{"report_id":"a1850c6f-d26e-471e-b74a-b15e52f912ce","version":6,"status":"done","tags":[],"date":"2026-03-27T17:14:12Z","url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"title":"#1 Digital Marketing Agency [Get Your Free Proposal] Effeect","dom":{"size":19453,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13100)","md5":"bb522b7957e91960d42df6963de04649","sha1":"6243cdcbca8cae8715bcbba68faa377b7405f9a0","sha256":"7304bfbaacb687fca54506301490ac97bc2054049b9e553db07602c240ff5975","sha512":"c281c952698409d2f6334b5090bfaa636e81ae5d92712dd2da327aa039018072989ef79077fc4b151990c76113a3385dee81e9bddb6353e0e94f5be62337c677","ssdeep":"384:37yKEbZCxjt2qdkRvOD3W4rUX/avaATuAnmYADI:37yKoQxj4qdkFOm/avjmYADI","tlshash":"b79277696511067f056384d2f476be487ad2f30fc289c4003eee93952fd3ea0a67a7e5","dom_hash":"domhash7d5939ef0fb75f980d6ee7e84cf59779","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T17:14:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-27T17:13:50Z","timestamp":1774631630,"ip_dst":{"addr":"Client IP","port":53102,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 31","source":"{\"timestamp\":\"2026-03-27T17:13:50.898540+0000\",\"flow_id\":775549673688304,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"165.154.239.203\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":53102,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400030,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 31\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-03-27T17:13:50.871664+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"effeect.com","ip":{"addr":"165.140.69.238","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"domain_registered":"2021-09-16","domain_rank":3577254,"first_seen":"2022-01-30T03:37:50Z","last_seen":"2022-01-30T03:46:08Z","alert_count":0,"request_count":4,"received_data":74818,"sent_data":1919,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"effeectlogin.com","ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2026-03-27T17:14:14.242693Z","last_seen":"2026-03-27T17:14:14.242693Z","alert_count":0,"request_count":45,"received_data":3815985,"sent_data":20059,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2394468378e3b1849a196bccc2199085","sha1":"ecedab5e093b4b7f492ad075980f88fb6fb4ac49","sha256":"2cfb23055b2f5b353025d713d8ed5887541daae19e721e043410c620388a0e65","sha512":"bf978eb5748bfb4b4ba1522e6675bb5aa1f9708c5afa22fedb3e3ad968cb9dc7b46e32e7c719a227f2735ad4a7375d8b925af5ebb4e58e3e830e89e486705d1b","ssdeep":"","tlshash":"ffe026b92004100a466f02b8e183db9835332033a270a520bf2d82640f62ebf01228cd","size":361,"data":"","first_seen":"2025-03-16T01:30:56.094851Z","last_seen":"2026-04-12T23:56:15.768875Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2098fee9fa6e3e241adeaeefcf551320","sha1":"f878d716b09168791a8cb20dbdbeed573669d875","sha256":"c77a29f41f548288fc5c114150bcc4cb988951fe3e5ae3a0466b53dca8e4afa5","sha512":"c86081871bc2cd29c94a4a832e01dad325b6cc29393dd8ba9e5ce932bedf07107297786eb042d8b07f9616d51a665ebaa65d6bca2176687753bdc9b359b143ea","ssdeep":"","tlshash":"ee2179aa09a01634ced3a3281a4f75247d2790dbb33bc9403b9d8760cf25a17e26d7c8","size":1253,"data":"","first_seen":"2025-06-17T12:34:20.74604Z","last_seen":"2026-03-27T17:14:19.79663Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/route-block-B_A1xBdJ.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-26T01:02:47.685102Z","times_seen":634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/login-D_heD6Fa.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"75624bf776ad03758080d0145f20f742","sha1":"073f7ad48e8ab65c0744c1c54fdb861ca0c1ecc1","sha256":"963beb984cf57b617e8bc6dcac2f99366930a507e5464924a1a02838c11d0f35","sha512":"b6b3cbb7b393d75c8160e90be018bd5be373d3fd0c8728ef73455366e2a352fcccf98fb2df838103a10837358c41723777ad85adda20e45f47e5af10bccba62d","ssdeep":"","tlshash":"b2519838b41e8974a76288e478912c05310dd76ee216ef9d93be4f103ed1e35a359315","size":2603,"data":"","first_seen":"2026-03-27T17:14:19.691413Z","last_seen":"2026-03-27T17:14:19.691413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-D5sDPs4Q.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"4e28639e613323f25e0fbe981765cced","sha1":"c344dc8d2960bc857f2e1964c774b03232bc7e06","sha256":"41afe78ffb795b33b58877429ef07f6acecd714fddaf8df22014e5c190a4be3b","sha512":"5e5f191055f1e0c657da4d80dfc2bc33ad2f052753a0a2f1fb60446855c2cc5448308e620b11f2c8503cf16a10a029a5c494be0a5524f472ef582a49bc2e49f9","ssdeep":"","tlshash":"3d3123423884d63c2b83d88891188510952e1f0f997423ffd3ba3c3c97fe1997116f1a","size":1565,"data":"","first_seen":"2026-03-27T17:14:19.69508Z","last_seen":"2026-03-27T17:14:19.69508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/field-QDO2dlRH.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"e6b056e836184afb3c185d9a5900bb5a","sha1":"86857f32581b37ea01d22d2e1fd641c3e70a644a","sha256":"2c6fdd502689c28ede647c70f6d6d7cb2cd53645c3af63ed03099c392972dcfc","sha512":"10e8329884472f8312e63709b30e3ee250cbce111d07a41b7442eda8ceb520659e91ef3d721a0c75315b31f3890a94ad929d9a253169b289e5f418c927fa40e3","ssdeep":"","tlshash":"0d21668cb85b4e7d233328c5784fe88093a767779d2cd0c2f25c8a746b96c648729524","size":1433,"data":"","first_seen":"2026-03-27T17:14:19.749524Z","last_seen":"2026-03-27T17:14:19.749524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/dialog-KlsjEQUn.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"346f70bcd91b56e54b95d773203ddadf","sha1":"4d153551e22186311e49cc99f5c21944b7c0b7f2","sha256":"af8045789f47775c62705f2a7689012afdadfb0e4cf76c50365826a59ea69215","sha512":"fe1397ffccf24b5c354c12a06c4de301ce115e4d42afd0bfca249b5dbc4523c9818ff84943f336bfa65e6f4b4e6fe22a294a814634eaf1a7040c7ac49c15ba64","ssdeep":"","tlshash":"3301eb8830c0237fc25aa079f09f854ad3990a20ab33dec5f658598776ad840f37de94","size":850,"data":"","first_seen":"2026-03-27T17:14:19.738941Z","last_seen":"2026-03-27T17:14:19.738941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/registerSW.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1872c500de691dce40960bb85481de07","sha1":"b83dfcba8d2c57ca8837324bf395f34748033a50","sha256":"9742073ef7fc795e7673d98f272992843298426a0ffd8cb3507784df5143608b","sha512":"bf592ecb654fd8c3dba5db1816c3e454d72e3ef9cf078ca71314b68782e8f564b585ef21d7ca0b4a69540d2843ec713058d86cf40419b6b099f58df5f6f82041","ssdeep":"","tlshash":"2cc02b4fca4dc93e0830e0324c0b7b03331f0385c080049007f2030850c3414d1ae481","size":134,"data":"","first_seen":"2023-03-11T15:21:23Z","last_seen":"2026-04-26T05:52:33.488226Z","times_seen":7462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-26T08:34:02.642682Z","times_seen":31937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-26T08:34:02.643203Z","times_seen":35295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-CknB85J2.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"506a6ab5f68d10b61d17040e0cc87e41","sha1":"b468009dfc3307170056998dfcc96efd2a9f6d93","sha256":"c088d9fca5d18994f5fd0e543ed1cfe7f1a0e5ecd55f189ac4f6554227700747","sha512":"25bbd7c307b16a3ca9d6b0a363623dda49251c3a2b31398f5674a88e2287eff6caed74eb38f99c516a68e44dc660d44592a22afb6828ab80f9b1f5df6afdf7f4","ssdeep":"6144:SvvF7J2u4Rwit5oqd8TY6lM9NhwGmTk3/ZZ2BxognmEh8fvsN+m:SKu6pXvRhwGlZZ2roWosN+m","tlshash":"62746be63586783503ba0af5497f0202f33c5914344ec7e0f26ed99a3a7285996b7f6c","size":343914,"data":"","first_seen":"2026-03-27T17:14:19.78346Z","last_seen":"2026-03-27T17:14:19.78346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-cE1Dhfbi.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"ce8115540ffb0b16deb5fe8499792655","sha1":"61e9b7345df0a9531667d5641d705f13a6ea5204","sha256":"d442b688c9a799a4612395188d735cfc6da252abaced22fec879b7374b616fdd","sha512":"b5908f28d6a55be5f267b0bb28efcde8d6fc24c6dc01fcf00998265f969dbfbc87eb28837611cf891021c568432f7b769feab6ae2da4e4ada5b4117c87041438","ssdeep":"","tlshash":"a241948874acda7c9376b48454184c29c5451f9f7532c4e6d22b741b4be9a80fd3be58","size":2005,"data":"","first_seen":"2026-03-27T17:14:19.760794Z","last_seen":"2026-03-27T17:14:19.760794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-awKwGSoh.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"64b6a49bf516210bab039dfb6bd1f18e","sha1":"d2120bcc56f82e6d8979ce9095df2dd0348a35b1","sha256":"245ea826f60dbdda8d613ba3cb885f2bcbc4dad807025a4f52f8e48eaa6ecbad","sha512":"b397d63b65e1bee97f49af1e45e75ddbdef67a029cb0cff09ac37cc4ec5540ac76980b40d715d0d96787cc6034bd52a561291d5fe0e5e9bad8bd7e58af33073b","ssdeep":"96:iVTmXaalTJawHpVmtARlhRIjvWWW1yDz8fM6iMm37Xo6Daa6+Rha:emXR1JLTmqR/RIbWWxICMq32J+Rha","tlshash":"14a1c6e1fe097d3b4c33fc1855d7511269081bb5d518b3f2e8af188826e61a06af1f75","size":4951,"data":"","first_seen":"2026-03-27T17:14:19.758846Z","last_seen":"2026-03-27T17:14:19.758846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BlEpahbc.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c92032d68f77b474f0a06cedbf55090","sha1":"fa37547f2c55f8dd3ef9cc2290769e9a33ed5f65","sha256":"671c5011d7f9b2562300fbbfcee9ac39c7d065ad8f6bb7026198922dc8b1c955","sha512":"fe67a3420c35100fddfa3c4c53f356ec603898926ef1dcc4f852bd70f470dc0c8c867d203bbf610b7cb94771aefbe8b56fcea69ee65af07e42f6ce1bbb89b7ff","ssdeep":"192:apaMMxeCXqdkvZx1kjVVUpe/SkVC4r0QGgc3gGDGoCGomGeCGqsmFXIUoOACamhq:8Oe2qdkRvOzURkVC4rzjgilmS7rauJ3o","tlshash":"bb32e71fd626577c8a334098398a6d04b2055fafd390d652adec891917e0d3893bfbf8","size":11443,"data":"","first_seen":"2026-03-27T17:14:19.732294Z","last_seen":"2026-03-27T17:14:19.732294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/register-C-BQk5m3.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"fd10da0941b889ff046f4986a2fac59e","sha1":"75b3905aa91ebece54596314fcd2d306ab700f57","sha256":"f6f6e554b3a3921d7c49d0c2b22386f9e38c98172c0a6e02fcf00c8618bbaaaf","sha512":"b8ab56925a79bb9c1829bbe6d1abc5eb9c70138c8280c0cc4e3a1f2deca3c058ef9195c56004f19598315f0611563cfa49f412bf4134eb20b6fe93590d0a05d9","ssdeep":"96:E0qe/9SioepH8qUkiafixtfiYsksPxieIPom3KTuXZmg0qOSO3d5XR4CAL9RzXuq:TlF48/UkbfGfqXPxoPoiKTuX0g0qOxXq","tlshash":"e1b16e9dd00bcdbb4c96b4d978544001b14be77ba2274861f7bc8f6c26d7fa2a219722","size":5378,"data":"","first_seen":"2026-03-27T17:14:19.73589Z","last_seen":"2026-03-27T17:14:19.73589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BVmxB_oI.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"677661d9a00caa00759ae9a48122d9dc","sha1":"311abe2c626e5c693b832a99d2de4382a896862a","sha256":"098a6272e8bf6181dc6ddd75f6cbb71a57c54bf16902b877b4e6d47455255dc0","sha512":"cc846f6f7407861f408fc4120ee957601800336db5761087ba610edd0d3dd5bdf024a85f0c34dd10fb2b2c5f73ef7516202aa264857d370acd2580bcf8e4a7fc","ssdeep":"","tlshash":"91112f4c64c5cd30a20b46ccb04495517d581f4ea2acc7e1a2b7c9987bf0aad7059f2e","size":910,"data":"","first_seen":"2026-03-27T17:14:19.697874Z","last_seen":"2026-03-27T17:14:19.697874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-C3QAJpSF.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"e26836a7f8641851ec6d4ae9770f8f13","sha1":"dab08046346186f42ebe3eab01affc795f5f88cd","sha256":"ff4b06f7d61f98ca78aab4aa4dfeace30e7dffbf742630e83da3c24e0606aaf0","sha512":"7545b3828b08f1d8cc01d5db4fe4060c11749c4ed00d4717d39b727eae8ea2b468c3a93edca8f4894cafc2f5f0bb9bc951ef8152c49a494cd835ed4ab4e2a785","ssdeep":"","tlshash":"8031854f1d9843720c8784fde05ae062a9ad151c7da051e0c09cbe1a615ffc09a9be1c","size":1811,"data":"","first_seen":"2026-03-27T17:14:19.785383Z","last_seen":"2026-03-27T17:14:19.785383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"effeectlogin.com/assets/login-D_heD6Fa.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/login-D_heD6Fa.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:29:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3249-a2b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2603,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2602)","md5":"75624bf776ad03758080d0145f20f742","sha1":"073f7ad48e8ab65c0744c1c54fdb861ca0c1ecc1","sha256":"963beb984cf57b617e8bc6dcac2f99366930a507e5464924a1a02838c11d0f35","sha512":"b6b3cbb7b393d75c8160e90be018bd5be373d3fd0c8728ef73455366e2a352fcccf98fb2df838103a10837358c41723777ad85adda20e45f47e5af10bccba62d","ssdeep":"","tlshash":"b2519838b41e8974a76288e478912c05310dd76ee216ef9d93be4f103ed1e35a359315","first_seen":"2026-03-27T17:14:19.691413Z","last_seen":"2026-03-27T17:14:19.691413Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-D5sDPs4Q.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-D5sDPs4Q.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:29:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b321d-61d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1565,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1564)","md5":"4e28639e613323f25e0fbe981765cced","sha1":"c344dc8d2960bc857f2e1964c774b03232bc7e06","sha256":"41afe78ffb795b33b58877429ef07f6acecd714fddaf8df22014e5c190a4be3b","sha512":"5e5f191055f1e0c657da4d80dfc2bc33ad2f052753a0a2f1fb60446855c2cc5448308e620b11f2c8503cf16a10a029a5c494be0a5524f472ef582a49bc2e49f9","ssdeep":"","tlshash":"3d3123423884d63c2b83d88891188510952e1f0f997423ffd3ba3c3c97fe1997116f1a","first_seen":"2026-03-27T17:14:19.69508Z","last_seen":"2026-03-27T17:14:19.69508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BVmxB_oI.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-BVmxB_oI.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 910\r\nlast-modified: Mon, 19 May 2025 13:28:52 GMT\r\netag: \"682b3214-38e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":910,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (909)","md5":"677661d9a00caa00759ae9a48122d9dc","sha1":"311abe2c626e5c693b832a99d2de4382a896862a","sha256":"098a6272e8bf6181dc6ddd75f6cbb71a57c54bf16902b877b4e6d47455255dc0","sha512":"cc846f6f7407861f408fc4120ee957601800336db5761087ba610edd0d3dd5bdf024a85f0c34dd10fb2b2c5f73ef7516202aa264857d370acd2580bcf8e4a7fc","ssdeep":"","tlshash":"91112f4c64c5cd30a20b46ccb04495517d581f4ea2acc7e1a2b7c9987bf0aad7059f2e","first_seen":"2026-03-27T17:14:19.697874Z","last_seen":"2026-03-27T17:14:19.697874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeect.com/wp-content/uploads/2024/01/Designrush-1-300x300.png","fqdn":"effeect.com","domain":"effeect.com","tld":"com"},"ip":{"addr":"165.140.69.238","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whm.effeect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:21:24 GMT","end":"Wed, 20 May 2026 01:21:23 GMT"},"fingerprint":{"sha1":"EA:AC:C8:06:90:39:B8:1E:23:68:35:C2:8F:1E:42:25:B8:E7:BB:F9","sha256":"21:7F:29:C9:74:7D:7D:3E:93:AB:2A:00:21:55:FA:B0:D4:94:1B:35:4D:C2:27:DD:18:7C:6E:A0:3D:F3:79:C0"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/Designrush-1-300x300.png HTTP/1.1\r\nHost: effeect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 27 Mar 2027 23:13:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Jul 2025 16:02:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8765\r\ndate: Fri, 27 Mar 2026 17:13:51 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"02a5a0208d9080be8eb4ff14e743e6b1","sha1":"03b47c3521b8aff33586fb93af658c28d69e127d","sha256":"c52b291d4365ffd58db2b27e1770daf2d8cd77b216ece9deb24da4594edd60bc","sha512":"fa52215a6f345275816870537c502523a8f8df53f30cc9bfc39e71bcc475441b4dad1610b0fa8671b290b961a96ca6556bd2affd713330b7f0224b419944d3c6","ssdeep":"192:IJqDs2jehvrr9VPl/Da5pNiafa1Yk/46t5+MO07PcNg:EIs+6VPha5pNha1zDMUYq","tlshash":"13027ecbb915bcd2d2d81879b0899e2dc399b41b497751aa94f0ca9bd1377c024c374f","first_seen":"2026-03-27T17:14:19.699886Z","last_seen":"2026-03-27T17:14:19.699886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":309,"dns":0,"connect":136,"send":0,"wait":247,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/g2-BvdBsGqZ.gif","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/g2-BvdBsGqZ.gif HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 458098\r\nlast-modified: Mon, 19 May 2025 12:45:18 GMT\r\netag: \"682b27de-6fd72\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":458098,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 266 x 262","md5":"87c66ebda44b128d5bf9f5483faa5fd9","sha1":"793e6c9d1111d0526dc672fd142b729f365210be","sha256":"b8838c82ac50bf1167481203b1eda2de349450b2bca94b25bf4c4564c372aa32","sha512":"2c75a027eab48fbc8643f9268d7fa1979d9cb493e8562d94a8ef5e29ee08599a65f886995fbfa78232a7ba4d2c119bb70e5ec13dead428c7d2020c92acde56f0","ssdeep":"12288:K0jGkPUQaZa0aEFU95TVtudFWgJEC3nYvQ2htl34f:hGqdaM15TGEYOVJ0","tlshash":"f5a423a9e5fc8206ec5720b211f5253e710392bcb56c575bf2ab249a10b0c758dff925","first_seen":"2026-03-27T17:14:19.7021Z","last_seen":"2026-03-27T17:14:19.7021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":645,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/g3-DyJI5G8A.gif","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/g3-DyJI5G8A.gif HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 620532\r\nlast-modified: Mon, 19 May 2025 12:45:19 GMT\r\netag: \"682b27df-977f4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":620532,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 349 x 334","md5":"263357386b9a3d1ae01b7d0d5f7090dd","sha1":"76a57248a95e416e03a7ed707317d595555b6dcd","sha256":"1bd1a07cbaf040cb26c00078fe6e667fe1ff165da03642ec538fc296d86e52a6","sha512":"0c3d10a6686b1a1375a15fe54a8c8dd6057f06f71f0c3ae264cb5d5b640f0c5b03993e198d56fb708a98428973a5ddca8f0fa5052f9d96aea7225266c1c976e4","ssdeep":"12288:vGfmlIJ59de4+NsfzFyA3HTYttt8EpgsMeG2NUAHP4r4BrIIClc5:vOmlIJn+NKFDktBgzr2ui4r4GM","tlshash":"63d4239ed462c339dd26b2b83e09dcbd9d1f208f598c53b7fdd095cc69c022b615a229","first_seen":"2026-03-27T17:14:19.704051Z","last_seen":"2026-03-27T17:14:19.704051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":1399,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/ppc-DSn0zxgp.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/ppc-DSn0zxgp.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 10153\r\nlast-modified: Mon, 19 May 2025 12:46:41 GMT\r\netag: \"682b2831-27a9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10153,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 199x234, components 3","md5":"041b281f6403413b00f235f7fe648c80","sha1":"a37bf31cf50bd86bba3e79e6799a80857e96ddec","sha256":"317ff4b95b665907c036357893b0d0d1a67b24e14984f71cfda20dd8f4096d96","sha512":"1dad3c221ee38da65f2d56de3b193a29d938a4162a94af4c5f50b0fc2ecabe229d13c3125e673b8cd8020be20e2c02f70c05585cf7518da0850f2e9170fa5c7e","ssdeep":"192:Befiamprqeq/E2+ntYWq01LO690OT4PuqbpRZBkZz:Beflt/XsLO690OT/epRQx","tlshash":"89229eca43275ce36bdd5722d7320f830345d75d514456bb58a690f1fee6c0da0d0b96","first_seen":"2026-03-27T17:14:19.706211Z","last_seen":"2026-03-27T17:14:19.706211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1577,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/registerSW.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /registerSW.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 134\r\nlast-modified: Mon, 19 May 2025 12:47:16 GMT\r\netag: \"682b2854-86\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1872c500de691dce40960bb85481de07","sha1":"b83dfcba8d2c57ca8837324bf395f34748033a50","sha256":"9742073ef7fc795e7673d98f272992843298426a0ffd8cb3507784df5143608b","sha512":"bf592ecb654fd8c3dba5db1816c3e454d72e3ef9cf078ca71314b68782e8f564b585ef21d7ca0b4a69540d2843ec713058d86cf40419b6b099f58df5f6f82041","ssdeep":"","tlshash":"2cc02b4fca4dc93e0830e0324c0b7b03331f0385c080049007f2030850c3414d1ae481","first_seen":"2023-03-11T15:21:23Z","last_seen":"2026-04-26T05:52:33.488226Z","times_seen":7462,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/bg.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/style-BluMq3Q1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 78583\r\nlast-modified: Mon, 19 May 2025 12:47:04 GMT\r\netag: \"682b2848-132f7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 1564, 8-bit/color RGBA, non-interlaced","md5":"fa1c5531a59b5a34f0a1098dee4aa0b2","sha1":"9e334bb9422daa94df11304ba1da9d5e58b992fb","sha256":"7aa91d94ce726cc907f4994544691d22390a8460c57459001998c2565bdce5f6","sha512":"f832835c4bb4d31cb8890c48b57a7c20988f407a7391bc0b8d50cc486c997bb50657ceb41befc53bf86f61b085fc0bb1b93eadb4cbcf0cb2565fd4830093ddb7","ssdeep":"1536:/IDl3bUbskgfGpVzruOWp2uQ1Y25BbpgNdJp9aPQTmO+1aYf4dya:g2YkgebWp2uvgBBQSO+NQr","tlshash":"d97301c85e34af2b4d216dd263b6304e8dd681d85ac7cc8e786d365a80714a06fb3e97","first_seen":"2025-07-12T10:13:04.961608Z","last_seen":"2026-03-27T17:14:19.708983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/api/cfgs","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /api/cfgs HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 May 2025 13:30:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3268-14ea\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5354,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"1b7bbe237909b11cd80fba7e8aff7b66","sha1":"ae31fea6dcefb1cf9deab9e638a4df432187a1b0","sha256":"a90c1a4d628a84bb0a1d1e6081fc1f5695d88762bc6cb6b1df7bdc06c81263df","sha512":"e0d330bcb03e56ed48f2e8c1e054ce88976c757db132cedcf71d6f8135d20e70050b61a8127853349ccbe6404e932467888b8aa89699e6f701896e60913d29c8","ssdeep":"96:fHD0yUDO0yUDWAQWPHE4IOOzZDCZydHRH/cpbIT/KsaiqDSFUX524Jd52MJ3KJeB:r9SO9SWAK4NZZCxfcpbITKsapDic524h","tlshash":"2bb186bb6df0847a0e95011a2d5ff5087d625287c33ad8003bdd83e84f41fa6c66bea4","first_seen":"2026-03-27T17:14:19.710571Z","last_seen":"2026-03-27T17:14:19.710571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/route-block-B_A1xBdJ.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/route-block-B_A1xBdJ.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nlast-modified: Mon, 19 May 2025 12:46:47 GMT\r\netag: \"682b2837-1b\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-26T01:02:47.685102Z","times_seen":634,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/login-D_heD6Fa.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/login-D_heD6Fa.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:29:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3249-a2b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2603,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2602)","md5":"75624bf776ad03758080d0145f20f742","sha1":"073f7ad48e8ab65c0744c1c54fdb861ca0c1ecc1","sha256":"963beb984cf57b617e8bc6dcac2f99366930a507e5464924a1a02838c11d0f35","sha512":"b6b3cbb7b393d75c8160e90be018bd5be373d3fd0c8728ef73455366e2a352fcccf98fb2df838103a10837358c41723777ad85adda20e45f47e5af10bccba62d","ssdeep":"","tlshash":"b2519838b41e8974a76288e478912c05310dd76ee216ef9d93be4f103ed1e35a359315","first_seen":"2026-03-27T17:14:19.691413Z","last_seen":"2026-03-27T17:14:19.691413Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/route-block-B_A1xBdJ.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/route-block-B_A1xBdJ.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nlast-modified: Mon, 19 May 2025 12:46:47 GMT\r\netag: \"682b2837-1b\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-04-26T01:02:47.685102Z","times_seen":634,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeect.com/wp-content/uploads/2024/01/Upcity-Top-Agency-1-300x300.png","fqdn":"effeect.com","domain":"effeect.com","tld":"com"},"ip":{"addr":"165.140.69.238","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whm.effeect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:21:24 GMT","end":"Wed, 20 May 2026 01:21:23 GMT"},"fingerprint":{"sha1":"EA:AC:C8:06:90:39:B8:1E:23:68:35:C2:8F:1E:42:25:B8:E7:BB:F9","sha256":"21:7F:29:C9:74:7D:7D:3E:93:AB:2A:00:21:55:FA:B0:D4:94:1B:35:4D:C2:27:DD:18:7C:6E:A0:3D:F3:79:C0"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/Upcity-Top-Agency-1-300x300.png HTTP/1.1\r\nHost: effeect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 27 Mar 2027 23:13:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Jul 2025 16:00:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37573\r\ndate: Fri, 27 Mar 2026 17:13:51 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"332a63f406540ed37173fd794462eeb5","sha1":"3e52afe34aea82a5cb5f585306adecb77ea538f9","sha256":"ce93f67fe91260eb6439e73e5062afef3a7e3117e884cd86d6b04f32c7fa3807","sha512":"668928b2e42efd28ec00e8d2585d52689023f049e4a90c3e4e9f5ff99b19570a385dd241eae845a580651394d19045e449c9741f24bba5adfb185f42d5d4305c","ssdeep":"768:lKtXtEHQMn1B/4ASbfGRgtJGXjZu8cztLjtpJVq75sr3bGp2D:kwHQMfgZ4gtMjN0jBMUD","tlshash":"6bf2f22fae96f90e401058cca6501005e11a93b798b650afb4ff5c8f7f646a715c27db","first_seen":"2026-03-27T17:14:19.712728Z","last_seen":"2026-03-27T17:14:19.712728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":314,"dns":40,"connect":140,"send":0,"wait":287,"receive":81,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/favicon.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:54.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1248\r\nlast-modified: Mon, 19 May 2025 12:47:06 GMT\r\netag: \"682b284a-4e0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"01764971e41f2dfec22fec88c1359b99","sha1":"358a33dcd1a61aaaafe66b62bd88c63e7b1e650b","sha256":"a33c5ff6dc61aafd55b7c51d8965666534977bdbf0da765048d7a7c7080fb6c2","sha512":"5e3aca9fe946e6190e0eefff2b93a5678156bf442f47e73af1adda3be95e158e1f08628fc7d4bebdba4e4e48fcaa6d9c8839d949e275452da4c62aa0ec0a765b","ssdeep":"","tlshash":"262187d7775d2731a9f7c84b91699507c44054ac32127201df6bec0bcdff6104647729","first_seen":"2026-03-27T17:14:19.714246Z","last_seen":"2026-03-27T17:14:19.714246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2927,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BlEpahbc.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-BlEpahbc.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-CknB85J2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3210-2cb3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11432)","md5":"0c92032d68f77b474f0a06cedbf55090","sha1":"fa37547f2c55f8dd3ef9cc2290769e9a33ed5f65","sha256":"671c5011d7f9b2562300fbbfcee9ac39c7d065ad8f6bb7026198922dc8b1c955","sha512":"fe67a3420c35100fddfa3c4c53f356ec603898926ef1dcc4f852bd70f470dc0c8c867d203bbf610b7cb94771aefbe8b56fcea69ee65af07e42f6ce1bbb89b7ff","ssdeep":"192:apaMMxeCXqdkvZx1kjVVUpe/SkVC4r0QGgc3gGDGoCGomGeCGqsmFXIUoOACamhq:8Oe2qdkRvOzURkVC4rzjgilmS7rauJ3o","tlshash":"bb32e71fd626577c8a334098398a6d04b2055fafd390d652adec891917e0d3893bfbf8","first_seen":"2026-03-27T17:14:19.732294Z","last_seen":"2026-03-27T17:14:19.732294Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/register-C-BQk5m3.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/register-C-BQk5m3.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3258-1502\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5377)","md5":"fd10da0941b889ff046f4986a2fac59e","sha1":"75b3905aa91ebece54596314fcd2d306ab700f57","sha256":"f6f6e554b3a3921d7c49d0c2b22386f9e38c98172c0a6e02fcf00c8618bbaaaf","sha512":"b8ab56925a79bb9c1829bbe6d1abc5eb9c70138c8280c0cc4e3a1f2deca3c058ef9195c56004f19598315f0611563cfa49f412bf4134eb20b6fe93590d0a05d9","ssdeep":"96:E0qe/9SioepH8qUkiafixtfiYsksPxieIPom3KTuXZmg0qOSO3d5XR4CAL9RzXuq:TlF48/UkbfGfqXPxoPoiKTuX0g0qOxXq","tlshash":"e1b16e9dd00bcdbb4c96b4d978544001b14be77ba2274861f7bc8f6c26d7fa2a219722","first_seen":"2026-03-27T17:14:19.73589Z","last_seen":"2026-03-27T17:14:19.73589Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/dialog-KlsjEQUn.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/dialog-KlsjEQUn.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 850\r\nlast-modified: Mon, 19 May 2025 13:28:38 GMT\r\netag: \"682b3206-352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (849)","md5":"346f70bcd91b56e54b95d773203ddadf","sha1":"4d153551e22186311e49cc99f5c21944b7c0b7f2","sha256":"af8045789f47775c62705f2a7689012afdadfb0e4cf76c50365826a59ea69215","sha512":"fe1397ffccf24b5c354c12a06c4de301ce115e4d42afd0bfca249b5dbc4523c9818ff84943f336bfa65e6f4b4e6fe22a294a814634eaf1a7040c7ac49c15ba64","ssdeep":"","tlshash":"3301eb8830c0237fc25aa079f09f854ad3990a20ab33dec5f658598776ad840f37de94","first_seen":"2026-03-27T17:14:19.738941Z","last_seen":"2026-03-27T17:14:19.738941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/smm-DR5Xz8M4.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/smm-DR5Xz8M4.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 11238\r\nlast-modified: Mon, 19 May 2025 12:46:51 GMT\r\netag: \"682b283b-2be6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11238,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 199x244, components 3","md5":"dc289b2fcd851ad238d2f443575efb02","sha1":"9d124af6b7018be6224db26018d2917e01c8761c","sha256":"734b43cff51273887bf971b5ab8fcd59cfc28abbcd5ee5f1efde915b90bea924","sha512":"bbe1b0f0c2225043cb2b353fb5222685582b10d7faf22a217bf0e9a7821add3ff36abf8709ec278032b2e42773d50427eee76aa1e7a6c87fc68379cc53d05966","ssdeep":"192:+PkaRv3KXYR/V/K6pu2uaW1ZpngD8K+Dj5v0sRxEsDRw8wrPeLq84Btr:Cv3KIR/hK68/H1ZFe9+Dj5vLRM8wD22H","tlshash":"36329f82e9b780ccdf0bd01999ec655263b8f2a65dd9492b0ce6e444ef33444f791c9e","first_seen":"2026-03-27T17:14:19.741315Z","last_seen":"2026-03-27T17:14:19.741315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1581,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/cro-BURd1oBr.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/cro-BURd1oBr.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 16144\r\nlast-modified: Mon, 19 May 2025 12:45:11 GMT\r\netag: \"682b27d7-3f10\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16144,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 204x246, components 3","md5":"d16bd21d37fbcc6d928724a645ee5b6f","sha1":"f3c55447335ccb0ce3bc718771a162d7e487241f","sha256":"9686e80675dba2180c37c65dc5b39ea47e3a35ca00cd132f8c491b6d89c7b05a","sha512":"89ae17cc30b5083b740309a2f86f36879a06120b110166c5cce6807561127b69cc2ec808f3e7befbf0ba57ee8807ef938bd5baa73087df01806aaf9ad639fadb","ssdeep":"384:rG5g1JLUeA0AWkvak0yqA0jMQMjhMTl7agsJe:FPAWyaTyqA0QFhMTkLJe","tlshash":"2772c00bc359486447ce26813d200bab7411d57ae3752e6cee08d198feae8d72a963f5","first_seen":"2026-03-27T17:14:19.744501Z","last_seen":"2026-03-27T17:14:19.744501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1578,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/CONTACT_US-otvhopMd.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/CONTACT_US-otvhopMd.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 8580\r\nlast-modified: Mon, 19 May 2025 12:45:09 GMT\r\netag: \"682b27d5-2184\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"65e07aabe35cf5a03c63533ba6b762be","sha1":"27548ea226902ea35daae6f72b353edde042959c","sha256":"cb3253578a392395c54b389c2435a9993b7a9dfdaf7d92781df9b28bcc174296","sha512":"79041d03d75d62c31144357120f4943092bf74558a85711de8a5daddd231b9c50c0ba0df31ce815423b921a3114cc979f1569012e612ee618a8a5c0471db6b5d","ssdeep":"192:ISzN7qKd7eeGhJCaAW/J2c0Av5lPrBGrDKNFNy0wC+APy7GBWGxHnzksLwf:PzN+I7eeCAW/J+ARBrMaL3wC+APyMHqf","tlshash":"2902afc23fcf6349a84dd3aea5035395aaaad30c9b90cc447ef5a1621309db3b5c7582","first_seen":"2025-06-17T12:34:20.709955Z","last_seen":"2026-03-27T17:14:19.746761Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BlEpahbc.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-BlEpahbc.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3210-2cb3\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11432)","md5":"0c92032d68f77b474f0a06cedbf55090","sha1":"fa37547f2c55f8dd3ef9cc2290769e9a33ed5f65","sha256":"671c5011d7f9b2562300fbbfcee9ac39c7d065ad8f6bb7026198922dc8b1c955","sha512":"fe67a3420c35100fddfa3c4c53f356ec603898926ef1dcc4f852bd70f470dc0c8c867d203bbf610b7cb94771aefbe8b56fcea69ee65af07e42f6ce1bbb89b7ff","ssdeep":"192:apaMMxeCXqdkvZx1kjVVUpe/SkVC4r0QGgc3gGDGoCGomGeCGqsmFXIUoOACamhq:8Oe2qdkRvOzURkVC4rzjgilmS7rauJ3o","tlshash":"bb32e71fd626577c8a334098398a6d04b2055fafd390d652adec891917e0d3893bfbf8","first_seen":"2026-03-27T17:14:19.732294Z","last_seen":"2026-03-27T17:14:19.732294Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-D5sDPs4Q.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-D5sDPs4Q.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:29:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b321d-61d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1565,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1564)","md5":"4e28639e613323f25e0fbe981765cced","sha1":"c344dc8d2960bc857f2e1964c774b03232bc7e06","sha256":"41afe78ffb795b33b58877429ef07f6acecd714fddaf8df22014e5c190a4be3b","sha512":"5e5f191055f1e0c657da4d80dfc2bc33ad2f052753a0a2f1fb60446855c2cc5448308e620b11f2c8503cf16a10a029a5c494be0a5524f472ef582a49bc2e49f9","ssdeep":"","tlshash":"3d3123423884d63c2b83d88891188510952e1f0f997423ffd3ba3c3c97fe1997116f1a","first_seen":"2026-03-27T17:14:19.69508Z","last_seen":"2026-03-27T17:14:19.69508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/field-QDO2dlRH.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/field-QDO2dlRH.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3209-599\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1432)","md5":"e6b056e836184afb3c185d9a5900bb5a","sha1":"86857f32581b37ea01d22d2e1fd641c3e70a644a","sha256":"2c6fdd502689c28ede647c70f6d6d7cb2cd53645c3af63ed03099c392972dcfc","sha512":"10e8329884472f8312e63709b30e3ee250cbce111d07a41b7442eda8ceb520659e91ef3d721a0c75315b31f3890a94ad929d9a253169b289e5f418c927fa40e3","ssdeep":"","tlshash":"0d21668cb85b4e7d233328c5784fe88093a767779d2cd0c2f25c8a746b96c648729524","first_seen":"2026-03-27T17:14:19.749524Z","last_seen":"2026-03-27T17:14:19.749524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeect.com/wp-content/uploads/2024/01/Clutch-Top-1-300x300.png","fqdn":"effeect.com","domain":"effeect.com","tld":"com"},"ip":{"addr":"165.140.69.238","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whm.effeect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:21:24 GMT","end":"Wed, 20 May 2026 01:21:23 GMT"},"fingerprint":{"sha1":"EA:AC:C8:06:90:39:B8:1E:23:68:35:C2:8F:1E:42:25:B8:E7:BB:F9","sha256":"21:7F:29:C9:74:7D:7D:3E:93:AB:2A:00:21:55:FA:B0:D4:94:1B:35:4D:C2:27:DD:18:7C:6E:A0:3D:F3:79:C0"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/Clutch-Top-1-300x300.png HTTP/1.1\r\nHost: effeect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 27 Mar 2027 23:13:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Jul 2025 15:20:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10738\r\ndate: Fri, 27 Mar 2026 17:13:51 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"2ab8d84743fc9775c463d55a87fa9f4c","sha1":"c422c2e6909b247b95ffaad24ee34acf171a9ad2","sha256":"5ec876a75efc39abd6f5b93ef9f2ac55357ee5fbda6f6bde80d1e1d4e96377cd","sha512":"246b627660ceb6aef34eee27b60b21f61142d8d7e71e1763383fada6b99d4b9814b4ece01d1574e8c340695ba21e7c1791e3ba5812228cda3d5cba1a9d7d84ca","ssdeep":"192:vaNaRsilNZCXjLOwcfqhXS/qzcsJ+lQaGXsZgQ8xFljsSdyN3aF9Cb+rVNYvSI65:AaRts3SlrVCJRLjsSdyl6BmV6","tlshash":"7722b06035bdcf7d7715022a30c361196595cd8c72984bc6b6ce0c9613e266e1e533f7","first_seen":"2026-03-27T17:14:19.751387Z","last_seen":"2026-03-27T17:14:19.751387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":307,"dns":45,"connect":128,"send":0,"wait":128,"receive":1,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeect.com/wp-content/uploads/2024/04/new-badge20240409-1908317-9kl09f-300x300.png","fqdn":"effeect.com","domain":"effeect.com","tld":"com"},"ip":{"addr":"165.140.69.238","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whm.effeect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:21:24 GMT","end":"Wed, 20 May 2026 01:21:23 GMT"},"fingerprint":{"sha1":"EA:AC:C8:06:90:39:B8:1E:23:68:35:C2:8F:1E:42:25:B8:E7:BB:F9","sha256":"21:7F:29:C9:74:7D:7D:3E:93:AB:2A:00:21:55:FA:B0:D4:94:1B:35:4D:C2:27:DD:18:7C:6E:A0:3D:F3:79:C0"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/new-badge20240409-1908317-9kl09f-300x300.png HTTP/1.1\r\nHost: effeect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 27 Mar 2027 23:13:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Jul 2025 15:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15249\r\ndate: Fri, 27 Mar 2026 17:13:51 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"e94a02716b9757160a0eddad17b4dfaf","sha1":"f16f00e7908c455a7dc28c65a4be7f9e4a5feef5","sha256":"994646a04c8095afff22762191bf5e83dde365bdbd2f8fc75a49a8c64dd6e0f5","sha512":"a7abc2c9f19dc8951987f516dfa5990f68cf7294d2bc4fa203b1c85f4728427ad7c25b4c87deef66a421722aa4ebfdd6ce83326df0416984e1d5fd743f10ec7a","ssdeep":"384:aAf0lUX7IRFs58EQXv8qqdXTwCGckQqzcpW:aAf97os5Btqc8PhQNA","tlshash":"9462bfb2937c0a7c5f54948d485878f0afb2372b73a7f8466dc25451d9781b2713c1ea","first_seen":"2026-03-27T17:14:19.753283Z","last_seen":"2026-03-27T17:14:19.753283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":318,"dns":42,"connect":140,"send":0,"wait":362,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/g1-BxONeQ3w.gif","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/g1-BxONeQ3w.gif HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 389338\r\nlast-modified: Mon, 19 May 2025 12:45:17 GMT\r\netag: \"682b27dd-5f0da\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":389338,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 371 x 314","md5":"548d1b519c8681ad1b900bf0886e4c55","sha1":"87c66d5b90a134e91597e27856709c04b19e106b","sha256":"f1bb96c62f2778df204a25c10f2fc1d6e511854b1527164f1ffb00b96cccf9eb","sha512":"e9b65b7fc748b8eaee1f83825d61a597227278ee7ae9983825d4ac071ec76d7b27aaad08d3c65f103dd06fa777d4e995b69abcf7f217e5c5eb169bbb41e95b2e","ssdeep":"6144:nAfVXXiQDBgP4GI595tXvOCL6TW3Yuagsb/BWH32ZMFPZhdHWT9u/exy:nAfpXiQSP4jDbXZOTW3S9b/B4GZw/cwp","tlshash":"da84020a068cc5977cfce67bdc2fb0661b9615c1283291742779fb8758e19fef4a012a","first_seen":"2026-03-27T17:14:19.755548Z","last_seen":"2026-03-27T17:14:19.755548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T17:13:50.879Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T09:03:11.936341Z","times_seen":14218418,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":9,"connect":27,"send":0,"wait":0,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T17:13:52.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 May 2025 13:30:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3268-14ea\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5354,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"1b7bbe237909b11cd80fba7e8aff7b66","sha1":"ae31fea6dcefb1cf9deab9e638a4df432187a1b0","sha256":"a90c1a4d628a84bb0a1d1e6081fc1f5695d88762bc6cb6b1df7bdc06c81263df","sha512":"e0d330bcb03e56ed48f2e8c1e054ce88976c757db132cedcf71d6f8135d20e70050b61a8127853349ccbe6404e932467888b8aa89699e6f701896e60913d29c8","ssdeep":"96:fHD0yUDO0yUDWAQWPHE4IOOzZDCZydHRH/cpbIT/KsaiqDSFUX524Jd52MJ3KJeB:r9SO9SWAK4NZZCxfcpbITKsapDic524h","tlshash":"2bb186bb6df0847a0e95011a2d5ff5087d625287c33ad8003bdd83e84f41fa6c66bea4","first_seen":"2026-03-27T17:14:19.710571Z","last_seen":"2026-03-27T17:14:19.710571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":61,"dns":1,"connect":27,"send":0,"wait":26,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-awKwGSoh.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-awKwGSoh.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b320b-1357\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4950)","md5":"64b6a49bf516210bab039dfb6bd1f18e","sha1":"d2120bcc56f82e6d8979ce9095df2dd0348a35b1","sha256":"245ea826f60dbdda8d613ba3cb885f2bcbc4dad807025a4f52f8e48eaa6ecbad","sha512":"b397d63b65e1bee97f49af1e45e75ddbdef67a029cb0cff09ac37cc4ec5540ac76980b40d715d0d96787cc6034bd52a561291d5fe0e5e9bad8bd7e58af33073b","ssdeep":"96:iVTmXaalTJawHpVmtARlhRIjvWWW1yDz8fM6iMm37Xo6Daa6+Rha:emXR1JLTmqR/RIbWWxICMq32J+Rha","tlshash":"14a1c6e1fe097d3b4c33fc1855d7511269081bb5d518b3f2e8af188826e61a06af1f75","first_seen":"2026-03-27T17:14:19.758846Z","last_seen":"2026-03-27T17:14:19.758846Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-BVmxB_oI.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-BVmxB_oI.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 910\r\nlast-modified: Mon, 19 May 2025 13:28:52 GMT\r\netag: \"682b3214-38e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":910,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (909)","md5":"677661d9a00caa00759ae9a48122d9dc","sha1":"311abe2c626e5c693b832a99d2de4382a896862a","sha256":"098a6272e8bf6181dc6ddd75f6cbb71a57c54bf16902b877b4e6d47455255dc0","sha512":"cc846f6f7407861f408fc4120ee957601800336db5761087ba610edd0d3dd5bdf024a85f0c34dd10fb2b2c5f73ef7516202aa264857d370acd2580bcf8e4a7fc","ssdeep":"","tlshash":"91112f4c64c5cd30a20b46ccb04495517d581f4ea2acc7e1a2b7c9987bf0aad7059f2e","first_seen":"2026-03-27T17:14:19.697874Z","last_seen":"2026-03-27T17:14:19.697874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-cE1Dhfbi.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-cE1Dhfbi.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3217-7d5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2004)","md5":"ce8115540ffb0b16deb5fe8499792655","sha1":"61e9b7345df0a9531667d5641d705f13a6ea5204","sha256":"d442b688c9a799a4612395188d735cfc6da252abaced22fec879b7374b616fdd","sha512":"b5908f28d6a55be5f267b0bb28efcde8d6fc24c6dc01fcf00998265f969dbfbc87eb28837611cf891021c568432f7b769feab6ae2da4e4ada5b4117c87041438","ssdeep":"","tlshash":"a241948874acda7c9376b48454184c29c5451f9f7532c4e6d22b741b4be9a80fd3be58","first_seen":"2026-03-27T17:14:19.760794Z","last_seen":"2026-03-27T17:14:19.760794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-awKwGSoh.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-awKwGSoh.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b320b-1357\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4950)","md5":"64b6a49bf516210bab039dfb6bd1f18e","sha1":"d2120bcc56f82e6d8979ce9095df2dd0348a35b1","sha256":"245ea826f60dbdda8d613ba3cb885f2bcbc4dad807025a4f52f8e48eaa6ecbad","sha512":"b397d63b65e1bee97f49af1e45e75ddbdef67a029cb0cff09ac37cc4ec5540ac76980b40d715d0d96787cc6034bd52a561291d5fe0e5e9bad8bd7e58af33073b","ssdeep":"96:iVTmXaalTJawHpVmtARlhRIjvWWW1yDz8fM6iMm37Xo6Daa6+Rha:emXR1JLTmqR/RIbWWxICMq32J+Rha","tlshash":"14a1c6e1fe097d3b4c33fc1855d7511269081bb5d518b3f2e8af188826e61a06af1f75","first_seen":"2026-03-27T17:14:19.758846Z","last_seen":"2026-03-27T17:14:19.758846Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/seo-bI0Boa4z.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/seo-bI0Boa4z.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 18006\r\nlast-modified: Mon, 19 May 2025 12:46:49 GMT\r\netag: \"682b2839-4656\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18006,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 201x264, components 3","md5":"fa1b0344f38cdeb62c9367bbdd2be3ce","sha1":"ceb8b1172c37eab026ec1cbeb73983c526aa86b2","sha256":"411247746690eb7d5563c7eb211948d72d6ba8c4d48b0833a2bebfbe6bc07415","sha512":"2218709029a054346d726df600fb8eace88ebb51d1f5fa7bebdd425b52c0f03b8d227f04239b1208aeef984cd519981066adf713897bdc227792c84a25e3b4a9","ssdeep":"384:7tS6uVZxyZTgnb4hazZpOPXdfYmnhsS3IR7XD/ChDa1mmmmmmZ4LRvxeYmmmmmm8:7tzuHggb4gVpOPCmhH3OT2a81vUz","tlshash":"7982d0d945221dca0e53299a4eb9bd373a0258fecd0763bd310e8e15f902166634b63d","first_seen":"2026-03-27T17:14:19.775935Z","last_seen":"2026-03-27T17:14:19.775935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1579,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/g5-BQT9oqil.gif","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/g5-BQT9oqil.gif HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 618406\r\nlast-modified: Mon, 19 May 2025 12:45:21 GMT\r\netag: \"682b27e1-96fa6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":618406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 350 x 400","md5":"61d29fdc74fde990526e244344d06506","sha1":"0244fb58541a6923a238fd807de228ef36a0bee6","sha256":"fc9ac926f5daec0981b420362ad7eab231b2be0300befec4b9859f9771784ada","sha512":"87b96a12f01d1d1c683fc02fb73591b55665d3b9b695189754170e19471ad55514ee0dbb3a2ad5841738343a3647e76247db195b9b57782de040a5db8c1860a9","ssdeep":"12288:H4TgwoHJou03Pa9wttxiebJcZ2w5MU+bIVzK37CNX1hdWV3wvh4qHb7Y6TCWwtxN:kopn03Pa9wtWe6MYMUrK37CN/r5/7pTu","tlshash":"65d42366d50be615f3147e31be485a458fd0a8d17c88f339b8229c72e8606ee14b6dfc","first_seen":"2026-03-27T17:14:19.778507Z","last_seen":"2026-03-27T17:14:19.778507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1568,"receive":2950,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/register-C-BQk5m3.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/register-C-BQk5m3.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3258-1502\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5377)","md5":"fd10da0941b889ff046f4986a2fac59e","sha1":"75b3905aa91ebece54596314fcd2d306ab700f57","sha256":"f6f6e554b3a3921d7c49d0c2b22386f9e38c98172c0a6e02fcf00c8618bbaaaf","sha512":"b8ab56925a79bb9c1829bbe6d1abc5eb9c70138c8280c0cc4e3a1f2deca3c058ef9195c56004f19598315f0611563cfa49f412bf4134eb20b6fe93590d0a05d9","ssdeep":"96:E0qe/9SioepH8qUkiafixtfiYsksPxieIPom3KTuXZmg0qOSO3d5XR4CAL9RzXuq:TlF48/UkbfGfqXPxoPoiKTuX0g0qOxXq","tlshash":"e1b16e9dd00bcdbb4c96b4d978544001b14be77ba2274861f7bc8f6c26d7fa2a219722","first_seen":"2026-03-27T17:14:19.73589Z","last_seen":"2026-03-27T17:14:19.73589Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-cE1Dhfbi.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-cE1Dhfbi.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3217-7d5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2004)","md5":"ce8115540ffb0b16deb5fe8499792655","sha1":"61e9b7345df0a9531667d5641d705f13a6ea5204","sha256":"d442b688c9a799a4612395188d735cfc6da252abaced22fec879b7374b616fdd","sha512":"b5908f28d6a55be5f267b0bb28efcde8d6fc24c6dc01fcf00998265f969dbfbc87eb28837611cf891021c568432f7b769feab6ae2da4e4ada5b4117c87041438","ssdeep":"","tlshash":"a241948874acda7c9376b48454184c29c5451f9f7532c4e6d22b741b4be9a80fd3be58","first_seen":"2026-03-27T17:14:19.760794Z","last_seen":"2026-03-27T17:14:19.760794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/favicon.ico","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 19 May 2025 12:47:06 GMT\r\netag: \"682b284a-3c2e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2f612055fa28e30dbc4b6cb4eaf77aec","sha1":"0e25db6b25f2d853657b77737878263de2fc33f7","sha256":"9377b13d485a3c65ec0aff2aab78763df1a9ea01d15f011a98f6880fc871c980","sha512":"be49fe4914b04b75b8a7833bcff8ebef6884d3c06fabb4d02680952229861f868be8fb455ec8a5fc71add821461f0b8b5b10e646082bfc3abc88d68d4a0d775f","ssdeep":"48:bgYsx61Krj3kObxJt/0smF96zHvxNPLplTu:sDAKrj0ObxJ10smL6LnHTu","tlshash":"1362819239d4103df1cd063239e6cd29317a5b5c063b5d192d01bd42b6be1afa7f51d8","first_seen":"2025-06-17T12:34:20.716286Z","last_seen":"2026-03-27T17:14:19.781205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-CknB85J2.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-CknB85J2.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3219-53f6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343914,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41718)","md5":"506a6ab5f68d10b61d17040e0cc87e41","sha1":"b468009dfc3307170056998dfcc96efd2a9f6d93","sha256":"c088d9fca5d18994f5fd0e543ed1cfe7f1a0e5ecd55f189ac4f6554227700747","sha512":"25bbd7c307b16a3ca9d6b0a363623dda49251c3a2b31398f5674a88e2287eff6caed74eb38f99c516a68e44dc660d44592a22afb6828ab80f9b1f5df6afdf7f4","ssdeep":"6144:SvvF7J2u4Rwit5oqd8TY6lM9NhwGmTk3/ZZ2BxognmEh8fvsN+m:SKu6pXvRhwGlZZ2roWosN+m","tlshash":"62746be63586783503ba0af5497f0202f33c5914344ec7e0f26ed99a3a7285996b7f6c","first_seen":"2026-03-27T17:14:19.78346Z","last_seen":"2026-03-27T17:14:19.78346Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/api/langs","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /api/langs HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 May 2025 13:30:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3268-14ea\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5354,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"1b7bbe237909b11cd80fba7e8aff7b66","sha1":"ae31fea6dcefb1cf9deab9e638a4df432187a1b0","sha256":"a90c1a4d628a84bb0a1d1e6081fc1f5695d88762bc6cb6b1df7bdc06c81263df","sha512":"e0d330bcb03e56ed48f2e8c1e054ce88976c757db132cedcf71d6f8135d20e70050b61a8127853349ccbe6404e932467888b8aa89699e6f701896e60913d29c8","ssdeep":"96:fHD0yUDO0yUDWAQWPHE4IOOzZDCZydHRH/cpbIT/KsaiqDSFUX524Jd52MJ3KJeB:r9SO9SWAK4NZZCxfcpbITKsapDic524h","tlshash":"2bb186bb6df0847a0e95011a2d5ff5087d625287c33ad8003bdd83e84f41fa6c66bea4","first_seen":"2026-03-27T17:14:19.710571Z","last_seen":"2026-03-27T17:14:19.710571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/pwa-192x192.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /pwa-192x192.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 May 2025 13:30:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3268-14ea\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5354,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"1b7bbe237909b11cd80fba7e8aff7b66","sha1":"ae31fea6dcefb1cf9deab9e638a4df432187a1b0","sha256":"a90c1a4d628a84bb0a1d1e6081fc1f5695d88762bc6cb6b1df7bdc06c81263df","sha512":"e0d330bcb03e56ed48f2e8c1e054ce88976c757db132cedcf71d6f8135d20e70050b61a8127853349ccbe6404e932467888b8aa89699e6f701896e60913d29c8","ssdeep":"96:fHD0yUDO0yUDWAQWPHE4IOOzZDCZydHRH/cpbIT/KsaiqDSFUX524Jd52MJ3KJeB:r9SO9SWAK4NZZCxfcpbITKsapDic524h","tlshash":"2bb186bb6df0847a0e95011a2d5ff5087d625287c33ad8003bdd83e84f41fa6c66bea4","first_seen":"2026-03-27T17:14:19.710571Z","last_seen":"2026-03-27T17:14:19.710571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/field-QDO2dlRH.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/field-QDO2dlRH.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3209-599\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1432)","md5":"e6b056e836184afb3c185d9a5900bb5a","sha1":"86857f32581b37ea01d22d2e1fd641c3e70a644a","sha256":"2c6fdd502689c28ede647c70f6d6d7cb2cd53645c3af63ed03099c392972dcfc","sha512":"10e8329884472f8312e63709b30e3ee250cbce111d07a41b7442eda8ceb520659e91ef3d721a0c75315b31f3890a94ad929d9a253169b289e5f418c927fa40e3","ssdeep":"","tlshash":"0d21668cb85b4e7d233328c5784fe88093a767779d2cd0c2f25c8a746b96c648729524","first_seen":"2026-03-27T17:14:19.749524Z","last_seen":"2026-03-27T17:14:19.749524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-C3QAJpSF.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-C3QAJpSF.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/assets/index-BlEpahbc.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3215-713\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1810)","md5":"e26836a7f8641851ec6d4ae9770f8f13","sha1":"dab08046346186f42ebe3eab01affc795f5f88cd","sha256":"ff4b06f7d61f98ca78aab4aa4dfeace30e7dffbf742630e83da3c24e0606aaf0","sha512":"7545b3828b08f1d8cc01d5db4fe4060c11749c4ed00d4717d39b727eae8ea2b468c3a93edca8f4894cafc2f5f0bb9bc951ef8152c49a494cd835ed4ab4e2a785","ssdeep":"","tlshash":"8031854f1d9843720c8784fde05ae062a9ad151c7da051e0c09cbe1a615ffc09a9be1c","first_seen":"2026-03-27T17:14:19.785383Z","last_seen":"2026-03-27T17:14:19.785383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/email-vlo7qSm2.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/email-vlo7qSm2.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 21040\r\nlast-modified: Mon, 19 May 2025 12:45:13 GMT\r\netag: \"682b27d9-5230\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21040,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 199x217, components 3","md5":"d7d3f2874a9ed3ba8da8e8fee4894026","sha1":"93cf630e944ae0e2f6a8b0c7d53da2971fac5042","sha256":"041d150965aa6765b8d7594a98af6106b308a31d6dd3e8622bef7e88ce5d4af6","sha512":"0d989f8e56ad7584e6907d35b39ba20e1da3197762b7bd151d5914f16782ef2bd9e788cf21ac377b361f790d22feaa373c1b224ebcffa35c87f301ab02e7fc88","ssdeep":"384:rFDpEC9UoqTnOjTv7nQIu1oo2Dlnbi0P+++tzzFuEHff9SpzdVGjXjHf:rFDCC2nO/zQIB78F59S/VGf/","tlshash":"d492c04971ff5faee05c6a90f0709fda4fc9a9504ba9c708d31f7952e3a1548a18c327","first_seen":"2026-03-27T17:14:19.787236Z","last_seen":"2026-03-27T17:14:19.787236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1574,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/content-CSj9srSW.png","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/content-CSj9srSW.png HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 20626\r\nlast-modified: Mon, 19 May 2025 12:45:10 GMT\r\netag: \"682b27d6-5092\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20626,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 199x235, components 3","md5":"2cb5ca174e55659bec45d7c8b9edfc5f","sha1":"7c9b371ef0eb07ac0136eca70a0c0373f7cca62f","sha256":"693c91da321d115b53d7e4c42303ddf1bf293682d068ca0d1244b7f5a867b0e2","sha512":"b1102036878f4cfd0069aedc6187390ce256e58016e284410d01cbb7284b97d3ae6f900e7aa4771d87835b646585dad556ee4a62125990d3b5e393096da617ba","ssdeep":"384:6P0g7c8efyhURN++NsRKtWsnX/FTVCdgXpERw7EZxaTbNKCBe61gH:6sg7PeqWRN++CRKtWsnX/FTUEme7EZxr","tlshash":"7692d1d9c6252f42efcfabb9e16303683ac17d2e60905d1254a71a27df38cc46985136","first_seen":"2026-03-27T17:14:19.78907Z","last_seen":"2026-03-27T17:14:19.78907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1571,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/g4-DIkr_feX.gif","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/g4-DIkr_feX.gif HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 933766\r\nlast-modified: Mon, 19 May 2025 12:45:20 GMT\r\netag: \"682b27e0-e3f86\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":933766,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 430 x 441","md5":"93ac90ab67e5616a1e00baaa575bc32f","sha1":"f0cccc4a3ecfd30de99814ae605e8874323c3769","sha256":"420a4d56488ad05c2a2ed2926ff41f99b1c11fbebee728e02e058de92359668b","sha512":"6788de9b45f2ba1bb734095737bee9ff9702a83f43e841ef9ad37bf2a720317b26e295660b97bb3f0f4c0c1f703b89599ffb8b2d1ee47ebcea7f979b7dde7ee1","ssdeep":"24576:Vf8mwqRVHxfzArgGvgOEKvOiPkC9ppmWt3m:Vf8SmM+ciOqJ5t2","tlshash":"a01523bcb2cb414af618987567d3c1ce1d40a0deece187e1e5d57c98e5b3ab424be244","first_seen":"2026-03-27T17:14:19.791045Z","last_seen":"2026-03-27T17:14:19.791045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1570,"receive":2111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/style-BluMq3Q1.css","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/style-BluMq3Q1.css HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://effeectlogin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 May 2025 13:15:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b2f09-24d39\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150841,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"9ae71175e740e16db643b1f7e653002d","sha1":"2e1e8418874e52bc93e1835ffe77b239b05095ec","sha256":"3801831f4e324af8ebac557f71ba3efe6ebdd3b8ad2849ee3571150957053032","sha512":"d825251894f77656cc4c6448a454bb4c5a45c6b5d8f4771b3b5ea2c18b5f40e7779d57dde1ff59fc31de1d35a964b4cab672971378b3fb0dd0d3b60e20458e8a","ssdeep":"1536:YcIyNBi3MFYaQj7FCwsBlDOFIxuVoxbTt8ViNP422nPkiH4aAQenbh/wK8+VJp:YYNIClDsIxuVSbTt8ViNA22sE4aALbv7","tlshash":"a0e3faa5e6c451bc6f2be1a5ab8796ccf23cf570ce01eaa1f10151190ec77f71523a2a","first_seen":"2026-03-27T17:14:19.793423Z","last_seen":"2026-03-27T17:14:19.793423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/dialog-KlsjEQUn.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/dialog-KlsjEQUn.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 850\r\nlast-modified: Mon, 19 May 2025 13:28:38 GMT\r\netag: \"682b3206-352\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (849)","md5":"346f70bcd91b56e54b95d773203ddadf","sha1":"4d153551e22186311e49cc99f5c21944b7c0b7f2","sha256":"af8045789f47775c62705f2a7689012afdadfb0e4cf76c50365826a59ea69215","sha512":"fe1397ffccf24b5c354c12a06c4de301ce115e4d42afd0bfca249b5dbc4523c9818ff84943f336bfa65e6f4b4e6fe22a294a814634eaf1a7040c7ac49c15ba64","ssdeep":"","tlshash":"3301eb8830c0237fc25aa079f09f854ad3990a20ab33dec5f658598776ad840f37de94","first_seen":"2026-03-27T17:14:19.738941Z","last_seen":"2026-03-27T17:14:19.738941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"effeectlogin.com/assets/index-C3QAJpSF.js","fqdn":"effeectlogin.com","domain":"effeectlogin.com","tld":"com"},"ip":{"addr":"165.154.239.203","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://effeectlogin.com/","date":"2026-03-27T17:13:52.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effeectapp.com","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Mon, 19 May 2025 13:07:11 GMT","end":"Fri, 14 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"25:D2:86:94:59:C2:BC:E5:E3:22:47:19:35:C9:35:6A:14:47:39:84","sha256":"89:D5:BE:EA:24:8B:9E:06:E1:8E:25:47:ED:B9:B3:18:D2:7B:9D:78:E1:6E:C4:5B:E8:BA:CE:38:A4:BC:34:72"}}},"request":{"raw":"GET /assets/index-C3QAJpSF.js HTTP/1.1\r\nHost: effeectlogin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://effeectlogin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 27 Mar 2026 17:13:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 13:28:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682b3215-713\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1810)","md5":"e26836a7f8641851ec6d4ae9770f8f13","sha1":"dab08046346186f42ebe3eab01affc795f5f88cd","sha256":"ff4b06f7d61f98ca78aab4aa4dfeace30e7dffbf742630e83da3c24e0606aaf0","sha512":"7545b3828b08f1d8cc01d5db4fe4060c11749c4ed00d4717d39b727eae8ea2b468c3a93edca8f4894cafc2f5f0bb9bc951ef8152c49a494cd835ed4ab4e2a785","ssdeep":"","tlshash":"8031854f1d9843720c8784fde05ae062a9ad151c7da051e0c09cbe1a615ffc09a9be1c","first_seen":"2026-03-27T17:14:19.785383Z","last_seen":"2026-03-27T17:14:19.785383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}