GMT","end":"Sat, 04 Apr 2026 13:45:10 GMT"},"fingerprint":{"sha1":"8F:2B:76:47:87:03:BD:18:F9:78:08:B1:FB:28:92:92:F5:A0:CB:FF","sha256":"9C:DF:EC:D6:DC:38:03:AC:9F:50:77:3E:8F:7D:20:E5:2F:E8:88:A5:BF:BE:AC:37:64:28:FD:00:B6:FD:34:1A"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: app.hsbcoffshorebank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hsbcoffshorebank.com/user/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=SAFVAzkOcjiYVx4CW9dP8oaemQLOUEVvtI9bJnwg; hsbc_session=fBrOmfrEdCejt4GUXdGhd4U8eGsnwQiEUmkMktMi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 00:16:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 May 2024 16:39:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12970\r\ndate: Mon, 05 Jan 2026 00:16:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-08-11T02:42:46.723169Z","times_seen":7358,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"app.hsbcoffshorebank.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"app.hsbcoffshorebank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}